{"id":105304,"date":"2022-10-13T21:36:48","date_gmt":"2022-10-13T19:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda"},"modified":"2022-10-13T21:36:48","modified_gmt":"2022-10-13T19:36:48","slug":"uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda","title":{"rendered":"Ran vulnerabilities in the Linux kernel's wireless stack that allow for remote code execution.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
U be\u017ei\u010dnom okviru (mac80211) Linux jezgre otkriven je niz ranjivosti, od kojih neke potencijalno omogu\u0107uju prelivanje bafera i daljinsko izvr\u0161avanje koda slanjem posebno oblikovanih paketa putem pristupne ta\u010dke. Popravak je trenutno dostupan samo u obliku zakrpe. <\/p>\n
Za demonstraciju mogu\u0107nosti izvo\u0111enja napada objavljeni su primeri paketa koji uzrokuju prelivanje, kao i alat za umetanje tih paketa u be\u017ei\u010dni okvir 802.11. Ranjivosti nisu zavisne od kori\u0161\u0107enih be\u017ei\u010dnih drajvera. Pretpostavlja se da se otkrivene probleme mogu iskoristiti za kreiranje radnih eksploatacija za daljinski napad na sisteme. <\/p>\n
\n
CVE-2022-41674 \u2014 buffer overflow in the cfg80211_update_notlisted_nontrans function, allowing overwriting of up to 256 bytes in the heap. The vulnerability appears starting from Linux kernel 5.1 and can be exploited for remote code execution.\n
CVE-2022-42719 \u2014 use-after-free access to an already freed memory area in the MBSSID parsing code. The vulnerability appears starting from Linux kernel 5.2 and can be exploited for remote code execution.\n
CVE-2022-42720 \u2014 use-after-free access to an already freed memory area in the reference counting code in BSS (Basic Service Set) mode. The vulnerability appears starting from Linux kernel 5.1 and can be exploited for remote code execution.\n
CVE-2022-42721 \u2014 corruption of the BSS list, leading to infinite looping. The vulnerability appears starting from Linux kernel 5.1 and can be exploited to carry out a denial of service.\n
CVE-2022-42722 \u2014 dereferencing a null pointer in the beacon frame protection code. This issue can be exploited to carry out a denial of service. <\/ul>\n