{"id":107183,"date":"2023-03-10T18:48:11","date_gmt":"2023-03-10T16:48:11","guid":{"rendered":"https:\/\/prohoster.info\/?p=107183"},"modified":"2023-03-13T12:06:39","modified_gmt":"2023-03-13T10:06:39","slug":"kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","title":{"rendered":"Vulnerabilidade cr\u00edtica no Wasmtime, runtime para aplica\u00e7\u00f5es WebAssembly","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nas atualiza\u00e7\u00f5es corretivas do Wasmtime 6.0.1, 5.0.1 e 4.0.1, uma vulnerabilidade (CVE-2023-26489) foi corrigida, classificada com n\u00edvel cr\u00edtico de gravidade. A vulnerabilidade permite a grava\u00e7\u00e3o de dados em uma \u00e1rea de mem\u00f3ria fora dos limites permitidos para o c\u00f3digo WebAssembly isolado, que pode ser potencialmente explorada por um invasor para executar seu c\u00f3digo fora do ambiente isolado WASI. <\/p>\n

O Wasmtime \u00e9 um runtime para a execu\u00e7\u00e3o de aplica\u00e7\u00f5es WebAssembly com extens\u00f5es WASI (WebAssembly System Interface) como aplica\u00e7\u00f5es isoladas normais. A ferramenta \u00e9 escrita em Rust, e a vulnerabilidade foi causada por um erro l\u00f3gico na defini\u00e7\u00e3o das regras de endere\u00e7amento linear de mem\u00f3ria no gerador de c\u00f3digo Cranelift, que traduz uma representa\u00e7\u00e3o intermedi\u00e1ria independente da arquitetura para c\u00f3digo de m\u00e1quina execut\u00e1vel para a arquitetura x86_64. <\/p>\n

Em particular, para aplica\u00e7\u00f5es WebAssembly, foram calculados endere\u00e7os efetivos de 35 bits em vez dos endere\u00e7os de 33 bits permitidos no WebAssembly, o que deslocou o limite permitido para opera\u00e7\u00f5es de leitura e grava\u00e7\u00e3o de mem\u00f3ria virtual para 34 GB, enquanto as configura\u00e7\u00f5es do ambiente sandbox fornecem prote\u00e7\u00e3o para 6 GB a partir do endere\u00e7o base. Como resultado, o intervalo de mem\u00f3ria virtual de 6 a 34 GB a partir do endere\u00e7o base tornava-se acess\u00edvel para leitura e grava\u00e7\u00e3o pelas aplica\u00e7\u00f5es WebAssembly. Nessa mem\u00f3ria, podem ser alocados outros ambientes WebAssembly ou componentes do runtime WebAssembly. <\/p>\n

Se n\u00e3o for poss\u00edvel atualizar a vers\u00e3o do Wasmtime, como uma solu\u00e7\u00e3o alternativa para bloquear o erro, \u00e9 mencionado o uso da op\u00e7\u00e3o 'Config::static_memory_maximum_size(0)' para ativar uma verifica\u00e7\u00e3o de limites obrigat\u00f3ria ao acessar a mem\u00f3ria linear (o que resulta em uma redu\u00e7\u00e3o significativa de desempenho). Outra op\u00e7\u00e3o \u00e9 utilizar a configura\u00e7\u00e3o 'Config::static_memory_guard_size(1 < 36)' para aumentar o n\u00famero de p\u00e1ginas de mem\u00f3ria de guardas (Guard Page), que geram uma exce\u00e7\u00e3o quando acessadas, alocadas na faixa problem\u00e1tica da mem\u00f3ria virtual (resultando em uma grande reserva de mem\u00f3ria virtual e limitando o n\u00famero de aplicativos WebAssembly execut\u00e1veis ao mesmo tempo).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Wasmtime 6.0.1, 5.0.1 \u0438 4.0.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-26489), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446\u044b, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0439 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e WebAssembly-\u043a\u043e\u0434\u0430, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f WASI. Wasmtime \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 runtime \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f WebAssembly-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 WASI […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107183","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidade cr\u00edtica no Wasmtime, runtime para aplica\u00e7\u00f5es WebAssembly | ProHoster","description":"Nas atualiza\u00e7\u00f5es corretivas do Wasmtime 6.0.1, 5.0.1 e 4.0.1, uma vulnerabilidade (CVE-2023-26489) foi corrigida, classificada com n\u00edvel cr\u00edtico de gravidade.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wasmtime, runtime \u0434\u043b\u044f WebAssembly-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Wasmtime 6.0.1, 5.0.1 \u0438 4.0.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-26489), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-10T16:48:11+00:00","article:modified_time":"2023-03-13T10:06:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/107183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=107183"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/107183\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=107183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=107183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=107183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}