{"id":115207,"date":"2024-04-21T02:30:03","date_gmt":"2024-04-21T00:30:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php"},"modified":"2024-04-21T02:30:03","modified_gmt":"2024-04-21T00:30:03","slug":"uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","title":{"rendered":"Luka w Glibc, wykorzystywana przez skrypty PHP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

W standardowej bibliotece C Glibc wykryto luk\u0119 (CVE-2024-2961), prowadz\u0105c\u0105 do przepe\u0142nienia bufora podczas konwersji specjalnie sformatowanych ci\u0105g\u00f3w w kodowaniu ISO-2022-CN-EXT przez funkcj\u0119 iconv(). Badacz, kt\u00f3ry ujawni\u0142 problem, planuje wyst\u0105pienie na konferencji OffensiveCon 10 maja, w zapowiedzi kt\u00f3rego wspomniano o mo\u017cliwo\u015bci wykorzystania luki w aplikacjach napisanych w j\u0119zyku PHP. Zg\u0142oszono, \u017ce problem dotyczy ca\u0142ego ekosystemu PHP oraz niekt\u00f3rych aplikacji. <\/p>\n

Podczas konwertowania ci\u0105g\u00f3w w kodowaniu UCS4, zgodnie z wymaganiami RFC 1922, biblioteka dodaje pewne znaki escape, kt\u00f3re wyodr\u0119bniaj\u0105 cz\u0119\u015bci ci\u0105gu, w kt\u00f3rych kodowanie zosta\u0142o zmienione. Luk\u0119 zabezpiecze\u0144 powoduje niew\u0142a\u015bciwa kontrola granic wewn\u0119trznych bufor\u00f3w przez funkcj\u0119 iconv(), co mo\u017ce prowadzi\u0107 do przepe\u0142nienia bufora maksymalnie o 4 bajty. W przypadku przepe\u0142nienia poza granice bufora mog\u0105 by\u0107 zapisane okre\u015blone sta\u0142e warto\u015bci, takie jak ‘$+I’, ‘$+J’, ‘$+K’, ‘$+L’, ‘$+M’ i ‘$*H’. Mimo \u017ce wykorzystanie takiej luki do wykonania kodu wydaje si\u0119 ma\u0142o prawdopodobne, wed\u0142ug twierdzenia badacza wykrywaj\u0105cego problem, tego wystarczy\u0142o, aby przygotowa\u0107 kilka prototyp\u00f3w exploit\u00f3w do zdalnego ataku na aplikacje PHP, co prowadzi do wykonania kodu. <\/p>\n

Luka jest obecna od 2000 roku i zosta\u0142a naprawiona w rozwijanej wersji Glibc 2.40. Poprawka jest r\u00f3wnie\u017c dost\u0119pna w postaci \u0142atek dla wyda\u0144 Glibc od 2.32 do 2.39. W dystrybucjach mo\u017cna \u015bledzi\u0107 poprawk\u0119 luki na stronach: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Arch.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Glibc \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-2961), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u043e\u043a \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 ISO-2022-CN-EXT \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 iconv(). \u0412\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 10 \u043c\u0430\u044f \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u0442\u044c \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0441 \u0434\u043e\u043a\u043b\u0430\u0434\u043e\u043c, \u0432 \u0430\u043d\u043e\u043d\u0441\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 PHP. \u0417\u0430\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0443 PHP \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115207","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Luka w Glibc, wykorzystywana przez skrypty PHP | ProHoster","description":"W standardowej bibliotece C Glibc wykryto luk\u0119 (CVE-2024-2961), prowadz\u0105c\u0105 do przepe\u0142nienia bufora podczas konwersji specjalnie sformatowanych ci\u0105g\u00f3w w kodowaniu ISO-2022-CN-EXT przez funkcj\u0119 iconv().","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Glibc, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u043d\u0430 PHP | ProHoster","og:description":"\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Glibc \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-2961), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u043e\u043a \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 ISO-2022-CN-EXT \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 iconv().","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-21T00:30:03+00:00","article:modified_time":"2024-04-21T00:30:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115207","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 22:47:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 22:47:20","updated":"2026-01-22 22:47:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/115207","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=115207"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/115207\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=115207"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=115207"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=115207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}