Qhov tsis zoo uas tso cai rau koj tawm ntawm QEMU ib puag ncig cais

Qhia tawm Cov ntsiab lus tseem ceeb ntawm qhov tsis zoo (CVE-2019-14378) nyob rau hauv lub neej ntawd SLIRP handler siv nyob rau hauv QEMU los tsim ib tug kev sib txuas lus channel ntawm lub virtual network adapter nyob rau hauv cov qhua system thiab lub network backend ntawm QEMU sab. Qhov teeb meem tseem cuam tshuam rau KVM-based virtualization systems (hauv Usermode) thiab Virtualbox, uas siv cov slirp backend los ntawm QEMU, nrog rau cov ntawv thov uas siv cov neeg siv-chaw sib tham pawg libSLIRP (TCP/IP emulator).

Qhov tsis txaus ntseeg tso cai rau cov lej ua tiav ntawm tus tswv system sab nrog txoj cai ntawm QEMU tus txheej txheem thaum lub pob ntawv tshwj xeeb tsim loj heev raug xa los ntawm cov qhua system, uas yuav tsum muaj kev tawg. Vim yog qhov yuam kev hauv ip_reass() muaj nuj nqi, hu ua thaum rov sib sau cov pob khoom tuaj, thawj qhov tawg yuav tsis haum rau hauv qhov kev faib tsis pub thiab nws tus Tsov tus tw yuav raug sau rau hauv qhov chaw nco ntawm ib sab ntawm qhov tsis.

Rau kev sim lawm muaj tus qauv ua haujlwm ntawm kev siv, uas muab rau kev hla dhau ASLR thiab ua tiav cov lej los ntawm kev sau lub cim xeeb ntawm lub ntsiab_loop_tlg array, suav nrog QEMUTimerList nrog cov neeg tuav haujlwm hu ua timer.
Qhov kev pheej hmoo twb raug kho nyob rau hauv Fedora и SUSE/openSUSE, tab sis tseem uncorrected nyob rau hauv Debian, Arch Linux и FreeBSD. Cov Ubuntu и RHEL Qhov teeb meem tsis tshwm sim vim tsis siv slirp. Qhov kev pheej hmoo tseem tsis raug kho hauv qhov kev tso tawm tshiab kawg libslirp 4.0 (kev kho tam sim no muaj raws li thaj).

Tau qhov twg los: opennet.ru