{"id":170699,"date":"2026-05-15T06:24:37","date_gmt":"2026-05-15T04:24:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere"},"modified":"2026-05-15T06:24:37","modified_gmt":"2026-05-15T04:24:37","slug":"uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","title":{"rendered":"Haavatavus Eximis, mis viib koodi kaugk\u00e4itamiseni serveris.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Exim'i postiserveris on tuvastatud kriitiline turvavahe (CVE-2026-45185), mis v\u00f5imaldab kaugjuhituna koodi t\u00e4itmist serveris. Probleem ilmneb Exim 4.97 haru puhul, kui see on kokku pandud GnuTLS raamatukoguga (\"USE_GNUTLS=yes\") ning see on k\u00f5rvaldatud Exim 4.99.3 v\u00e4ljalaskes. OpenSSL'i ja teiste mitte-GnuTLS raamatukogudega kokku pandud versioonid ei ole haavatavad. <\/p>\n

Probleem tuleneb juba vabastatud m\u00e4lu juurde p\u00e4\u00e4semisest (use-after-free) GnuTLS taustal ja seda saab \u00e4ra kasutada serveritega, mis toetavad laiendust \"ESMTP CHUNKING\" ja k\u00e4sku BDAT, et saata e-kirja keha t\u00fckkidena, selle asemel et edastada see jagamatud plokkidena koos DATA k\u00e4suga. M\u00e4lu sisu kahjustumine protsessis toimub kliendi algatatud TLS seansi enneaegse l\u00f5petamise t\u00f5ttu close_notify k\u00e4su abil, ajal, mil s\u00f5numi keha edastatakse l\u00e4bi BDAT ja sellele j\u00e4rgneb sama TCP-\u00fchenduses \u00fche ploki saatmine selgelt mitte\u0161ifreeritud kujul. <\/p>\n

Saades GnuTLS-i backend'i kaudu close_notify k\u00e4su saamisel k\u00e4ivitub TLS-seansi katkestamise funktsioon, mis vabastab seansiga seotud puhvrid. Backend'i koodi vea t\u00f5ttu, hoolimata TLS-puhvri vabastamisest, j\u00e4tkab BDAT'i t\u00f6\u00f6tleja andmete lugemist voost ja kutsub funktsiooni ungetc(), mis saadab eba\u0161ifritud andmete edasise saatmise korral \u00fche bait vabastatud puhvri. See bait rikub m\u00e4luhalduri metadata kuhis, mida on kasutatud katsete tegemiseks t\u00f6\u00f6riistade loomisel, mis t\u00e4idavad juhuslikku koodi. serveril<\/a>. <\/p>\n

Alguses genereerisid teadlased AI abil osaliselt t\u00f6\u00f6tava eksploitatsiooni, mis v\u00f5imaldas koodi t\u00e4itmist, kuid see t\u00f6\u00f6tas ainult kasvuhoone tingimustes, s\u00fcsteemides, kus ASLR ja PIE kaitse oli v\u00e4lja l\u00fclitatud, ning teatud versiooniga libc raamatukogust. Seej\u00e4rel tehti katse luua inimeste kaasabil eksploitatsioon, millega \u00f5nnestus \u00fcletada m\u00f5ned raskused ja saavutada m\u00e4lust koti aadressi leke, kuid plaanitud haavatavuse avalikustamise kuup\u00e4evaks ei olnud eksploitatsiooni l\u00f5pule viidud. Haavatavuse avastanud teadlaste arvates ei ole AI-assistendid veel v\u00f5imelised looma eksploitatsioone keerukate toodete jaoks, kuid nad loodavad, et tulevikus suudavad teised teadlased nende t\u00f6\u00f6d l\u00f5pule viia ja kirjutada t\u00e4ielikult toimiva eksploitatsiooni. <\/p>\n

Suuremate distributsioonide versioonid Exim 4.97+ on kasutusel Debian 13, Ubuntu 24.04+, SUSE\/openSUSE, Arch Linux, Alpine Linux 3.19+, ALT Linux p11, ROSA, Gentoo, OpenWRT, Fedora, EPEL (exim ei kuulu RHEL-i vaikerepositooriumisse) ja FreeBSD. Exim GnuTLS-iga koostamine on Debianis ja Ubuntu-s vaikimisi, teistes distributsioonides on see vajalik t\u00e4psustada. Haavatavuse blokeerimiseks saab kasutada \u00fcmberhiilimist, keelates CHUNKING laienduse, muutes chunking_advertise_hosts seadistust konfiguratsioonifailis.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-45185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 Exim 4.97 \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 GnuTLS («USE_GNUTLS=yes») \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Exim 4.99.3. \u0421\u0431\u043e\u0440\u043a\u0438 \u0441 OpenSSL \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 GnuTLS, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free) \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170699","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eximi haavatavus, mis v\u00f5imaldab kaugelt koodi t\u00e4itmist serveris | ProHoster","description":"Postiserveris Exim on tuvastatud kriitiline haavatavus (CVE-2026-45185), mis v\u00f5imaldab kaugtarbijal saada serveris koodi t\u00e4itmist. Probleem ilmneb alates Exim 4.97 harust, koostamisel GnuTLS teegiga (\"USE_GNUTLS=yes\") ja on k\u00f5rvaldatud v\u00e4ljundis Exim 4.99.3. Koostamised OpenSSL-i ja teiste teegidega, mis ei ole GnuTLS, ei puutu haavatavusele. Probleem tuleneb juba vabastatud m\u00e4lu kasutamisest (use-after-free) selles.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Exim, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster","og:description":"\u0412 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-45185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 Exim 4.97 \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 GnuTLS ("USE_GNUTLS=yes") \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Exim 4.99.3. \u0421\u0431\u043e\u0440\u043a\u0438 \u0441 OpenSSL \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 GnuTLS, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free) \u0432","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-15T04:24:37+00:00","article:modified_time":"2026-05-15T04:24:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=170699"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170699\/revisions"}],"predecessor-version":[{"id":170706,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170699\/revisions\/170706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=170699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=170699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=170699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}