{"id":100806,"date":"2021-07-21T10:22:45","date_gmt":"2021-07-21T08:22:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/root-uyazvimost-v-yadre-linux-i-otkaz-v-obsluzhivanii-v-systemd"},"modified":"2021-07-21T10:22:45","modified_gmt":"2021-07-21T08:22:45","slug":"root-uyazvimost-v-yadre-linux-i-otkaz-v-obsluzhivanii-v-systemd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/root-uyazvimost-v-yadre-linux-i-otkaz-v-obsluzhivanii-v-systemd","title":{"rendered":"Vulnerabilitate Root \u00een nucleul Linux \u0219i atac de refuz \u00een serviciu \u00een systemd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Cercet\u0103torii de securitate de la Qualys au dezv\u0103luit detalii despre dou\u0103 vulnerabilit\u0103\u021bi care afecteaz\u0103 nucleul Linux \u0219i managerul de sistem systemd. Vulnerabilitatea din nucleu (CVE-2021-33909) permite unui utilizator local s\u0103 execute cod cu drepturi de root prin manipularea directorilor cu o ad\u00e2ncire mare.     <\/p>\n<p>Pericolul acestei vulnerabilit\u0103\u021bi este agravat de faptul c\u0103 cercet\u0103torii au reu\u0219it s\u0103 dezvolte exploate func\u021bionale care functioneaz\u0103 pe Ubuntu 20.04\/20.10\/21.04, Debian 11 \u0219i Fedora 34 \u00een configura\u021bia implicit\u0103. Este important de men\u021bionat c\u0103 alte distribu\u021bii nu au fost testate, dar teoretic ele sunt, de asemenea, vulnerabile \u0219i pot fi atacate. Codul complet al exploatelor va fi publicat dup\u0103 remedierea generalizat\u0103 a problemei, iar deocamdat\u0103 este disponibil doar un prototip func\u021bional limitat, care cauzeaz\u0103 pr\u0103bu\u0219irea sistemului. Problema este prezent\u0103 \u00eenc\u0103 din iulie 2014 \u0219i afecteaz\u0103 versiunile nucleului \u00eencep\u00e2nd cu 3.16. Remedierea vulnerabilit\u0103\u021bii a fost coordonat\u0103 cu comunitatea \u0219i a fost acceptat\u0103 \u00een nucleu pe 19 iulie. Distribu\u021biile principale au implementat deja actualiz\u0103ri ale pachetelor cu nucleul (Debian, Ubuntu, Fedora, RHEL, SUSE, Arch).    <\/p>\n<p>Vulnerabilitatea este cauzat\u0103 de absen\u021ba verific\u0103rii rezultatului conversiei de tip size_t \u00een int \u00eenainte de a executa opera\u021biuni \u00een codul seq_file, care creeaz\u0103 fi\u0219iere dintr-o secven\u021b\u0103 de \u00eenregistr\u0103ri. Lipsa verific\u0103rii poate duce la scrierea \u00een zona din afara limitelor bufferului atunci c\u00e2nd se creeaz\u0103, monteaz\u0103 \u0219i \u0219terg structuri de directoare cu un nivel de ad\u00e2ncire foarte mare (dimensiunea c\u0103ii dep\u0103\u0219ind 1 GB). Ca urmare, un atacator poate ob\u021bine scrierea \u0219irului de 10 bi\u021bi \"\/\/deleted\" cu un offset de \"- 2 GB - 10 bytes\", indic\u00e2nd zona imediat \u00eenaintea bufferului alocat.    <\/p>\n<p>Exploatul preg\u0103tit necesit\u0103 pentru func\u021bionare 5 GB de memorie \u0219i 1 milion de inode-uri libere. Func\u021bionarea exploatului const\u0103 \u00een crearea, prin apelul mkdir(), a unei ierarhii de aproximativ un milion de directoare \u00eenl\u0103n\u021buite pentru a atinge o dimensiune a c\u0103ii fi\u0219ierelor care dep\u0103\u0219e\u0219te 1 GB. Acest director este montat prin bind-mount \u00eentr-un spa\u021biu de nume al identificatorilor de utilizatori, dup\u0103 care este apelat\u0103 func\u021bia rmdir() pentru a-i realiza \u0219tergerea. \u00cen paralel, este creat un fir de execu\u021bie care \u00eencarc\u0103 un mic program eBPF, care este blocat \u00een etapa ulterioar\u0103 verific\u0103rii pseudocodului eBPF, dar \u00eenainte de JIT-compilare.     <\/p>\n<p>\u00cen spa\u021biul de nume neprivilegiat al identificatorilor de utilizatori, se deschide fi\u0219ierul \/proc\/self\/mountinfo \u0219i se \u00eencepe citirea unei c\u0103i lungi a directorului, montat prin bind-mount, ceea ce duce la scrierea \u0219irului \"\/\/deleted\" \u00eentr-o zon\u0103 \u00eenainte de \u00eenceputul bufferului. Pozi\u021bia pentru scrierea \u0219irului este aleas\u0103 astfel \u00eenc\u00e2t s\u0103 suprascrie o instruc\u021biune \u00eentr-un program eBPF deja verificat, dar \u00eenc\u0103 necompilat.   <\/p>\n<p>Apoi, la nivelul programului eBPF, scrierea necontrolat\u0103 \u00een afara bufferului este transformat\u0103 \u00eentr-o posibilitate controlat\u0103 de citire \u0219i scriere \u00een alte structuri ale nucleului prin manipularea structurilor btf \u0219i map_push_elem. Ca urmare, exploit-ul determin\u0103 loca\u021bia bufferului modprobe_path[] \u00een memoria nucleului \u0219i \u00eel suprascrie cu calea \"\/sbin\/modprobe\", permi\u021b\u00e2nd ini\u021bierea execu\u021biei oric\u0103rui fi\u0219ier executabil cu drepturi de root \u00een cazul \u00een care se efectueaz\u0103 apelul request_module(), care este executat, de exemplu, la crearea unui socket netlink.    <\/p>\n<p>Cercet\u0103torii ofer\u0103 mai multe metode de ocolire a protec\u021biei, care sunt eficiente doar pentru exploite specifice, dar nu elimin\u0103 problema \u00een sine. Se recomand\u0103 setarea parametrului \"\/proc\/sys\/kernel\/unprivileged_userns_clone\" la 0 pentru a interzice montarea directorilor \u00een spa\u021biul de nume al identificatorilor de utilizatori, precum \u0219i \"\/proc\/sys\/kernel\/unprivileged_bpf_disabled\" la 1 pentru a interzice \u00eenc\u0103rcarea programelor eBPF \u00een nucleu.  <center>  <iframe loading=\"lazy\" title=\"Sequoia: O Vulnerabilitate de Escaladare a Privilegiilor Locale \u00een Stratul de Fi\u0219iere al Linux (CVE-2021-33909)\" src=\"https:\/\/player.vimeo.com\/video\/577035507\" width=\"640\" height=\"360\" frameborder=\"0\" allowfullscreen><\/iframe><\/center>      <\/p>\n<p>Este demn de men\u021bionat c\u0103, analiz\u00e2nd o alternativ\u0103 de atac legat\u0103 de utilizarea mecanismului FUSE \u00een loc de bind-mount pentru a monta un director mare, cercet\u0103torii au descoperit o alt\u0103 vulnerabilitate (CVE-2021-33910) care afecteaz\u0103 managerul de sistem systemd. S-a dovedit c\u0103, \u00een \u00eencercarea de a monta un director cu o lungime a c\u0103ii care dep\u0103\u0219e\u0219te 8 MB, procesul de ini\u021bializare (PID1) sufer\u0103 de o epuizare a stivei de memorie \u0219i se blocheaz\u0103, ceea ce duce sistemul \u00eentr-o stare de &#171;panic&#187;.     <\/p>\n<p>Problema este legat\u0103 de faptul c\u0103 systemd monitorizeaz\u0103 \u0219i analizeaz\u0103 con\u021binutul \/proc\/self\/mountinfo \u0219i proceseaz\u0103 fiecare punct de montare \u00een func\u021bia unit_name_path_escape(), unde se execut\u0103 opera\u021bia strdupa(), care plaseaz\u0103 datele pe stiv\u0103 \u0219i nu \u00een memorie alocat\u0103 dinamic. Av\u00e2nd \u00een vedere c\u0103 dimensiunea maxim\u0103 a stivei este limitat\u0103 prin RLIMIT_STACK, procesarea unui drum prea lung pentru punctul de montare duce la c\u0103derea procesului PID1 \u0219i oprirea sistemului. O atac poate folosi un modul FUSE simplu, \u00een combina\u021bie cu montarea unui director cu un grad mare de ad\u00e2ncime, \u00een care dimensiunea drumului dep\u0103\u0219e\u0219te 8 MB.    <\/p>\n<p>Problema se manifest\u0103 \u00eencep\u00e2nd cu systemd 220 (aprilie 2015), fiind deja remediat\u0103 \u00een depozitul principal systemd \u0219i corectat\u0103 \u00een distribu\u021bii (Debian, Ubuntu, Fedora, RHEL, SUSE, Arch). Este de remarcat faptul c\u0103 \u00een versiunea systemd 248 exploatul nu func\u021bioneaz\u0103 din cauza unei erori \u00een codul systemd, care duce la o eroare \u00een procesarea \/proc\/self\/mountinfo. De asemenea, este interesant c\u0103 \u00een 2018 a ap\u0103rut o situa\u021bie similar\u0103 atunci c\u00e2nd s-au f\u0103cut \u00eencerc\u0103ri de a scrie un exploat pentru vulnerabilitatea CVE-2018-14634 din kernelul Linux, cercet\u0103torii de la Qualys \u00eent\u00e2lnind trei vulnerabilit\u0103\u021bi critice \u00een systemd.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55528\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualys \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e Linux \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 systemd. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 (CVE-2021-33909) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 Ubuntu 20.04\/20.10\/21.04, Debian 11 \u0438 Fedora 34 \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100806","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualys \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e Linux \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 systemd.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/root-uyazvimost-v-yadre-linux-i-otkaz-v-obsluzhivanii-v-systemd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 systemd | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualys \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e Linux \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 systemd.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/root-uyazvimost-v-yadre-linux-i-otkaz-v-obsluzhivanii-v-systemd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-07-21T08:22:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-07-21T08:22:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate de root \u00een kernelul Linux \u0219i atac de refuz al serviciului \u00een systemd | ProHoster","description":"Cercet\u0103torii \u00een securitate de la Qualys au dezv\u0103luit detalii despre dou\u0103 vulnerabilit\u0103\u021bi care afecteaz\u0103 kernelul Linux \u0219i managerul de sistem systemd.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/root-uyazvimost-v-yadre-linux-i-otkaz-v-obsluzhivanii-v-systemd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 systemd | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualys \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e Linux \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 systemd.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/root-uyazvimost-v-yadre-linux-i-otkaz-v-obsluzhivanii-v-systemd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-21T08:22:45+00:00","article:modified_time":"2021-07-21T08:22:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100806","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-21 08:37:12","updated":"2022-09-29 19:57:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100806"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100806\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}