{"id":33548,"date":"2019-10-31T21:53:15","date_gmt":"2019-10-31T18:53:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-setevom-steke-yadra-linux\/"},"modified":"2019-10-31T21:53:15","modified_gmt":"2019-10-31T18:53:15","slug":"uyazvimost-v-setevom-steke-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","title":{"rendered":"Vulnerabilit\u00e0 nel stack di rete del kernel Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nel codice del gestore del protocollo RDS basato su TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u00e8 stata individuata una vulnerabilit\u00e0 (CVE-2019-11815<\/a><\/noindex>), che pu\u00f2 portare a un accesso a una zona di memoria gi\u00e0 liberata e a un denial of service (non si esclude la possibilit\u00e0 di sfruttare il problema per l'esecuzione di codice). Il problema \u00e8 causato da una condizione di gara (race condition), che pu\u00f2 verificarsi durante l'esecuzione della funzione rds_tcp_kill_sock nel momento della pulizia dei socket per lo spazio dei nomi di rete. <\/p>\n

Nella specifica NVD<\/a><\/noindex> il problema \u00e8 contrassegnato come sfruttabile da remoto, ma a giudicare dalla descrizione correzioni<\/a><\/noindex>, senza una presenza locale nel sistema e manomissione degli spazi dei nomi, non \u00e8 possibile organizzare un attacco da remoto. In particolare, secondo secondo<\/a><\/noindex> gli sviluppatori di SUSE, la vulnerabilit\u00e0 \u00e8 sfruttabile solo localmente, l'organizzazione di un attacco \u00e8 abbastanza complessa e richiede privilegi aggiuntivi nel sistema. Se nell'NVD il livello di pericolosit\u00e0 \u00e8 stato valutato a 9.3 (CVSS v2) e 8.1 (CVSS v2), secondo il rating di SUSE il pericolo \u00e8 stato valutato a 6.4 su 10. <\/p>\n

Anche i rappresentanti di Ubuntu hanno valutato<\/a><\/noindex> la pericolosit\u00e0 del problema come moderata. Tuttavia, secondo la specifica CVSS v3.0, al problema \u00e8 stato attribuito un alto livello di complessit\u00e0 dell'attacco e la possibilit\u00e0 di sfruttamento \u00e8 stata fissata a solo 2.2 su 10.<\/p>\n

A giudicare da Secondo il report<\/a><\/noindex> della Cisco, la vulnerabilit\u00e0 \u00e8 sfruttabile da remoto attraverso l'invio di pacchetti TCP ai servizi di rete in funzione RDS<\/a><\/noindex> e esiste gi\u00e0 un prototipo di exploit. Quanto questa informazione corrisponda alla realt\u00e0 non \u00e8 chiaro, poich\u00e9 nel report potrebbero essere solo ipotesi artisticamente elaborate dall'NVD. Secondo fonti<\/a><\/noindex> VulDB, l'exploit non \u00e8 ancora stato creato e il problema \u00e8 sfruttabile solo localmente.<\/p>\n

Il problema si manifesta nei kernel fino alla versione 5.0.8 e \u00e8 bloccato dal una correzione<\/a><\/noindex>, incluso nel kernel 5.0.8. Nella maggior parte delle distribuzioni, il problema rimane irrisolto (Debian<\/a><\/noindex>, RHEL<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, SUSE<\/a><\/noindex>). Una correzione \u00e8 stata rilasciata per SLE12 SP3, openSUSE 42.3 e Fedora<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11815), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 (race condition), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rds_tcp_kill_sock \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33548","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u00e0 nel stack di rete del kernel Linux | ProHoster","description":"Nel codice del gestore del protocollo RDS basato su TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u00e8 stata individuata una vulnerabilit\u00e0 (","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:15+00:00","article:modified_time":"2019-10-31T18:53:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33548","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:44:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:10","updated":"2026-01-21 15:44:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/33548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=33548"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/33548\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=33548"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=33548"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=33548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}