{"id":181730,"date":"2026-05-25T20:48:13","date_gmt":"2026-05-25T18:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/7-novyh-uyazvimostej-v-freebsd"},"modified":"2026-05-25T20:48:13","modified_gmt":"2026-05-25T18:48:14","slug":"7-novyh-uyazvimostej-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","title":{"rendered":"7 jaunas ievainojam\u012bbas FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

2026. gada 20. maij\u0101 FreeBSD izstr\u0101d\u0101t\u0101ji pazi\u0146oja par septi\u0146u jaunu ievainojam\u012bbu nov\u0113r\u0161anu sist\u0113m\u0101. Ne visas t\u0101s ir vien\u0101di b\u012bstamas, ta\u010du da\u017eas ir \u013coti nev\u0113lamas.
\n<\/p>\n

<\/p>\n

CVE-2026-45251<\/a> — lieto\u0161anas br\u012bd\u012b p\u0113c br\u012bv\u0101s atmi\u0146as selekt\u012bvaj\u0101s sist\u0113mas sist\u0113m\u0101s, ja to gaid\u012b\u0161anas sarakst\u0101 ir procesu deskriptori (FreeBSD 15 — v\u0113l jauni cietuma deskriptori), un \u0161ie deskriptori tika aizv\u0113rti cit\u0101 pavedien\u0101, kam\u0113r gaido\u0161ais sist\u0113mas izsaukums joproj\u0101m bija gaid\u012b\u0161anas re\u017e\u012bm\u0101. Sprie\u017eot p\u0113c \u0161o komiteju<\/a>, ir skarti ar\u012b deskriptori, kas saist\u012bti ar netmap (dzin\u0113ju, kas nodro\u0161ina \u0101tru piek\u013cuvi t\u012bkla adapterim), ta\u010du ofici\u0101las inform\u0101cijas par to nav. Procesu deskriptori par\u0101d\u012bj\u0101s FreeBSD 9, t\u0101p\u0113c ievainojam\u012bba, visticam\u0101k, past\u0101v kop\u0161 t\u0101 laika. Ofici\u0101laj\u0101 pazi\u0146ojum\u0101 nor\u0101d\u012bts, ka ievainojam\u012bba \u013cauj ieg\u016bt superlietot\u0101ja privil\u0113\u0123ijas. Praktiski nav iesp\u0113jams t\u0101s neitraliz\u0113t bez labojuma\/atjaunin\u0101juma.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45250<\/a> — nepareizi apr\u0113\u0137in\u0101tais bufera lielums un sekojo\u0161a rakst\u012b\u0161ana \u0101rpus bufera stek\u0101 sist\u0113mas izsaukum\u0101 setcred, turkl\u0101t, neskatoties uz to, ka setcred pats prasa root privil\u0113\u0123ijas, steka boj\u0101jums notiek pirms privil\u0113\u0123iju p\u0101rbaudes, un t\u0101d\u0113j\u0101di ir pieejams visiem. \u0160is sist\u0113mas izsaukums par\u0101d\u012bj\u0101s FreeBSD 14.3 (tas ir, agr\u0101kas versijas nav skartas) un nodro\u0161ina veidu, k\u0101 iestat\u012bt visus lietot\u0101ja un grupu identifikatorus pa\u0161reiz\u0113j\u0101 proces\u0101 ar 1 izsaukumu, nevis kombin\u0101cij\u0101m setuid+setgid+setgroups un taml\u012bdz\u012bgi. Ievainojam\u012bba \u013cauj izpild\u012bt \u013caunpr\u0101t\u012bgu kodu kodola kontekst\u0101. Iesp\u0113jas to neitraliz\u0113t bez iel\u0101pa\/jaunin\u0101juma nav.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45252<\/a> — tr\u016bkst p\u0101rbaudes par beigu nulli pirms virknes kop\u0113\u0161anas, kas ieg\u016bta no fuse-d\u0113mona, jaunaj\u0101 bufer\u012b. Tom\u0113r tur ir p\u0101rbaude par maksim\u0101lo kop\u0113\u0161anas lielumu, un vair\u0101k k\u0101 253 lieki baitus no kodola atmi\u0146as nevar\u0113s izlas\u012bt. T\u0101pat b\u016bs iesp\u0113jams ierakst\u012bt l\u012bdz 250 baitiem «nepie\u0161\u0137irt\u0101 kodola kaudzes viet\u0101». P\u0113c noklus\u0113juma FreeBSD ne\u013cauj augst\u0101k\u0101 l\u012bme\u0146a lietot\u0101jiem mont\u0113t failu sist\u0113mas, t\u0101p\u0113c, lai nodotu kodolam \u013caunpr\u0101t\u012bgu fuse-d\u0113mona paraugu, j\u0101b\u016bt root-\u0101. Tom\u0113r, ja sysctl vfs.usermount=1 — sist\u0113ma k\u013c\u016bst neaizsarg\u0101ta ar\u012b parastajiem lietot\u0101jiem. J\u0101\u0146em v\u0113r\u0101 ar\u012b fuse-d\u0113mona b\u012bstam\u012bba cietum\u0101, kur tas var b\u016bt ar\u012b root (bet pa noklus\u0113jumu tas ar\u012b ir aizliegts).<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45253<\/a> — izmantojot ptrace bija iesp\u0113ja palaist atk\u013c\u016bdojamaj\u0101 proces\u0101 sist\u0113mas izsaukumu ar nepareizu numuru, kas noveda pie koda, kas nav paredz\u0113ts, izpildes kodol\u0101 k\u0101 sist\u0113mas izsaukums, ar potenci\u0101li slikt\u0101m sek\u0101m. Ja iestat\u012bts security.bsd.unprivileged_proc_debug=0 (kas ir laba prakstika serveriem jebkur\u0101 gad\u012bjum\u0101, un sist\u0113mas uzst\u0101d\u012bt\u0101js pat pied\u0101v\u0101 to izdar\u012bt opcijon\u0101li), tad lietot\u0101ju un iem\u016br\u0113tu procesu nav iesp\u0113jas izmantot ptrace, un t\u0101d\u0113j\u0101di ievainojam\u012bba paliks pieejama tikai root-iem.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45255<\/a> — shell komandu injekcija ar root ties\u012bb\u0101m bsdinstall\/bsdconfig caur \u013caunpr\u0101t\u012bgu bezvadu t\u012bklu nosaukumiem, kas netika nok\u013c\u016bti, kad tie tika skat\u012bti. Lai nesaskartos ar \u0161o ievainojam\u012bbu, pietiek neskat\u012bties uz bezvadu t\u012bklu sarakstu no bsdinstall\/bsdconfig.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-39461<\/a>, CVE-2026-45254<\/a> — ievainojam\u012bbas libcasper bibliot\u0113k\u0101 (ne kodol\u0101). Bibliot\u0113ka paredz\u0113ta dro\u0161ai konfigur\u0113jamai pakalpojumu snieg\u0161anai procesiem, kas ievietoti smil\u0161kast\u0113. Viena no ievainojam\u012bb\u0101m ir saist\u012bta ar bufers robe\u017eas p\u0101rsnieg\u0161anu stek\u0101 un steka boj\u0101jumiem, organiz\u0113jot \u0161aj\u0101 bibliot\u0113k\u0101 failu deskriptorus ar lieliem numuriem (t\u0101 bija paredz\u0113ta numuriem l\u012bdz 1024 — noklus\u0113juma ierobe\u017eojums strukt\u016br\u0101m, ko izmanto sist\u0113mas zvanu select). Otra ievainojam\u012bba — iesp\u0113ja dz\u0113st ieviest\u0101s ierobe\u017eojumu sarakstus (bibliot\u0113kas ideolo\u0123ija ir t\u0101da, ka vienreiz noteikti ierobe\u017eojumi procesam var tikai pastiprin\u0101ties) cap_net.<\/p>\n

<\/noindex><\/p>\n

Izlabot\u0101s sist\u0113mas versijas ir: 14.3-RELEASE-p14, 14.4-RELEASE-p5 un 15.0-RELEASE-p9. T\u0101pat j\u0101atz\u012bm\u0113 da\u017ei svar\u012bgi punkti: FreeBSD 13.5 versija nesen tika iz\u0146emta no atbalsta — 2026. gada 30. apr\u012bl\u012b, un ofici\u0101lu labojumu vairs nav (un 13.x zariem visp\u0101r). Tom\u0113r, ja jums k\u0101du iemeslu d\u0113\u013c v\u0113l nevajag steigties p\u0101rej\u0101 uz 14.x versiju, 14.3 labojumi kopum\u0101 atbilst ar\u012b avota kodam 13.5, un CVE-2026-45250 13. versij\u0101 nav aktu\u0101ls, \u0146emot v\u0113r\u0101 setcred() tr\u016bkumu.<\/p>\n

<\/noindex><\/p>\n

Avots: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435. CVE-2026-45251 — use-after-free \u0432 select-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u043a\u043e\u043b\u043b\u0430\u0445, \u0435\u0441\u043b\u0438 \u0432 \u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u0432 FreeBSD 15 — \u0435\u0449\u0451 \u043d\u043e\u0432\u044b\u0435 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b jail-\u043e\u0432), \u0438 \u044d\u0442\u0438 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435 \u043f\u043e\u043a\u0430 \u043e\u0436\u0438\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u043a\u043e\u043b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181730","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 jaunas ievainojam\u012bbas FreeBSD | ProHoster","description":"2026. gada 20. maij\u0101 FreeBSD izstr\u0101d\u0101t\u0101ji pazi\u0146oja par septi\u0146u jaunu ievainojam\u012bbu nov\u0113r\u0161anu sist\u0113m\u0101. Ne visas t\u0101s ir vien\u0101di b\u012bstamas, ta\u010du da\u017eas ir \u013coti nev\u0113lamas.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FreeBSD | ProHoster","og:description":"20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-25T18:48:14+00:00","article:modified_time":"2026-05-25T18:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/181730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=181730"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/181730\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=181730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=181730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=181730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}