{"id":33548,"date":"2019-10-31T21:53:15","date_gmt":"2019-10-31T18:53:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-setevom-steke-yadra-linux\/"},"modified":"2019-10-31T21:53:15","modified_gmt":"2019-10-31T18:53:15","slug":"uyazvimost-v-setevom-steke-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","title":{"rendered":"Linuxi tuumiku v\u00f5rgu steeki haavatavus","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

TCP-p\u00f5hise RDS-protokolli t\u00f6\u00f6tleja koodis (Reliable Datagram Socket, net\/rds\/tcp.c) on tuvastatud haavatavus (CVE-2019-11815<\/a><\/noindex>), mis v\u00f5ib viia juba vabastatud m\u00e4lu piirkonna juurde p\u00e4\u00e4semiseni ja teenuse katkestamiseni (potentsiaalselt ei ole v\u00e4listatud v\u00f5imalust haavatavuse \u00e4rakasutamiseks koodide t\u00e4itmise korraldamiseks). Probleem on tingitud v\u00f5istlusolukorrast, mis v\u00f5ib tekkida rds_tcp_kill_sock funktsiooni t\u00e4itmisel pistikute puhastamise hetkel v\u00f5rgu nimede ruumis. <\/p>\n

Spetsifikatsioonis NVD<\/a><\/noindex> on probleem t\u00e4histatud kui kaugelt \u00e4ra kasutatav, kuid kirjeldusest l\u00e4htudes parandus<\/a><\/noindex>, ilma, et oleks kohal ja k\u00f5rvaldatud v\u00f5rgu nimede ruume, ei ole v\u00f5imalik r\u00fcnnakut kaugelt korraldada. Eriti, arvestades arvates<\/a><\/noindex> SUSE arendajate s\u00f5nul on haavatavust v\u00f5imalik \u00e4ra kasutada ainult kohapeal, r\u00fcnnaku korraldamine on piisavalt keeruline ja n\u00f5uab s\u00fcsteemis t\u00e4iendavaid \u00f5igusi. Kui NVD ohutaseme hinnang on 9.3 (CVSS v2) ja 8.1 (CVSS v2) punkti, siis SUSE hinnangul on oht hinnatud 6.4 punktile k\u00fcmnest. <\/p>\n

Ubuntu esindajad on samuti hindanud<\/a><\/noindex> probleemi ohtu m\u00f5\u00f5dukaks. Samuti on CVSS v3.0 spetsifikatsiooni kohaselt m\u00e4\u00e4ratud probleemile k\u00f5rge r\u00fcnnakute keerukuse tase ja \u00e4rakasutamise v\u00f5imalus on hinnatud vaid 2.2 punktile k\u00fcmnest.<\/p>\n

\u00dcksikasjalike andmete p\u00f5hjal Cisco aruandest<\/a><\/noindex> on haavatavust v\u00f5imalik kaugelt \u00e4ra kasutada, saates TCP-pakette t\u00f6\u00f6tavatele v\u00f5rgu teenustele RDS<\/a><\/noindex> ja protot\u00fc\u00fcp \u00e4rakasutamisest on juba olemas. Kui t\u00e4pselt see teave vastab t\u00f5ele, ei ole selge, v\u00f5ib-olla on aruande sisu lihtsalt NVD oletuste kunstiline esitus. Vastavalt teabele<\/a><\/noindex> VulDB-st ei ole \u00e4rakasutamiseks veel protot\u00fc\u00fcpi loodud ja probleem on alles kohapeal \u00e4ra kasutatav.<\/p>\n

Probleem avaldub tuumades, mis j\u00e4\u00e4vad enne versiooni 5.0.8 ja on blokeeritud m\u00e4rtsis parandusega<\/a><\/noindex>, mis on kaasatud tuuma 5.0.8. Enamiku levituste puhul j\u00e4\u00e4b probleem lahendamata (Debian<\/a><\/noindex>, RHEL<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, SUSE<\/a><\/noindex>). Parandus on v\u00e4lja antud SLE12 SP3, openSUSE 42.3 ja Fedora<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11815), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 (race condition), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rds_tcp_kill_sock \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33548","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linuxi tuumiku v\u00f5rgu steeki haavatavus | ProHoster","description":"TCP-p\u00f5hise RDS-protokolli t\u00f6\u00f6tleja koodis (Reliable Datagram Socket, net\/rds\/tcp.c) on tuvastatud haavatavus (","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:15+00:00","article:modified_time":"2019-10-31T18:53:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33548","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:44:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:10","updated":"2026-01-21 15:44:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33548"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33548\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33548"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33548"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}