{"id":181665,"date":"2026-05-22T18:24:54","date_gmt":"2026-05-22T16:24:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost"},"modified":"2026-05-22T18:24:54","modified_gmt":"2026-05-22T16:24:54","slug":"vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","title":{"rendered":"FreeBSD-s on lahendatud 4 haavatavust, mis v\u00f5imaldavad t\u00f5sta \u00f5igusi, ja \u00fcks eemalt p\u00e4\u00e4stetav root-haavatavus.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>FreeBSD-s on lahendatud 7 haavatavust, millest \u00fcks v\u00f5imaldab kaugkoodiga root-\u00f5iguste t\u00e4itmist ja neli t\u00f5sta oma \u00f5igusi s\u00fcsteemis. Haavatavused on k\u00f5rvaldatud FreeBSD uuendustes 15.0-RELEASE-p9, 14.4-RELEASE-p5 ja 14.3-RELEASE-p14. <\/p>\n<ul>\n<li class=\"l\"> CVE-2026-45255 \u2014 bsdinstall'i ja bsdconfig'i installatsiooniprotsessis puudus erim\u00e4rkide v\u00e4ljav\u00f5tmine shell-skripti sees, mis n\u00e4itas kasutajale k\u00e4ivitatavaid traadita v\u00f5rke, mille tulemuseks oli skaneerimine. R\u00fcndaja saab luua vale juurdep\u00e4\u00e4supunkti ja m\u00e4\u00e4rata spetsiaalselt kujundatud v\u00f5rgu identifikaatori (SSID), mis sisaldab shell-konstruktsioone (n\u00e4iteks \u201etest`id`\u201d). Kui kasutaja kutsub esile traadita v\u00f5rke otsimise funktsiooni, k\u00e4ivitavad r\u00fcndaja m\u00e4\u00e4ratud shell-k\u00e4sud kasutaja s\u00fcsteemis juur\u00f5igustega (r\u00fcndaja v\u00f5rku valima v\u00f5i sellele \u00fchenduma ei pea, piisab lihtsalt skaneerimise algatamisest).\n<li class=\"l\"> CVE-2026-45250 \u2014 virna \u00fclet\u00e4itumine setcred s\u00fcsteemikutses, mis v\u00f5imaldab kohalikul mitteprivilegeeritud kasutajal oma koodi t\u00e4itmist kernelitasemel. Probleemi p\u00f5hjustab andmete suuruse vale kontroll bufrisse \u2014 \u201esizeof(gid_t)\u201d asemel on m\u00e4\u00e4ratud \u201esizeof(*groups)\u201d. Setcred s\u00fcsteemikutse jaoks on vajalikud k\u00f5rgendatud \u00f5igused, kuid haavatavus esineb kasutaja edastatud r\u00fchmade nimekirja eraldi bufferisse kopeerimise algkoodis, mis toimub enne \u00f5iguste kontrollimist.\n<li class=\"l\"> CVE-2026-45251 \u2014 juba vabastatud m\u00e4lu (use-after-free) kasutamine select ja poll s\u00fcsteemikutses, mis tekib, kui edastatud failikirje descriptor suletakse enne, kui l\u00f5ime lukustamise l\u00f5petab, oodates select ja poll s\u00fcsteemikutsest failikirjeid. Edukas \u00e4rakasutamine v\u00f5imaldab mitteprivilegeeritud kasutajal koodi t\u00e4itmist kernelitasemel.\n<li class=\"l\"> CVE-2026-45253 \u2014 puuduvad n\u00f5uetekohased parameetrite kontrollid, mis on edastatud ptrace s\u00fcsteemikutsesse PT_SC_REMOTE operatsiooni k\u00e4ivitamisel. Haavatavus v\u00f5imaldab mitteprivilegeeritud kasutajal korraldada juhusliku koodi t\u00e4itmise kernelis, isegi kui sihtprotsess ei oma spetsiaalseid \u00f5igusi.\n<li class=\"l\"> CVE-2026-39461 \u2014 virheellinen pino libcasper-kirjastossa, joka antaa Capsicum-mekanismin kautta eristetyille sovelluksille p\u00e4\u00e4syn j\u00e4rjestelm\u00e4rajapintoihin. Kun kirjasto kommunikoi k\u00e4sittelij\u00e4n kanssa UNIX-soketeilla, se k\u00e4ytt\u00e4\u00e4 select-j\u00e4rjestelm\u00e4kutsua odottaakseen tietojen saapumista, mutta se ei tarkista soketin kuvastimen vastaavuutta select-rajan FD_SETSIZE (1024) kanssa. Hy\u00f6kk\u00e4\u00e4j\u00e4 voi k\u00e4ynnist\u00e4\u00e4 suuren tiedostokuvastimen varauksen libcasper-pohjaisessa sovelluksessa ja aiheuttaa pinovirheen. T\u00e4llaisilla toimenpiteill\u00e4 setuid root -ohjelmilla voidaan saavuttaa koodin suoritusta root-oikeuksilla.\n<li class=\"l\"> CVE-2026-45254 \u2014 cap_net-rajoitusten kiertomahdollisuus sovelluksessa, koska puuttuva avain tulkitaan &#171;anna kaikki&#187; sen sijaan, ett\u00e4 se est\u00e4isi.\n<li class=\"l\"> CVE-2026-45252 \u2014 puskurivirhe fusefs-moduulissa FUSE_LISTXATTR-viestien k\u00e4sittelyss\u00e4, mik\u00e4 mahdollistaa jopa 253 tavua ydinmuistista lukemisen puskurin ulkopuolelta tai jopa 250 tavun kirjoittamisen k\u00e4ytt\u00e4m\u00e4tt\u00f6m\u00e4\u00e4n kasan alueeseen.\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65497\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.0-RELEASE-p9, 14.4-RELEASE-p5 \u0438 14.3-RELEASE-p14. CVE-2026-45255 &#8212; \u0432 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0435 bsdinstall \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 bsdconfig \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 shell-\u0441\u043a\u0440\u0438\u043f\u0442\u0435, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181665","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0438 \u043e\u0434\u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-22T16:24:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-22T16:24:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47FreeBSD-s on parandatud 4 haavatavust, mis v\u00f5imaldavad privileegide t\u00f5stmist, ja \u00fcks kaugne root-haavatavus | ProHoster","description":"FreeBSD-s on parandatud 7 haavatavust, millest \u00fcks v\u00f5imaldab kaugkoodide t\u00e4itmist root'i \u00f5igustes ning neli suurendada oma privileege s\u00fcsteemis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0438 \u043e\u0434\u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-22T16:24:54+00:00","article:modified_time":"2026-05-22T16:24:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=181665"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181665\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=181665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=181665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=181665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}