{"id":119988,"date":"2024-09-30T09:21:07","date_gmt":"2024-09-30T07:21:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux"},"modified":"2024-09-30T09:21:07","modified_gmt":"2024-09-30T07:21:07","slug":"uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","title":{"rendered":"Vulnerabilidade no libnv no FreeBSD e vulnerabilidades no Netfilter no Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Na corre\u00e7\u00e3o de vulnerabilidade lan\u00e7ada no in\u00edcio de setembro para a biblioteca libnv, foi identificando um erro l\u00f3gico, que impediu a vulnerabilidade de ser resolvida adequadamente, deixando o sistema suscet\u00edvel a ataques. A biblioteca libnv \u00e9 desenvolvida pelo projeto FreeBSD e \u00e9 utilizada no n\u00facleo e em aplicativos do sistema base para processar listas no formato chave\/valor e organizar a transmiss\u00e3o de dados na comunica\u00e7\u00e3o entre processos. A biblioteca \u00e9 baseada no algoritmo nvlist, utilizado no projeto OpenZFS, mas o FreeBSD criou uma implementa\u00e7\u00e3o pr\u00f3pria, portanto, a vulnerabilidade n\u00e3o afeta o OpenZFS. <\/p>\n

A vulnerabilidade \u00e9 causada por um estouro de inteiro, resultando na aloca\u00e7\u00e3o de um buffer menor do que o bloco de dados gravado no buffer. O erro cometido pode ser potencialmente explorado para escalar privil\u00e9gios ao sobrescrever \u00e1reas de mem\u00f3ria no n\u00facleo e em processos do sistema, uma vez que a libnv \u00e9 utilizada na libcasper para intera\u00e7\u00e3o entre c\u00f3digo privilegiado e n\u00e3o privilegiado. Uma corre\u00e7\u00e3o adequada para a vulnerabilidade (CVE-2024-45287) foi oferecida nas atualiza\u00e7\u00f5es 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 e 13.3-RELEASE-p7, al\u00e9m de estar dispon\u00edvel na forma de patch. <\/p>\n

No FreeBSD, tamb\u00e9m foi corrigida a vulnerabilidade (CVE-2024-41721) no hipervisor bhyve, que potencialmente permite a execu\u00e7\u00e3o de c\u00f3digo em um processo em execu\u00e7\u00e3o no sistema hospedeiro (geralmente com privil\u00e9gios de root, mas isolado por um sandbox baseado em Capsicum), durante manipula\u00e7\u00f5es dentro do sistema convidado. A vulnerabilidade est\u00e1 presente no c\u00f3digo para emular o controlador USB XHCI e \u00e9 causada pela verifica\u00e7\u00e3o insuficiente dos limites do buffer, o que pode levar \u00e0 leitura de dados de uma \u00e1rea fora do buffer e, potencialmente, \u00e0 possibilidade de grava\u00e7\u00e3o em \u00e1reas arbitr\u00e1rias da mem\u00f3ria do processo. O ataque pode ser realizado se houver a capacidade de executar processos privilegiados no sistema convidado. A vulnerabilidade foi corrigida nas atualiza\u00e7\u00f5es do FreeBSD 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 e 13.3-RELEASE-p7. <\/p>\n

Al\u00e9m disso, pode-se notar a publica\u00e7\u00e3o de prot\u00f3tipos de exploits e descri\u00e7\u00f5es de m\u00e9todos de explora\u00e7\u00e3o para vulnerabilidades previamente identificadas no n\u00facleo do Linux, CVE-2024-26808 e CVE-2024-1085. Os problemas foram corrigidos nas atualiza\u00e7\u00f5es do n\u00facleo 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3 e 6.8, e j\u00e1 foram resolvidos nas principais distribui\u00e7\u00f5es (Debian, Ubuntu, RHEL, SUSE, Fedora). As vulnerabilidades s\u00e3o causadas pelo acesso a uma \u00e1rea de mem\u00f3ria j\u00e1 liberada nas fun\u00e7\u00f5es nft_chain_filter e nft_setelem_catchall_deactivate no subsistema netfilter, permitindo a execu\u00e7\u00e3o de c\u00f3digo com privil\u00e9gios de root. Para realizar o ataque, \u00e9 necess\u00e1rio ter acesso ao nftables, o que pode ser obtido com os direitos CAP_NET_ADMIN em qualquer espa\u00e7o de nomes de identificadores de usu\u00e1rio (user namespace) ou espa\u00e7o de nomes de rede (network namespace), fornecidos, por exemplo, em cont\u00eaineres isolados. <\/p>\n

Os exploits foram preparados pelos participantes da iniciativa KernelCTF (Kernel Capture the Flag), na qual a empresa Google recompensa a identifica\u00e7\u00e3o de vulnerabilidades no n\u00facleo do Linux. Inicialmente, os problemas foram considerados como apenas algumas das muitas vulnerabilidades potenciais passageiras no n\u00facleo \u2014 por exemplo, na atualiza\u00e7\u00e3o de junho do pacote do n\u00facleo 5.10 no Debian, al\u00e9m da CVE-2024-26808, foram corrigidas mais 345 (!) vulnerabilidades potenciais. A cada semana, v\u00e1rias dezenas de novas vulnerabilidades s\u00e3o identificadas no n\u00facleo, que anteriormente n\u00e3o eram classificadas como problemas de seguran\u00e7a (por exemplo, na semana passada, 68 vulnerabilidades foram marcadas).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libnv \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c FreeBSD \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438\u0437 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u043a\u043b\u044e\u0447\/\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119988","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidade no libnv no FreeBSD e vulnerabilidades no Netfilter no Linux | ProHoster","description":"Na corre\u00e7\u00e3o de vulnerabilidade liberada no in\u00edcio de setembro para a biblioteca libnv, foi identificada um erro l\u00f3gico que impediu a corre\u00e7\u00e3o adequada da vulnerabilidade, deixando o sistema vulner\u00e1vel a ataques.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 libnv \u0432\u043e FreeBSD \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter \u0432 Linux | ProHoster","og:description":"\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-30T07:21:07+00:00","article:modified_time":"2024-09-30T07:21:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119988","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 06:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:55:19","updated":"2026-01-23 06:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/119988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=119988"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/119988\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=119988"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=119988"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=119988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}