{"id":182528,"date":"2026-07-08T04:53:20","date_gmt":"2026-07-08T02:53:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-vo-freebsd-dopuskayushhie-povyshenie-privilegij-i-udalyonnoe-vypolnenie-koda"},"modified":"2026-07-08T04:53:20","modified_gmt":"2026-07-08T02:53:20","slug":"uyazvimosti-vo-freebsd-dopuskayushhie-povyshenie-privilegij-i-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-vo-freebsd-dopuskayushhie-povyshenie-privilegij-i-udalyonnoe-vypolnenie-koda","title":{"rendered":"A FreeBSD-ben felfedezett sebezhet\u0151s\u00e9gek lehet\u0151v\u00e9 teszik a jogosults\u00e1gok felemel\u00e9s\u00e9t \u00e9s a t\u00e1voli k\u00f3dv\u00e9grehajt\u00e1st","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A FreeBSD-ben 22 sebezhet\u0151s\u00e9get jav\u00edtottak ki, amelyek k\u00f6z\u00fcl az egyik potenci\u00e1lisan lehet\u0151v\u00e9 teszi a k\u00f3d t\u00e1voli v\u00e9grehajt\u00e1s\u00e1t root jogosults\u00e1gokkal, \u00e9s 13 lehet\u0151s\u00e9get biztos\u00edt a privil\u00e9giumok emel\u00e9s\u00e9re a rendszeren bel\u00fcl. A sebezhet\u0151s\u00e9geket a FreeBSD 15.1-RELEASE-p1, FreeBSD 15.0-RELEASE-p11, 14.4-RELEASE-p7 \u00e9s 14.3-RELEASE-p16 friss\u00edt\u00e9sek tartalmazz\u00e1k.     <\/p>\n<p>A legvesz\u00e9lyesebb sebezhet\u0151s\u00e9g (CVE-2026-49420) a libalias k\u00f6nyvt\u00e1rban fell\u00e9p\u0151 puffer t\u00falfut\u00e1ssal \u00e1ll \u00f6sszef\u00fcgg\u00e9sben, amelyet a kernel szintj\u00e9n m\u0171k\u00f6d\u0151 ipfw csomagsz\u0171r\u0151ben \u00e9s a felhaszn\u00e1l\u00f3i t\u00e9rben fut\u00f3 natd h\u00e1tt\u00e9rfolyamatban haszn\u00e1lnak az elk\u00fcld\u00f6tt vagy fogadott h\u00e1l\u00f3zati csomagok c\u00edm\u00e9nek leford\u00edt\u00e1s\u00e1hoz. A t\u00falfut\u00e1s az RTSP (Real Time Streaming Protocol) protokoll kezel\u0151j\u00e9ben l\u00e9pett fel, amely kimen\u0151 h\u00e1l\u00f3zati csomagokat \u00edrt fel\u00fcl egy fix m\u00e9ret\u0171 puffer haszn\u00e1lat\u00e1val an\u00e9lk\u00fcl, hogy ellen\u0151rizte volna, hogy a csomag fel\u00fcl\u00edr\u00e1si eredm\u00e9nye belef\u00e9r-e a pufferbe.    <\/p>\n<p>NAT-\u00e1tj\u00e1r\u00f3 feldolgoz\u00e1sa sor\u00e1n, k\u00fcl\u00f6n\u00f6sen a RTSP forgalom kezel\u00e9sekor, a stack t\u00falfut\u00e1s l\u00e9phet fel, amely potenci\u00e1lisan t\u00e1voli k\u00f3d v\u00e9grehajt\u00e1s\u00e1t eredm\u00e9nyezheti a kernel vagy a natd folyamat szintj\u00e9n root jogosults\u00e1gokkal fut\u00f3 rendszerben.     <\/p>\n<p>A sebezhet\u0151s\u00e9g blokkol\u00e1s\u00e1ra alternat\u00edv megold\u00e1sk\u00e9nt le lehet tiltani az alias_smedia.ko kernelmodul bet\u00f6lt\u00e9s\u00e9t, \u00e9s elt\u00e1vol\u00edtani a libalias_smedia.so feldolgoz\u00f3 eml\u00edt\u00e9s\u00e9t az \/etc\/libalias.conf konfigur\u00e1ci\u00f3s f\u00e1jlb\u00f3l. Ha az RTSP protokoll nem haszn\u00e1latos a t\u0171zfalon, akkor a 554 \u00e9s 7070 h\u00e1l\u00f3zati portokra ir\u00e1nyul\u00f3 forgalmat le lehet tiltani a NAT szab\u00e1lyok el\u0151tt.    <\/p>\n<p>Sebezhet\u0151s\u00e9gek, amelyek lehet\u0151v\u00e9 teszik, hogy egy nem privilegiz\u00e1lt helyi felhaszn\u00e1l\u00f3 root jogosults\u00e1gokat szerezzen:  <\/p>\n<ul>\n<li class=\"l\">  CVE-2026-49415 \u2014 versenyhelyzet az execve rendszerh\u00edv\u00e1sban, amely lehet\u0151v\u00e9 teszi a helyi felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy a root SUID z\u00e1szl\u00f3val rendelkez\u0151 v\u00e9grehajthat\u00f3 f\u00e1jlok futtat\u00e1sa sor\u00e1n m\u00f3dos\u00edtsa a folyamat c\u00edmtartom\u00e1ny\u00e1t a procfs vagy linprocfs seg\u00edts\u00e9g\u00e9vel egy kis id\u0151ablakban, amely a folyamat \u00faj virtu\u00e1lis c\u00edmtartom\u00e1ny\u00e1nak be\u00e1ll\u00edt\u00e1sa ut\u00e1n, de a tulajdonos adatainak friss\u00edt\u00e9se el\u0151tt j\u00f6n l\u00e9tre.\n<li class=\"l\"> CVE-2026-49422 \u2014 m\u00e1r felszabad\u00edtott mem\u00f3ria (Use-after-free) el\u00e9r\u00e9se a tcp_rack.ko kernelmodulban, amely a TCP-csomagok RACK (Recent ACKnowledgment) elveszt\u00e9s\u00e9nek azonos\u00edt\u00e1si algoritmus\u00e1nak megval\u00f3s\u00edt\u00e1s\u00e1t tartalmazza. A s\u00e9r\u00fcl\u00e9kenys\u00e9get helyi socket manipul\u00e1ci\u00f3val lehet kihaszn\u00e1lni a privil\u00e9giumok n\u00f6vel\u00e9s\u00e9re.\n<li class=\"l\"> CVE-2026-49419 \u2014 hivatkoz\u00e1si sz\u00e1ml\u00e1l\u00f3 alulcsordul\u00e1sa a Jail izol\u00e1ci\u00f3s mechanizmus\u00e1nak megval\u00f3s\u00edt\u00e1sakor. A t\u00e1mad\u00f3 a jail_set \u00e9s jail_get f\u00fcggv\u00e9nyek seg\u00edts\u00e9g\u00e9vel a jail k\u00f6rnyezet manipul\u00e1l\u00e1s\u00e1val el\u00e9rheti a hivatkoz\u00e1si sz\u00e1ml\u00e1l\u00f3 null\u00e1z\u00e1s\u00e1t, \u00e9s mem\u00f3riafelszabad\u00edt\u00e1st id\u00e9zhet el\u0151 egy olyan strukt\u00fara alatt, amely tov\u00e1bbra is haszn\u00e1latban van a kernelben, ami potenci\u00e1lisan kihaszn\u00e1lhat\u00f3 a privil\u00e9giumok n\u00f6vel\u00e9s\u00e9re.\n<li class=\"l\"> CVE-2026-49429 \u2014 puffert\u00falcsordul\u00e1s az OpenZFS-ben, amely lehet\u0151v\u00e9 teszi a helyi felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy ZFS 'userused' jogosults\u00e1gokkal megemelje a privil\u00e9giumait az ioctl ZFS_IOC_USERSPACE_MANY manipul\u00e1l\u00e1s\u00e1val.\n<li class=\"l\"> CVE-2026-49427, CVE-2026-49428 \u2014 s\u00e9r\u00fcl\u00e9kenys\u00e9gek a 'largepage' megosztott mem\u00f3ria objektumok megval\u00f3s\u00edt\u00e1s\u00e1ban, amelyek m\u00e1r felszabad\u00edtott mem\u00f3ria el\u00e9r\u00e9s\u00e9hez vezetnek a kernelben, \u00e9s kihaszn\u00e1lhat\u00f3k a privil\u00e9giumok n\u00f6vel\u00e9s\u00e9re a sendfile SF_NOCACHE z\u00e1szl\u00f3j\u00e1nak, vagy az open \u00e9s fspacectl O_TRUNC z\u00e1szl\u00f3j\u00e1nak manipul\u00e1l\u00e1s\u00e1val.\n<li class=\"l\"> CVE-2026-49421 \u2014 az AT_RESOLVE_BENEATH z\u00e1szl\u00f3 helytelen kezel\u00e9se az unlinkat \u00e9s funlinkat rendszerh\u00edv\u00e1sokban, amely lehet\u0151v\u00e9 teszi f\u00e1jlok t\u00f6rl\u00e9s\u00e9t az alap\u00e9rtelmezett k\u00f6nyvt\u00e1ron k\u00edv\u00fcl korl\u00e1tozott f\u00e1jlrendszer-hozz\u00e1f\u00e9r\u00e9s\u0171 konfigur\u00e1ci\u00f3kban.\n<li class=\"l\"> CVE-2026-49418 \u2014 mem\u00f3ria el\u00e9r\u00e9se felszabad\u00edt\u00e1s ut\u00e1n a virtu\u00e1lis mem\u00f3ria alrendszer\u00e9ben, amely a msync(MS_INVALIDATE) f\u00fcggv\u00e9ny h\u00edv\u00e1sakor fordul el\u0151 a mem\u00f3ria t\u00e9rk\u00e9pezett eszk\u00f6z\u00e9nek sz\u00e1m\u00e1ra. A t\u00e1mad\u00f3, aki hozz\u00e1f\u00e9r\u00e9ssel rendelkezik a mem\u00f3ria t\u00e9rk\u00e9pez\u00e9s\u00e9re alkalmas eszk\u00f6zh\u00f6z, kihaszn\u00e1lhatja a s\u00e9r\u00fcl\u00e9kenys\u00e9get a privil\u00e9giumok n\u00f6vel\u00e9s\u00e9re.\n<li class=\"l\"> CVE-2026-49416 \u2014 eg\u00e9sz sz\u00e1m\u00fa t\u00falcsordul\u00e1s a vt konzolmeghajt\u00f3ban, amely lehet\u0151v\u00e9 teszi a helyi felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy potenci\u00e1lisan megemelje a privil\u00e9giumait a t\u00fal nagy m\u00e9ret megad\u00e1s\u00e1val a ioctl CONS_HISTORY k\u00fcld\u00e9sekor.\n<li class=\"l\"> CVE-2026-49413 \u2014 egy Linuxulatorban l\u00e9v\u0151 sebezhet\u0151s\u00e9g, amely lehet\u0151v\u00e9 teszi egy nem privilegiz\u00e1lt felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy a LD_PRELOAD k\u00f6rnyezeti v\u00e1ltoz\u00f3n kereszt\u00fcl saj\u00e1t megosztott k\u00f6nyvt\u00e1r\u00e1t injekt\u00e1lja egy suid z\u00e1szl\u00f3val rendelkez\u0151 v\u00e9grehajthat\u00f3 f\u00e1jlba, \u00e9s \u00edgy v\u00e9grehajtsa a k\u00f3dj\u00e1t a f\u00e1jl privil\u00e9giumaival.\n<li class=\"l\"> CVE-2026-49412 \u2014 a m\u00e1r felszabad\u00edtott mem\u00f3ria el\u00e9r\u00e9se az IPV6_MSFILTER opci\u00f3kezel\u0151ben a socketekben, amely lehet\u0151v\u00e9 teszi a privilegiumok n\u00f6vel\u00e9s\u00e9t.\n<li class=\"l\"> CVE-2026-45258 \u2014 probl\u00e9m\u00e1k a hangmeghajt\u00f3 mem\u00f3riat\u00e9rk\u00e9pez\u00e9s (mmap) t\u00e1mogat\u00e1s\u00e1nak megval\u00f3s\u00edt\u00e1s\u00e1ban, amelyek lehet\u0151v\u00e9 teszik az adatok olvas\u00e1s\u00e1t \u00e9s \u00edr\u00e1s\u00e1t a kernel mem\u00f3ri\u00e1j\u00e1ban a \/dev\/dsp eszk\u00f6z manipul\u00e1l\u00e1s\u00e1val, amely alap\u00e9rtelmezetten mindenki sz\u00e1m\u00e1ra \u00edrhat\u00f3.\n<li class=\"l\"> CVE-2026-45257 \u2014 sebezhet\u0151s\u00e9g a kernel ktls modulj\u00e1ban, amely lehet\u0151v\u00e9 teszi, hogy a t\u00e1mad\u00f3 b\u00e1rmely olvas\u00e1sra el\u00e9rhet\u0151 f\u00e1jlt fel\u00fcl\u00edrjon az oldalkeszben. Ilyen m\u00f3don a suid root f\u00e1jl, p\u00e9ld\u00e1ul a \/bin\/su fel\u00fcl\u00edr\u00e1s\u00e1val a t\u00e1mad\u00f3 root jogosults\u00e1gokat szerezhet a rendszeren.              <\/ul>\n<p>Kev\u00e9sb\u00e9 vesz\u00e9lyes sebezhet\u0151s\u00e9gek:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2026-49430, CVE-2026-49431 \u2014 sebezhet\u0151s\u00e9gek az OpenZFS-ben, amelyek kernel mem\u00f3ria s\u00e9r\u00fcl\u00e9s\u00e9hez \u00e9s a &#171;$hasrecvd&#187; z\u00e1szl\u00f3 jogosulatlan be\u00e1ll\u00edt\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9hez vezetnek.\n<li class=\"l\"> CVE-2026-49426 \u2014 hib\u00e1s audit bejegyz\u00e9sek l\u00e9trehoz\u00e1sa a ptrace h\u00edv\u00e1saihoz. A t\u00e1mad\u00f3k ezt ki tudj\u00e1k haszn\u00e1lni a behatol\u00e1s\u00e9szlel\u0151 rendszerek megker\u00fcl\u00e9s\u00e9re.\n<li class=\"l\"> CVE-2026-49423 \u2014 t\u00e1voli DoS sebezhet\u0151s\u00e9g a KTLS kernel alrendszer\u00e9ben, amely kihaszn\u00e1lhat\u00f3 speci\u00e1lisan form\u00e1zott TLS csomagok k\u00fcld\u00e9s\u00e9vel. A probl\u00e9ma csak KTLS-t haszn\u00e1l\u00f3 rendszerekben jelentkezik a TLS feldolgoz\u00e1s\u00e1nak gyors\u00edt\u00e1sa \u00e9rdek\u00e9ben (kern.ipc.tls.enable=1).\n<li class=\"l\"> CVE-2026-49424 \u2014 104 b\u00e1jt nem inicializ\u00e1lt kernel veremb\u0151l t\u00f6rt\u00e9n\u0151 sziv\u00e1rg\u00e1s a waitid() rendszerh\u00edv\u00e1s megval\u00f3s\u00edt\u00e1s\u00e1ban a Linuxulator alatt.\n<li class=\"l\"> CVE-2026-49425 \u2014 adat sziv\u00e1rg\u00e1sa a nem inicializ\u00e1lt kernel veremb\u0151l a compat32 alrendszerben.\n<li class=\"l\"> CVE-2026-58081, CVE-2026-58082 \u2014 puffer t\u00falcsordul\u00e1sok az iconv k\u00f6nyvt\u00e1rban, amelyek t\u00e1mad\u00e1sokra haszn\u00e1lhat\u00f3ak azokra az alkalmaz\u00e1sokra, amelyek az iconv-t haszn\u00e1lj\u00e1k megb\u00edzhatatlan k\u00fcls\u0151 adatok HZ, UTF-7, VIQR, ZW \u00e9s ISO-2022 k\u00f3dol\u00e1sra t\u00f6rt\u00e9n\u0151 \u00e1talak\u00edt\u00e1s\u00e1hoz.      <\/ul>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65860\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 22 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 13 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p1, FreeBSD 15.0-RELEASE-p11, 14.4-RELEASE-p7 \u0438 14.3-RELEASE-p16. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-49420) \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libalias, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u043c \u0444\u0438\u043b\u044c\u0442\u0440\u0435 ipfw [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182528","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 22 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 13 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-vo-freebsd-dopuskayushhie-povyshenie-privilegij-i-udalyonnoe-vypolnenie-koda\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 22 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 13 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-vo-freebsd-dopuskayushhie-povyshenie-privilegij-i-udalyonnoe-vypolnenie-koda\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-08T02:53:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-08T02:53:20+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sebezhet\u0151s\u00e9gek a FreeBSD-ben, amelyek lehet\u0151v\u00e9 teszik a jogok emel\u00e9s\u00e9t \u00e9s a k\u00f3d t\u00e1voli futtat\u00e1s\u00e1t | ProHoster","description":"A FreeBSD-ben 22 sebezhet\u0151s\u00e9get jav\u00edtottak, amelyek k\u00f6z\u00fcl egy potenci\u00e1lisan lehet\u0151v\u00e9 teszi k\u00f3d t\u00e1voli futtat\u00e1s\u00e1t root jogosults\u00e1gokkal, m\u00edg 13 lehet\u0151v\u00e9 teszi jogainak n\u00f6vel\u00e9s\u00e9t a rendszerben.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-vo-freebsd-dopuskayushhie-povyshenie-privilegij-i-udalyonnoe-vypolnenie-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 22 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 13 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-vo-freebsd-dopuskayushhie-povyshenie-privilegij-i-udalyonnoe-vypolnenie-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T02:53:20+00:00","article:modified_time":"2026-07-08T02:53:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182528","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:08","updated":"2026-08-05 12:22:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/182528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=182528"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/182528\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=182528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=182528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=182528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}