{"id":183295,"date":"2026-09-08T22:53:24","date_gmt":"2026-09-08T20:53:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimost-v-os-qubes-pozvolyayushhaya-obojti-izolyacziyu-i-vypolnit-kod-na-urovne-dom0"},"modified":"2026-09-08T22:53:29","modified_gmt":"2026-09-08T20:53:29","slug":"qubes-os-vulnerability-allows-isolation-bypass-and-code-execution-in-dom0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/qubes-os-vulnerability-allows-isolation-bypass-and-code-execution-in-dom0","title":{"rendered":"Vulnerabilit\u0101te Qubes OS, kas \u013cauj apiet izol\u0101ciju un izpild\u012bt kodu Dom0 l\u012bmen\u012b.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Public\u0113ta inform\u0101cija par ievainojam\u012bbu oper\u0113t\u0101jsist\u0113m\u0101 Qubes, kas izmanto hipervizoru stingrai aplik\u0101ciju un oper\u0113t\u0101jsist\u0113mas komponentu izol\u0101cijai (katra aplik\u0101ciju klase un sist\u0113mas pakalpojumi darbojas atsevi\u0161\u0137\u0101s virtu\u0101laj\u0101s ma\u0161\u012bn\u0101s). Gad\u012bjum\u0101, ja uzbruc\u0113js kompromit\u0113 k\u0101du no virtu\u0101laj\u0101m ma\u0161\u012bn\u0101m, ievainojam\u012bba \u013cauj apiet izol\u0101ciju, pan\u0101kt patva\u013c\u012bgu komandu izpildi viesoper\u0113t\u0101jsist\u0113mas pus\u0113 (Dom0) un ieg\u016bt kontroli p\u0101r visu oper\u0113t\u0101jsist\u0113mu. Probl\u0113ma izpau\u017eas, kad lietot\u0101js izmanto r\u012bku «qvm-copy-to-vm» faila kop\u0113\u0161anai no viesoper\u0113t\u0101jsist\u0113mas uz uzbruc\u0113ja kontrol\u0113to virtu\u0101lo ma\u0161\u012bnu. Ievainojam\u012bba ir nov\u0113rsta pakotnes qubes-core-dom0-linux 4.3.22 atjaunin\u0101jum\u0101. <\/p>\n

Probl\u0113ma past\u0101v r\u012bk\u0101 «qvm-copy-to-vm» un ir radusies nepietiekamas k\u013c\u016bdu apstr\u0101des d\u0113\u013c, kas tiek atgrieztas, piek\u013c\u016bstot virtu\u0101l\u0101 ma\u0161\u012bn\u0101<\/a>. Ievainojam\u012bbas b\u016bt\u012bba ir t\u0101da, ka r\u012bks qvm-copy-to-vm k\u013c\u016bdas inform\u0101cijas par\u0101d\u012b\u0161anai palaida programmas kdialog vai zenity, izmantojot funkciju system() un pievienojot neizdevu\u0161\u0101 faila inform\u0101ciju k\u0101 opcijas komandrind\u0101. Proces\u0101 faila nosaukuma att\u012br\u012b\u0161ana tika ierobe\u017eota tikai ar ne-ASCII simbolu un dubulto p\u0113di\u0146u izgrie\u0161anu, neizmantojot p\u0101rbaudi par speci\u0101lajiem simboliem, ko interpret\u0113 komandrinda, piem\u0113ram, «`» un «$». <\/p>\n

Pabeidzot failu kop\u0113\u0161anu no viesist\u0113mas, apstr\u0101d\u0101t\u0101js virtu\u0101laj\u0101 ma\u0161\u012bn\u0101 nos\u016bta atpaka\u013c oper\u0101cijas apstiprin\u0101jumu, kur\u0101, starp citu, ir nor\u0101d\u012bts p\u0113d\u0113j\u0101 sa\u0146emt\u0101 faila nosaukums. Uzbrukums samazin\u0101s l\u012bdz k\u013c\u016bdas koda atgrie\u0161anai, nevis apstiprin\u0101jumam un nor\u0101d\u012bjumam uz failu, kura kop\u0113\u0161ana neizdev\u0101s, ar nosaukumu, kas satur speci\u0101los simbolus, ko apstr\u0101d\u0101 komandrinda. P\u0113c k\u013c\u016bdas sa\u0146em\u0161anas apstr\u0101d\u0101t\u0101js viesoper\u0113t\u0101jsist\u0113mas pus\u0113 palaid\u012bs ar komandu system() r\u012bku, lai par\u0101d\u012btu dialogu ar k\u013c\u016bdas tekstu, nododot komandrind\u0101 atgriezto uzbruc\u0113ja faila nosaukumu (piem\u0113ram, nor\u0101dot «file`id`», viesoper\u0113t\u0101jsist\u0113m\u0101 tiks palaista komanda id).
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0434\u043b\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u041e\u0421 (\u043a\u0430\u0436\u0434\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445). \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e, \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f (Dom0) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183295","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vainas Qubes OS, kas \u013cauj apiet izol\u0101ciju un izpild\u012bt kodu Dom0 l\u012bmen\u012b | ProHoster","description":"Public\u0113ta inform\u0101cija par ievainojam\u012bbu oper\u0113t\u0101jsist\u0113m\u0101 Qubes, kas izmanto hipervizoru stingrai lietojumprogrammu un OS komponentu izol\u0101cijai (katra lietojumprogrammu klase un sist\u0113mas pakalpojumi darbojas atsevi\u0161\u0137\u0101s.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/qubes-os-vulnerability-allows-isolation-bypass-and-code-execution-in-dom0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041e\u0421 Qubes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 Dom0 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0434\u043b\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u041e\u0421 (\u043a\u0430\u0436\u0434\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/qubes-os-vulnerability-allows-isolation-bypass-and-code-execution-in-dom0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-09-08T20:53:24+00:00","article:modified_time":"2026-09-08T20:53:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"183295","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-09-09 10:59:23","updated":"2026-09-09 10:59:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=183295"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183295\/revisions"}],"predecessor-version":[{"id":183551,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183295\/revisions\/183551"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=183295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=183295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=183295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}