I kitea e Qualys tetahi huarahi ki te karo i te malloc me te whakamarumaru kore-rua ki te timata i te whakawhiti mana ki te waehere ma te whakamahi i te whakaraeraetanga i roto i te OpenSSH 9.1 i whakatauhia kia iti te tupono ki te hanga i tetahi mahi mahi. I te wa ano, ko te kaha ki te hanga i tetahi mahi mahi he patai nui.
Ko te whakaraeraetanga na te whakamotuhēhēnga-mua-rua kore utu. Hei hanga tikanga mo te whakaraeraetanga ki te whakaatu, he nui ki te huri i te kara kiritaki SSH ki "SSH-2.0-FuTTYSH_9.1p1" (tetahi atu kiritaki SSH tawhito ranei) kia taea ai te tautuhi i nga haki "SSH_BUG_CURVE25519PAD" me "SSH_OLD_DHGEX". Whai muri i te tautuhi i enei haki, ka tukuna kia rua nga wa o te mahara mo te "options.kex_algorithms".
Ko nga Kairangahau mai i Qualys, i a ia e raweke ana i te whakaraeraetanga, i taea e ratou te mana whakahaere o te rehita tukatuka "%rip", kei roto he tohutoro ki te ako e whai ake nei ka mahia. Ko te tikanga whakahiato kua whakawhanakehia ka taea e koe te whakawhiti mana ki tetahi waahi i roto i te waahi waahi o te tukanga sshd i roto i te taiao OpenBSD 7.2 kaore ano kia whakahouhia, ka tukuna ma te taunoa me OpenSSH 9.1.
Kei te tohuhia ko te tauira e whakaarohia ana ko te whakatinanatanga o te waahanga tuatahi o te whakaeke - ki te hanga i tetahi mahi mahi, he mea tika ki te karo i nga tikanga tiaki ASLR, NX me ROP, me te mawhiti i te wehenga o te kirikiri, kaore pea. Hei whakaoti i te raruraru o te whakawhiti i te ASLR, NX me te ROP, he mea tika kia whiwhi korero mo nga wahitau, ka taea te whakatutuki ma te tautuhi i tetahi atu whakaraerae e arai ana ki te rerenga korero. Ka taea e tetahi pepeke i roto i te tukanga matua whai mana, te kaara ranei te puta i te pouaka kirikiri.
Source: opennet.ru