{"id":102953,"date":"2022-01-13T15:37:33","date_gmt":"2022-01-13T13:37:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d0%b8-%d0%b2-systemd-flatpak-samba-freerdp-clamav-node-js"},"modified":"2022-01-13T15:37:33","modified_gmt":"2022-01-13T13:37:33","slug":"uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","title":{"rendered":"\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>O vulnerabilitate a fost identificat\u0103 \u00een utilitarul systemd-tmpfiles inclus \u00een systemd (CVE-2021-3997), care permite generarea unei recursii necontrolate. Problema poate fi exploatat\u0103 pentru a provoca un refuz de serviciu \u00een timpul \u00eenc\u0103rc\u0103rii sistemului prin crearea unui num\u0103r mare de subdirectoare \u00een directorul \/tmp. O solu\u021bie este disponibil\u0103 \u00een prezent sub form\u0103 de patch. Actualiz\u0103rile pachetelor care rezolv\u0103 problema au fost propuse \u00een Ubuntu \u0219i SUSE, dar \u00eenc\u0103 nu sunt disponibile \u00een Debian, RHEL \u0219i Fedora (corec\u021biile fiind \u00een etapa de testare).     <\/p>\n<p>C\u00e2nd se creeaz\u0103 mii de directoare \u00eenf\u0103\u0219urate, executarea opera\u021biei \u201esystemd-tmpfiles \u2014remove\u201d duce la o \u00eencheiere abrupt\u0103 din cauza epuiz\u0103rii stivei. De obicei, utilitarul systemd-tmpfiles execut\u0103 \u00eentr-o singur\u0103 apelare opera\u021biile de \u0219tergere \u0219i creare a directoarelor (\u201esystemd-tmpfiles \u2014create \u2014remove \u2014boot \u2014exclude-prefix=\/dev\u201d), \u0219tergerea av\u00e2nd loc mai \u00eent\u00e2i, urmat\u0103 de crearea, adic\u0103 o eroare \u00een faza de \u0219tergere va duce la necrearea fi\u0219ierelor esen\u021biale specificate \u00een \/usr\/lib\/tmpfiles.d\/*.conf.      <\/p>\n<p>De asemenea, se men\u021bioneaz\u0103 un scenariu de atac mai periculos pentru Ubuntu 21.04: din cauz\u0103 c\u0103, din cauza e\u0219ecului systemd-tmpfiles, nu se creeaz\u0103 fi\u0219ierul \/run\/lock\/subsys \u0219i directorul \/run\/lock permite scrierea de c\u0103tre to\u021bi utilizatorii, un atacator poate crea un director \/run\/lock\/subsys sub propriul s\u0103u identificator \u0219i, prin crearea de linkuri simbolice care se intersecteaz\u0103 cu fi\u0219ierele de blocare ale proceselor de sistem, poate organiza rescrierea fi\u0219ierelor sistemului.     <\/p>\n<p>\u00cen plus, se poate observa publicarea noilor versiuni ale proiectelor Flatpak, Samba, FreeRDP, Clamav \u0219i Node.js, \u00een care au fost remediate vulnerabilit\u0103\u021bile:    <\/p>\n<ul>\n<li class=\"l\"> \u00cen versiunile corective ale instrumentelor pentru crearea pachetelor autonome Flatpak 1.10.6 \u0219i 1.12.3 au fost remediate dou\u0103 vulnerabilit\u0103\u021bi: Prima vulnerabilitate (CVE-2021-43860) permite ca, la desc\u0103rcarea unui pachet dintr-un repository nesigur prin manipul\u0103ri cu metadatele, s\u0103 se ascund\u0103 afi\u0219area anumitor privilegii extinse \u00een timpul instal\u0103rii. A doua vulnerabilitate (f\u0103r\u0103 CVE) permite, \u00een timpul construirii pachetului cu comanda \u201eflatpak-builder \u2014mirror-screenshots-url\u201d, crearea de directoare \u00een zona FS dincolo de directorul de construc\u021bie.\n<li class=\"l\">\u00cen actualizarea Samba 4.13.16 a fost remediat\u0103 o vulnerabilitate (CVE-2021-43566), care permite clientului, prin manipularea linkurilor simbolice pe parti\u021bii SMB1 sau NFS, s\u0103 provoace crearea de <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-newyork\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2695\">server<\/a> catalogului dincolo de zona exportabil\u0103 a FS (problema este cauzat\u0103 de o stare de competi\u021bie \u0219i este greu de exploatat \u00een practic\u0103, dar teoretic posibil\u0103). Problema afecteaz\u0103 versiunile anterioare versiunii 4.13.16.\n<p>De asemenea, a fost publicat un raport despre o alt\u0103 vulnerabilitate similar\u0103 (CVE-2021-20316), care permite unui client autentificat, prin manipularea leg\u0103turilor simbolice, s\u0103 citeasc\u0103 sau s\u0103 modifice con\u021binutul unui fi\u0219ier sau al metadatelor unui catalog \u00een zona FS. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-los-angeles\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3788\">server<\/a> dincolo de sec\u021biunea exportabil\u0103. Problema a fost rezolvat\u0103 \u00een versiunea 4.15.0, dar afecteaz\u0103 \u0219i ramurile anterioare. Totu\u0219i, nu vor fi publicate remedii pentru ramurile mai vechi, deoarece vechea arhitectur\u0103 Samba VFS nu permite remedierea problemei din cauza leg\u0103rii opera\u021biunilor cu metadatele la c\u0103ile fi\u0219ierelor (\u00een Samba 4.15, stratul VFS a fost complet ref\u0103cut). Pericolul problemei este redus de faptul c\u0103 aceasta este destul de complicat\u0103 \u00een exploatare, iar drepturile de acces ale utilizatorului trebuie s\u0103 permit\u0103 citirea sau scrierea \u00een fi\u0219ierul sau catalogul \u021bint\u0103.      <\/p>\n<li class=\"l\"> \u00cen versiunea 2.5 a proiectului FreeRDP, care ofer\u0103 o implementare liber\u0103 a protocolului de acces la desktop RDP (Remote Desktop Protocol), au fost corectate trei probleme de securitate (identificatorii CVE nu au fost asocia\u021bi) care pot duce la suprasarcin\u0103 a bufferului atunci c\u00e2nd se folose\u0219te o local\u0103 incorect\u0103, prelucr\u00e2nd parametrii de registru special forma\u021bi \u0219i indic\u00e2nd un nume al extensiei incorect formatat. Printre modific\u0103rile din noua versiune se num\u0103r\u0103 suportul pentru biblioteca OpenSSL 3.0, implementarea set\u0103rii TcpConnectTimeout, \u00eembun\u0103t\u0103\u021birea compatibilit\u0103\u021bii cu LibreSSL \u0219i solu\u021bionarea problemelor cu clipboard-ul \u00een medii bazate pe Wayland.\n<li class=\"l\"> \u00cen noile versiuni ale pachetului antivirus liber ClamAV 0.103.5 \u0219i 0.104.2 a fost remediat\u0103 vulnerabilitatea CVE-2022-20698, legat\u0103 de citirea incorect\u0103 a pointerului \u0219i care permite provocarea de la distan\u021b\u0103 a unei erori de proces, dac\u0103 pachetul a fost compilat cu biblioteca libjson-c \u0219i op\u021biunea CL_SCAN_GENERAL_COLLECT_METADATA este activat\u0103 \u00een set\u0103ri (clamscan \u2014gen-json).\n<li class=\"l\"> \u00cen actualiz\u0103rile platformei Node.js 16.13.2, 14.18.3, 17.3.1 \u0219i 12.22.9 au fost remediate patru vulnerabilit\u0103\u021bi: o ocolire a verific\u0103rii certificatului \u00een timpul verific\u0103rii conexiunii de re\u021bea din cauza conversiei incorecte a SAN (Subject Alternative Names) \u00een format de text (CVE-2021-44532); o gestionare incorect\u0103 a enumer\u0103rii mai multor valori \u00een c\u00e2mpurile subject \u0219i issuer, care poate fi utilizat\u0103 pentru a ocoli verificarea acestor c\u00e2mpuri \u00een certificate (CVE-2021-44533); o ocolire a restric\u021biilor legate de tipul URI SAN \u00een certificate (CVE-2021-44531); o verificare insuficient\u0103 a datelor de intrare \u00een func\u021bia console.table(), care poate fi utilizat\u0103 pentru a atribui \u0219iruri goale cheilor numerice (CVE-2022-21824).          <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56498\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102953","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-01-13T13:37:33+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-01-13T13:37:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bi \u00een systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster","description":"\u00cen utilitarul systemd-tmpfiles inclus \u00een systemd a fost descoperit\u0103 o vulnerabilitate (CVE-2021-3997), care permite provocarea unei recursi necontrolate.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster","og:description":"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-13T13:37:33+00:00","article:modified_time":"2022-01-13T13:37:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102953","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-13 13:38:58","updated":"2026-02-22 15:30:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=102953"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102953\/revisions"}],"predecessor-version":[{"id":162316,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102953\/revisions\/162316"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=102953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=102953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=102953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}