{"id":32892,"date":"2019-10-31T21:49:35","date_gmt":"2019-10-31T18:49:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa\/"},"modified":"2019-10-31T21:49:35","modified_gmt":"2019-10-31T18:49:35","slug":"uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","title":{"rendered":"Vulnerabilit\u00e0 nel kernel Linux che consente di causare un crash inviando un pacchetto UDP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nel kernel di Linux identificata<\/a><\/noindex> vulnerabilit\u00e0 (CVE-2019-11683<\/a><\/noindex>), che consente di provocare un'interruzione del servizio inviando pacchetti UDP appositamente formattati (packet-of-death). Il problema \u00e8 causato da un errore nel gestore udp_gro_receive_segment (net\/ipv4\/udp_offload.c) con implementazione della tecnologia GRO (Generic Receive Offload) e pu\u00f2 portare a danneggiare il contenuto delle aree di memoria del kernel durante l'elaborazione di pacchetti UDP con riempimento nullo (payload vuoto).<\/p>\n

Il problema riguarda solo il kernel 5.0<\/a><\/noindex>, poich\u00e9 il supporto per GRO per i socket UDP \u00e8 stato \u00e8 stata implementata<\/a><\/noindex> a novembre dello scorso anno e ha raggiunto solo l'ultima versione stabile del kernel. La tecnologia GRO consente di accelerare l'elaborazione di un gran numero di pacchetti in arrivo, aggregando pi\u00f9 pacchetti in blocchi pi\u00f9 grandi che non richiedono un'elaborazione separata per ogni pacchetto.
\nPer TCP, il problema non si manifesta, poich\u00e9 per questo protocollo non \u00e8 supportata l'aggregazione dei pacchetti senza payload.<\/p>\n

La vulnerabilit\u00e0 \u00e8 stata corretta finora solo in forma patch<\/a><\/noindex>, la patch correttiva non \u00e8 ancora stata pubblicata (nell'aggiornamento di ieri 5.0.11 la correzione non \u00e8 stata inclusa<\/a><\/noindex>). Nel distribuzione del kernel, 5.0 \u00e8 riuscito a essere integrato in Fedora 30<\/a><\/noindex>, Ubuntu 19.04<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, Gentoo<\/a><\/noindex> e in altre distribuzioni continuamente aggiornate. Debian<\/a><\/noindex>, Ubuntu 18.10 e versioni precedenti<\/a><\/noindex>, RHEL\/CentOS<\/a><\/noindex> e SUSE\/openSUSE<\/a><\/noindex> non sono interessate dal problema.<\/p>\n

Il problema \u00e8 stato trovato a seguito di utilizzo<\/a><\/noindex> di un sistema di testing automatizzato di fuzzing creato da Google syzbot<\/a><\/noindex> e dell'analizzatore KASAN<\/a><\/noindex> (KernelAddressSanitizer), mirato a rivelare errori nella gestione della memoria e casi di accesso non corretto alla memoria, come l'accesso a aree di memoria liberate e l'inserimento di codice in aree di memoria non destinate a tali manipolazioni. <\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11683), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 (packet-of-death). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 udp_gro_receive_segment (net\/ipv4\/udp_offload.c) \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 GRO (Generic Receive \u041effload) \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c (\u043f\u0443\u0441\u0442\u043e\u0439 payload). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u044f\u0434\u0440\u043e 5.0, \u0442\u0430\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32892","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u00e0 nel kernel di Linux che consente di causare un crash inviando un pacchetto UDP | ProHoster","description":"\u00c8 stata identificata una vulnerabilit\u00e0 nel kernel di Linux (","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 UDP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:49:35+00:00","article:modified_time":"2019-10-31T18:49:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 13:01:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:50:25","updated":"2026-01-21 13:01:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/32892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=32892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/32892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=32892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=32892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=32892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}