{"id":123470,"date":"2025-04-11T15:05:06","date_gmt":"2025-04-11T13:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares"},"modified":"2025-04-11T15:05:06","modified_gmt":"2025-04-11T13:05:06","slug":"uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","title":{"rendered":"Ranljive to\u010dke u mre\u017enom konfiguratoru ConnMan i DNS biblioteci c-ares","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

U mre\u017enom konfiguratoru ConnMan, koji se koristi u ugra\u0111enim Linux sustavima, automobilskim platformama i ure\u0111ajima interneta stvari, otkrivena je ranjivost (CVE-2025-32743) koja potencijalno mo\u017ee dovesti do izvr\u0161avanja koda prilikom obrade posebno oblikovanih odgovora sa DNS poslu\u017eitelja. Problem je ozna\u010den kao kriti\u010dan (9.1 od 10). Ranjivost se pojavljuje sve do trenutnog izdanja ConnMan 1.44 i trenutno nije ispravljena. <\/p>\n

Ranljivost je prisutna u implementaciji DNS proksija i uzrokovana je time \u0161to prilikom obrade DNS odgovora s bitom TC (Truncated) niz «lookup» u funkciji ns_resolv ostaje prazan ili ima vrijednost NULL. To kasnije dovodi do preljevanja bafera zbog pogre\u0161nog izra\u010duna veli\u010dine podataka koji se kopiraju pomo\u0107u funkcije memcpy. <\/p>\n

Dodatno se mo\u017ee spomenuti ranjivost (CVE-2025-31498) u biblioteci c-ares, koja slu\u017ei za slanje DNS upita na asinkron na\u010din. Ranjivost je uzrokovana pristupom ve\u0107 oslobo\u0111enom dijelu memorije (use-after-free) u funkciji obrade odgovora DNS poslu\u017eitelja. <\/p>\n

Problem je uzrokovan time \u0161to u slu\u010daju prekida veze mo\u017ee do\u0107i do situacije u kojoj je deskriptor veze ve\u0107 oslobo\u0111en, ali funkcija read_answers() misli da je jo\u0161 dostupan prilikom izbacivanja drugih upita iz reda. Eksploatacija ranjivosti je ote\u017eana time \u0161to napada\u010d mora kontrolirati DNS poslu\u017eitelj putem kojeg se obavlja rezolucija i stvoriti uvjete za prekinute pozive send()\/write(), \u0161to je teoretski mogu\u0107e pri bombardiranju \u017ertve ICMP UNREACHABLE paketima. <\/p>\n

Ranjivost se mo\u017ee iskoristiti za napad na projekte koji koriste biblioteku c-ares. Na primjer, c-ares se koristi u Node.js, sssd, apt-cacher-ng, wireshark, pgbouncer, shadowsocks, zephyr, sysdig i frr. Problem se pojavljuje od izdanja 1.32.3 (srpanj 2024.) i ispravljen je u a\u017euriranju c-ares 1.34.5. Pratite ispravke ranjivosti u distribucijama na sljede\u0107im stranicama: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 ConnMan, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-32743), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043e\u0442 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.1 \u0438\u0437 10). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 ConnMan 1.44 \u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123470","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ranjivosti u mre\u017enom konfiguratoru ConnMan i DNS biblioteci c-ares | ProHoster","description":"U mre\u017enom konfiguratoru ConnMan, koji se koristi u ugra\u0111enim Linux sustavima, automobilskim platformama i ure\u0111ajima interneta stvari, otkrivena je ranjivost (CVE-2025-32743) koja potencijalno mo\u017ee.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 ConnMan \u0438 DNS-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 c-ares | ProHoster","og:description":"\u0412 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 ConnMan, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-32743), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-11T13:05:06+00:00","article:modified_time":"2025-04-11T13:05:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123470","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 12:10:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:10:19","updated":"2026-01-23 12:10:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/123470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=123470"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/123470\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=123470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=123470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=123470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}