{"id":103125,"date":"2022-01-29T15:37:09","date_gmt":"2022-01-29T13:37:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-openssl-glibc-util-linux-drajverah-i915-i-vmwgfx"},"modified":"2022-01-29T15:37:09","modified_gmt":"2022-01-29T13:37:09","slug":"uyazvimosti-v-openssl-glibc-util-linux-drajverah-i915-i-vmwgfx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-openssl-glibc-util-linux-drajverah-i915-i-vmwgfx","title":{"rendered":"Vulnerabilit\u0103\u021bi \u00een OpenSSL, Glibc, util-linux, driverele i915 \u0219i vmwgfx.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Informa\u021biile privind vulnerabilitatea (CVE-2021-4160) din biblioteca criptografic\u0103 OpenSSL, cauzat\u0103 de o eroare \u00een implementarea func\u021biei BN_mod_exp, care duce la returnarea unui rezultat gre\u0219it al opera\u021biei de ridicare la p\u0103trat, au fost dezv\u0103luite. Problema apare doar pe echipamente bazate pe arhitecturi MIPS32 \u0219i MIPS64 \u0219i poate compromite algoritmii pe baz\u0103 de curbe eliptice, inclusiv cei utiliza\u021bi implicit \u00een TLS 1.3. Problema a fost rezolvat\u0103 \u00een actualiz\u0103rile din decembrie pentru OpenSSL 1.1.1m \u0219i 3.0.1.      <\/p>\n<p>Se observ\u0103 c\u0103 implementarea atacurilor reale pentru ob\u021binerea informa\u021biilor despre cheile private folosind problema identificat\u0103 este considerat\u0103 posibil\u0103, dar improbabil\u0103, fiind prea complicat\u0103 pentru a fi realizat\u0103 \u0219i necesit\u0103 resurse computa\u021bionale enorme. De asemenea, atacul asupra TLS este exclus, deoarece \u00een 2016, prin remedierea vulnerabilit\u0103\u021bii CVE-2016-0701, s-a interzis partajarea cheii private DH de c\u0103tre clien\u021bi.     <\/p>\n<p>De asemenea, se poate men\u021biona c\u00e2teva vulnerabilit\u0103\u021bi recent identificate \u00een proiectele open-source:  <\/p>\n<ul>\n<li class=\"l\"> C\u00e2teva vulnerabilit\u0103\u021bi (CVE-2022-0330) \u00een driverul grafic i915, legate de lipsa de resetare a TLB pentru GPU. \u00cen cazul \u00een care IOMMU (traducerea adreselor) nu este utilizat, vulnerabilitatea permite accesul la pagini aleatorii de memorie din spa\u021biul utilizatorului. Problema poate fi utilizat\u0103 pentru a corupe sau citi date din zone aleatorii de memorie. Problema se manifest\u0103 pe toate GPU-urile Intel integrate \u0219i discrete. Remedierea a fost realizat\u0103 prin ad\u0103ugarea unei reset\u0103ri obligatorii a TLB \u00eenainte de fiecare opera\u021biune de retur a bufferului GPU \u00een sistem, ceea ce va conduce la o sc\u0103dere a performan\u021bei. Impactul asupra performan\u021bei depinde de GPU, de opera\u021biunile efectuate pe GPU \u0219i de \u00eenc\u0103rcarea sistemului. Remedierea este disponibil\u0103 momentan doar sub form\u0103 de patch.\n<li class=\"l\"> Vulnerabilitatea (CVE-2022-22942) din driverul grafic vmwgfx, utilizat pentru accelerarea 3D \u00een medii VMware. Problema permite unui utilizator neprivilegiat s\u0103 acceseze fi\u0219ierele deschise de alte procese din sistem. Pentru a efectua atacul, este necesar accesul la dispozitivul \/dev\/dri\/card0 sau \/dev\/dri\/rendererD128, precum \u0219i capacitatea de a executa apelul ioctl() cu descriptorul de fi\u0219ier ob\u021binut.\n<li class=\"l\"> Vulnerabilit\u0103\u021bile (CVE-2021-3996, CVE-2021-3995) din biblioteca libmount, livrat\u0103 \u00een pachetul util-linux, permit unui utilizator neprivilegiat s\u0103 demonteze parti\u021bii de disc f\u0103r\u0103 a avea autoriza\u021bia necesar\u0103. Problema a fost identificat\u0103 \u00een timpul auditului programelor SUID-root umount \u0219i fusermount.\n<li class=\"l\"> Vulnerabilit\u0103\u021bile din biblioteca standard C Glibc, care afecteaz\u0103 func\u021biile realpath (CVE-2021-3998) \u0219i getcwd (CVE-2021-3999).\n<ul>\n<li class=\"l\"> Problema din realpath() este cauzat\u0103 de returnarea, \u00een anumite condi\u021bii, a unei valori incorecte care con\u021bine date reziduale necur\u0103\u021bate din stiv\u0103. \u00cen cazul programului SUID-root fusermount, vulnerabilitatea poate fi utilizat\u0103 pentru a ob\u021bine informa\u021bii confiden\u021biale din memoria procesului, cum ar fi informa\u021biile despre pointeri.\n<li class=\"l\"> Problema din getcwd() permite o dep\u0103\u0219ire a buffer-ului de un byte. Aceast\u0103 problem\u0103 este cauzat\u0103 de o eroare care exist\u0103 din 1995. Pentru a declan\u0219a dep\u0103\u0219irea, este suficient s\u0103 se efectueze apelul chdir() pentru directorul \"\/\" \u00eentr-un spa\u021biu de nume de montare separat. Nu se raporteaz\u0103 dac\u0103 vulnerabilitatea este limitat\u0103 doar la \u00eenchiderea anormal\u0103 a procesului, dar \u00een trecut au existat cazuri de exploatare a unor vulnerabilit\u0103\u021bi similare, \u00een ciuda scepticismului dezvoltatorilor.      <\/ul>\n<li class=\"l\"> Vulnerabilitatea (CVE-2022-23220) din pachetul usbview permite utilizatorilor locali care s-au conectat prin SSH s\u0103 execute cod cu privilegii de root, din cauza set\u0103rilor din regulile PolKit (allow_any=yes) care permit rularea utilit\u0103\u021bii usbview sub utilizatorul root f\u0103r\u0103 autentificare. Exploatarea se limiteaz\u0103 la utilizarea op\u021biunii \"--gtk-module\" pentru a \u00eenc\u0103rca biblioteca proprie \u00een usbview. Problema a fost rezolvat\u0103 \u00een versiunea usbview 2.2.          <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56604\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-4160) \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenSSL, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0443\u043c\u043c\u0430\u0442\u043e\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BN_mod_exp, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u043e\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u0432\u0430\u0434\u0440\u0430\u0442. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 MIPS32 \u0438 MIPS64, \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0440\u0438\u0432\u044b\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 TLS 1.3. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103125","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-4160) \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenSSL, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0443\u043c\u043c\u0430\u0442\u043e\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BN_mod_exp, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-openssl-glibc-util-linux-drajverah-i915-i-vmwgfx\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSL, Glibc, util-linux, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 i915 \u0438 vmwgfx | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-4160) \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenSSL, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0443\u043c\u043c\u0430\u0442\u043e\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BN_mod_exp, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-openssl-glibc-util-linux-drajverah-i915-i-vmwgfx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-01-29T13:37:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-01-29T13:37:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bi \u00een OpenSSL, Glibc, util-linux, driverele i915 \u0219i vmwgfx | ProHoster","description":"A fost dezv\u0103luit\u0103 informa\u021bia despre vulnerabilitatea (CVE-2021-4160) din biblioteca criptografic\u0103 OpenSSL, cauzat\u0103 de o eroare \u00een implementarea func\u021biei BN_mod_exp, care duce la returnarea unui rezultat incorect al opera\u021biei.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-openssl-glibc-util-linux-drajverah-i915-i-vmwgfx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSL, Glibc, util-linux, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 i915 \u0438 vmwgfx | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-4160) \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenSSL, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0443\u043c\u043c\u0430\u0442\u043e\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BN_mod_exp, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-openssl-glibc-util-linux-drajverah-i915-i-vmwgfx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-29T13:37:09+00:00","article:modified_time":"2022-01-29T13:37:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103125","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-29 13:38:14","updated":"2022-09-28 16:17:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=103125"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103125\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=103125"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=103125"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=103125"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}