{"id":81560,"date":"2020-05-14T19:42:19","date_gmt":"2020-05-14T17:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd"},"modified":"2020-05-14T19:42:19","modified_gmt":"2020-05-14T17:42:19","slug":"udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","title":{"rendered":"Vulnerabilidades exploradas remotamente no FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>No FreeBSD <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/thread.html\">foram corrigidas<\/a><\/noindex> Cinco vulnerabilidades, incluindo problemas que podem potencialmente levar \u00e0 sobrescrita de dados em n\u00edvel de n\u00facleo ao enviar determinados pacotes de rede ou permitir que um usu\u00e1rio local eleve suas permiss\u00f5es. As vulnerabilidades foram corrigidas nas atualiza\u00e7\u00f5es 12.1-RELEASE-p5 e 11.3-RELEASE-p9. <\/p>\n<p>A vulnerabilidade mais perigosa (<noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001950.html\">CVE-2020-7454<\/a><\/noindex>) \u00e9 causada pela aus\u00eancia de uma verifica\u00e7\u00e3o adequada do tamanho do pacote na biblioteca libalias ao analisar cabe\u00e7alhos espec\u00edficos de protocolo. A biblioteca libalias \u00e9 utilizada no filtro de pacotes ipfw para tradu\u00e7\u00e3o de endere\u00e7os e inclui fun\u00e7\u00f5es t\u00edpicas de substitui\u00e7\u00e3o de endere\u00e7os em pacotes IP e an\u00e1lise de protocolos. A vulnerabilidade permite, atrav\u00e9s do envio de um pacote de rede malformado, a leitura ou escrita de dados na mem\u00f3ria do n\u00facleo (ao usar a implementa\u00e7\u00e3o NAT no n\u00facleo) ou no processo natd (ao usar a implementa\u00e7\u00e3o NAT no espa\u00e7o do usu\u00e1rio). O problema n\u00e3o afeta configura\u00e7\u00f5es NAT constru\u00eddas usando filtros de pacotes pf e ipf, bem como configura\u00e7\u00f5es ipfw que n\u00e3o utilizam NAT.<br \/>\nCVE-2020-7455 <\/p>\n<p>Outras vulnerabilidades:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001951.html\">\u2014 outra vulnerabilidade remotamente explor\u00e1vel na libalias, relacionada ao c\u00e1lculo incorreto do comprimento dos pacotes no manipulador FTP. O problema \u00e9 limitado ao vazamento de alguns bytes de dados da \u00e1rea de mem\u00f3ria do n\u00facleo ou do processo natd.<\/a><\/noindex> \u2014 mais uma vulnerabilidade remota explor\u00e1vel no libalias, relacionada ao c\u00e1lculo incorreto do comprimento dos pacotes no manipulador FTP. O problema se limita ao vazamento de alguns bytes de dados da \u00e1rea de mem\u00f3ria do kernel ou do processo natd.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001953.html\">\u2014 uma vulnerabilidade no m\u00f3dulo cryptodev, causada por acesso a uma \u00e1rea de mem\u00f3ria j\u00e1 liberada (use-after-free), permitindo que um processo n\u00e3o privilegiado sobrescreva \u00e1reas arbitr\u00e1rias da mem\u00f3ria do n\u00facleo. Como uma solu\u00e7\u00e3o alternativa para bloquear a vulnerabilidade, recomenda-se descarregar o m\u00f3dulo cryptodev com o comando \"kldunload cryptodev\", caso ele tenha sido carregado (por padr\u00e3o, o cryptodev n\u00e3o \u00e9 carregado). O m\u00f3dulo cryptodev fornece aos aplicativos do espa\u00e7o do usu\u00e1rio acesso \u00e0 interface \/dev\/crypto para acessar mecanismos de acelera\u00e7\u00e3o de hardware de opera\u00e7\u00f5es criptogr\u00e1ficas (em AES-NI e OpenSSL, \/dev\/crypto n\u00e3o \u00e9 utilizado).<\/a><\/noindex> \u2014 vulnerabilidade no m\u00f3dulo cryptodev, causada pelo acesso a uma \u00e1rea de mem\u00f3ria j\u00e1 liberada (use-after-free), permitindo que um processo n\u00e3o privilegiado sobrescreva \u00e1reas arbitr\u00e1rias da mem\u00f3ria do kernel. Como uma solu\u00e7\u00e3o alternativa para bloquear a vulnerabilidade, recomenda-se descarregar o m\u00f3dulo cryptodev com o comando \u00abkldunload cryptodev\u00bb, caso ele tenha sido carregado (por padr\u00e3o, o cryptodev n\u00e3o \u00e9 carregado). O m\u00f3dulo cryptodev fornece acesso a aplica\u00e7\u00f5es do espa\u00e7o do usu\u00e1rio \u00e0 interface \/dev\/crypto para invocar mecanismos de acelera\u00e7\u00e3o de hardware para opera\u00e7\u00f5es criptogr\u00e1ficas (no AES-NI e OpenSSL \/dev\/crypto n\u00e3o \u00e9 utilizado).\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001954.html\">CVE-2019-15880<\/a><\/noindex> \u2014 segunda vulnerabilidade no cryptodev, permitindo que um usu\u00e1rio n\u00e3o privilegiado inicie uma falha no kernel ao enviar uma solicita\u00e7\u00e3o para executar uma opera\u00e7\u00e3o criptogr\u00e1fica com um MAC inv\u00e1lido. O problema \u00e9 causado pela falta de verifica\u00e7\u00e3o do tamanho da chave MAC ao alocar o buffer para seu armazenamento (o buffer era criado com base nos dados do tamanho fornecidos pelo usu\u00e1rio, sem verificar o tamanho real).\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001952.html\">CVE-2019-15878<\/a><\/noindex> \u2014 vulnerabilidade na implementa\u00e7\u00e3o do protocolo SCTP (Stream Control Transmission Protocol), causada pela verifica\u00e7\u00e3o incorreta da chave compartilhada utilizada pela extens\u00e3o SCTP-AUTH para autentica\u00e7\u00e3o de sequ\u00eancias SCTP. Um aplicativo local pode, atrav\u00e9s da Socket API, atualizar a chave enquanto interrompe a conex\u00e3o SCTP, o que leva a um acesso a uma \u00e1rea da mem\u00f3ria j\u00e1 liberada (use-after-free).\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52948\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 12.1-RELEASE-p5 \u0438 11.3-RELEASE-p9. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7454) \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u043f\u0430\u043a\u0435\u0442\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libalias \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-81560","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-14T17:42:19+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-14T17:42:19+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidades explor\u00e1veis remotamente no FreeBSD | ProHoster","description":"O FreeBSD corrigiu cinco vulnerabilidades, entre as quais h\u00e1 problemas com potencial.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-14T17:42:19+00:00","article:modified_time":"2020-05-14T17:42:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"81560","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:56:23","updated":"2022-10-01 22:00:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/81560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=81560"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/81560\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=81560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=81560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=81560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}