{"id":107183,"date":"2023-03-10T18:48:11","date_gmt":"2023-03-10T16:48:11","guid":{"rendered":"https:\/\/prohoster.info\/?p=107183"},"modified":"2023-03-13T12:06:39","modified_gmt":"2023-03-13T10:06:39","slug":"kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","title":{"rendered":"Krytyczna luka w Wasmtime, runtime dla aplikacji WebAssembly","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

W aktualizacjach Wasmtime 6.0.1, 5.0.1 i 4.0.1 usuni\u0119to luk\u0119 (CVE-2023-26489), kt\u00f3rej przypisano krytyczny poziom zagro\u017cenia. Luka ta umo\u017cliwia zapis danych do obszaru pami\u0119ci poza granicami dozwolonymi dla zisolowanego kodu WebAssembly, co potencjalnie mo\u017ce zosta\u0107 wykorzystane przez atakuj\u0105cego do wykonania swojego kodu poza zisolowanym \u015brodowiskiem WASI. <\/p>\n

Wasmtime to runtime do wykonywania aplikacji WebAssembly z rozszerzeniami WASI (WebAssembly System Interface) jako zwyk\u0142ych odizolowanych aplikacji. Narz\u0119dzie zosta\u0142o napisane w j\u0119zyku Rust, a luka zosta\u0142a spowodowana b\u0142\u0119dem logicznym przy okre\u015blaniu zasad liniowego adresowania pami\u0119ci w generatorze kodu Cranelift, kt\u00f3ry t\u0142umaczy niezale\u017cn\u0105 od architektury reprezentacj\u0119 po\u015bredni\u0105 na wykonywalny kod maszynowy dla architektury x86_64. <\/p>\n

W przypadku aplikacji WebAssembly obliczono 35-bitowe efektywne adresy zamiast dozwolonych w WebAssembly 33-bitowych adres\u00f3w, co przesuwa\u0142o granic\u0119 dozwolon\u0105 dla operacji odczytu i zapisu pami\u0119ci wirtualnej do 34 GB, podczas gdy ustawienia \u015brodowiska sandbox zapewniaj\u0105 ochron\u0119 dla 6 GB od adresu podstawowego. Ostatecznie zakres pami\u0119ci wirtualnej od 6 do 34 GB od adresu podstawowego by\u0142 dost\u0119pny do odczytu i zapisu przez aplikacje WebAssembly. W tej pami\u0119ci mog\u0105 mie\u015bci\u0107 si\u0119 inne \u015brodowiska WebAssembly lub komponenty runtime WebAssembly. <\/p>\n

W przypadku niemo\u017cno\u015bci zaktualizowania wersji Wasmtime jako obej\u015bcia do zablokowania b\u0142\u0119du wspomniano o wskazaniu opcji «Config::static_memory_maximum_size(0)» w celu w\u0142\u0105czenia koniecznego oddzielnego sprawdzenia granic przy ka\u017cdym dost\u0119pie do pami\u0119ci liniowej (co prowadzi do znacznego spadku wydajno\u015bci). Inn\u0105 opcj\u0105 jest u\u017cycie ustawienia «Config::static_memory_guard_size(1 < 36)» w celu zwi\u0119kszenia liczby stron ochronnych pami\u0119ci (Guard Page, przy dost\u0119pie generowane jest wyj\u0105tek), kt\u00f3re s\u0105 umieszczane w problematycznym zakresie pami\u0119ci wirtualnej (co prowadzi do rezerwacji du\u017cej ilo\u015bci pami\u0119ci wirtualnej i ograniczenia liczby jednocze\u015bnie wykonywanych aplikacji WebAssembly).
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Wasmtime 6.0.1, 5.0.1 \u0438 4.0.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-26489), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446\u044b, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0439 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e WebAssembly-\u043a\u043e\u0434\u0430, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f WASI. Wasmtime \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 runtime \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f WebAssembly-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 WASI […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107183","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Krytyczna luka w Wasmtime, runtime dla aplikacji WebAssembly | ProHoster","description":"W aktualizacjach poprawek Wasmtime 6.0.1, 5.0.1 i 4.0.1 usuni\u0119to podatno\u015b\u0107 (CVE-2023-26489), kt\u00f3rej przypisano krytyczny poziom zagro\u017cenia.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wasmtime, runtime \u0434\u043b\u044f WebAssembly-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Wasmtime 6.0.1, 5.0.1 \u0438 4.0.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-26489), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-10T16:48:11+00:00","article:modified_time":"2023-03-13T10:06:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/107183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=107183"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/107183\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=107183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=107183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=107183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}