{"id":33301,"date":"2019-10-31T21:51:51","date_gmt":"2019-10-31T18:51:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root\/"},"modified":"2019-10-31T21:51:51","modified_gmt":"2019-10-31T18:51:51","slug":"docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","title":{"rendered":"Obrazy Docker Alpine by\u0142y dostarczane z pustym has\u0142em dla u\u017cytkownika root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Badacze bezpiecze\u0144stwa z firmy Cisco ujawnili<\/a><\/noindex> informacje o podatno\u015bci (CVE-2019-5021) w kompilacje<\/a><\/noindex> dystrybucji Alpine dla systemu izolacji kontener\u00f3w Docker. Istot\u0105 wykrytego problemu jest to, \u017ce dla u\u017cytkownika root domy\u015blnie przypisano puste has\u0142o bez zablokowania bezpo\u015bredniego logowania jako root. Przypominamy, \u017ce Alpine jest u\u017cywane do tworzenia oficjalnych obraz\u00f3w projektu Docker (wcze\u015bniej oficjalne kompilacje opiera\u0142y si\u0119 na Ubuntu, ale p\u00f3\u017aniej zosta\u0142y prze\u0142o\u017cone<\/a><\/noindex> na Alpine).<\/p>\n

Problem wyst\u0119puje od wydania Alpine Docker 3.3 i zosta\u0142a spowodowana regresywn\u0105 zmian\u0105, kt\u00f3ra zosta\u0142a wprowadzona w 2015 roku (do wersji 3.3 w \/etc\/shadow by\u0142a u\u017cywana linia «root:!::0:::::», a po rezygnacji z flagi «-d» zacz\u0119\u0142a by\u0107 dodawana linia «root:::0:::::»). Problem pocz\u0105tkowo zidentyfikowano i naprawiono<\/a><\/noindex> w listopadzie 2015 roku, ale w grudniu przez pomy\u0142k\u0119 znowu pojawi\u0142 si\u0119<\/a><\/noindex> w plikach budowy eksperymentalnej ga\u0142\u0119zi, a nast\u0119pnie zosta\u0142 przeniesiony do stabilnych kompilacji.<\/p>\n

W informacjach o podatno\u015bci wskazano, \u017ce problem wyst\u0119puje tak\u017ce w najnowszej wersji Alpine Docker 3.9. Deweloperzy Alpine w marcu wydali<\/a><\/noindex> naprawili problem, a podatno\u015b\u0107 nie wyst\u0119puje<\/a><\/noindex> od wersji 3.9.2, 3.8.4, 3.7.3 i 3.6.5, ale pozostaje w starszych ga\u0142\u0119ziach 3.4.x i 3.5.x, kt\u00f3rych wsparcie zosta\u0142o ju\u017c zako\u0144czone. Ponadto deweloperzy twierdz\u0105, \u017ce wektory ataku s\u0105 bardzo ograniczone i wymagaj\u0105, by atakuj\u0105cy mia\u0142 dost\u0119p do tej samej infrastruktury.<\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-5021) \u0432 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Alpine \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Docker. \u0421\u0443\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u0431\u044b\u043b \u0437\u0430\u0434\u0430\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0431\u0435\u0437 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u043f\u043e\u0434 root. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e Alpine \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Docker (\u0440\u0430\u043d\u044c\u0448\u0435 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u043e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u043b\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33301","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Obrazy Docker Alpine by\u0142y dostarczane z pustym has\u0142em dla u\u017cytkownika root | ProHoster","description":"Badacze bezpiecze\u0144stwa z firmy Cisco ujawnili informacje o podatno\u015bci (CVE-2019-5021) w.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Docker-\u043e\u0431\u0440\u0430\u0437\u044b Alpine \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-5021) \u0432.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:51:51+00:00","article:modified_time":"2019-10-31T18:51:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33301","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 14:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:43:31","updated":"2026-01-21 14:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/33301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=33301"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/33301\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=33301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=33301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=33301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}