{"id":33548,"date":"2019-10-31T21:53:15","date_gmt":"2019-10-31T18:53:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-setevom-steke-yadra-linux\/"},"modified":"2019-10-31T21:53:15","modified_gmt":"2019-10-31T18:53:15","slug":"uyazvimost-v-setevom-steke-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","title":{"rendered":"Vain\u012bba Linux kodola t\u012bkla stek\u0101","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

RDS protokola TCP (Reliable Datagram Socket, net\/rds\/tcp.c) apstr\u0101d\u0101t\u0101j\u0101 kod\u0101 atkl\u0101ta ievainojam\u012bba (CVE-2019-11815<\/a><\/noindex>), kas var izrais\u012bt piek\u013cuvi jau atbr\u012bvotai atmi\u0146as zonai un pakalpojumu atteik\u0161anu (potenci\u0101li nevar izsl\u0113gt iesp\u0113ju, ka probl\u0113mu var izmantot, lai \u012bstenotu kodu). Probl\u0113ma rodas sacens\u012bbu st\u0101vok\u013ca (race condition) d\u0113\u013c, kas var rasties funkcijas rds_tcp_kill_sock izpildes laik\u0101, t\u012bklu telpu t\u012br\u012b\u0161anas br\u012bd\u012b. <\/p>\n

Specifik\u0101cij\u0101 NVD<\/a><\/noindex> probl\u0113ma atz\u012bta par att\u0101lin\u0101ti izmantojamu, ta\u010du, k\u0101 izriet no apraksta, ar labojumu<\/a><\/noindex>, bez lok\u0101las kl\u0101tb\u016btnes sist\u0113m\u0101 un manipul\u0101cij\u0101m ar telp\u0101m, att\u0101lin\u0101ti uzbrukums nav iesp\u0113jams. P\u0113c viedokli<\/a><\/noindex> SUSE izstr\u0101d\u0101t\u0101ju teikt\u0101, ievainojam\u012bba tiek izmantota tikai lok\u0101li, uzbrukuma organiz\u0113\u0161ana ir pietiekami sare\u017e\u0123\u012bta un prasa papildu privil\u0113\u0123ijas sist\u0113m\u0101. Ja NVD b\u012bstam\u012bbas l\u012bmenis nov\u0113rt\u0113ts ar 9.3 (CVSS v2) un 8.1 (CVSS v2) punktiem, tad p\u0113c SUSE v\u0113rt\u0113juma b\u012bstam\u012bbas l\u012bmenis ir 6.4 no 10. <\/p>\n

Ubuntu p\u0101rst\u0101vji ar\u012b nov\u0113rt\u0113ja<\/a><\/noindex> probl\u0113mas b\u012bstam\u012bbu k\u0101 m\u0113renu. \u0145emot v\u0113r\u0101, ka saska\u0146\u0101 ar CVSS v3.0 specifik\u0101ciju, probl\u0113ma ir pie\u0161\u0137irta augsts uzbrukuma sare\u017e\u0123\u012bt\u012bbas l\u012bmenis un ekspluat\u0101cijas iesp\u0113ja ir nov\u0113rt\u0113ta tikai 2.2 punkti no 10.<\/p>\n

P\u0113c zi\u0146ojuma<\/a><\/noindex> no Cisco, ievainojam\u012bba tiek izmantota att\u0101lin\u0101ti, s\u016btot TCP paketes uz akt\u012bv\u0101m t\u012bkla pakalpojum\u0101m RDS<\/a><\/noindex> un jau past\u0101v eksploit\u0101cijas prototips. Cik liela ir \u0161\u012b inform\u0101cija, v\u0113l nav skaidrs, iesp\u0113jams, zi\u0146ojum\u0101 ir tikai m\u0101kslinieciski noform\u0113ti NVD pie\u0146\u0113mumi. Saska\u0146\u0101 ar inform\u0101ciju<\/a><\/noindex> VulDB eksploit\u0101cija v\u0113l nav izveidota un probl\u0113ma tiek izmantota tikai lok\u0101li.<\/p>\n

Probl\u0113ma izpau\u017eas kodolos l\u012bdz 5.0.8 un ir blo\u0137\u0113ta mart\u0101 labojumu<\/a><\/noindex>, kas iek\u013cauts kodol\u0101 5.0.8. Liel\u0101kaj\u0101 da\u013c\u0101 izplat\u012bjumu probl\u0113ma paliek neatrisin\u0101ta (Debian<\/a><\/noindex>, RHEL<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, SUSE<\/a><\/noindex>). Noteikums izdots SLE12 SP3, openSUSE 42.3 un Fedora<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Avots: opennet.lv<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11815), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 (race condition), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rds_tcp_kill_sock \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33548","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ievainojam\u012bba Linux kodola t\u012bkla stek\u0101 | ProHoster","description":"RDS protokola TCP (Reliable Datagram Socket, net\/rds\/tcp.c) apstr\u0101d\u0101t\u0101j\u0101 kod\u0101 atkl\u0101ta ievainojam\u012bba (","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:15+00:00","article:modified_time":"2019-10-31T18:53:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33548","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:44:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:10","updated":"2026-01-21 15:44:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/33548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=33548"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/33548\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=33548"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=33548"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=33548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}