{"id":105611,"date":"2022-11-17T15:36:54","date_gmt":"2022-11-17T13:36:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-samba-i-mit-heimdal-kerberos-privodyashhaya-k-perepolneniyu-bufera"},"modified":"2022-11-17T15:36:54","modified_gmt":"2022-11-17T13:36:54","slug":"uyazvimost-v-samba-i-mit-heimdal-kerberos-privodyashhaya-k-perepolneniyu-bufera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-samba-i-mit-heimdal-kerberos-privodyashhaya-k-perepolneniyu-bufera","title":{"rendered":"O vulnerabilitate \u00een Samba \u0219i MIT\/Heimdal Kerberos, care duce la overflow de buffer.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Au fost publicate actualiz\u0103ri corective pentru pachetele Samba 4.17.3, 4.16.7 \u0219i 4.15.12, care remediaz\u0103 o vulnerabilitate (CVE-2022-42898) \u00een bibliotecile Kerberos, ce duce la o dep\u0103\u0219ire a buffer-ului \u0219i scrierea de date \u00een afara acestuia la procesarea parametrilor PAC (Privileged Attribute Certificate) trimi\u0219i de un utilizator autentificat. Publicarea actualiz\u0103rilor pachetelor \u00een distribu\u021bii poate fi urm\u0103rit\u0103 pe paginile: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD. <\/p>\n

Pe l\u00e2ng\u0103 Samba, problema apare \u0219i \u00een pachetele MIT Kerberos \u0219i Heimdal Kerberos. \u00cen raportul despre vulnerabilitate al proiectului Samba, amenin\u021barea nu este detaliat\u0103, dar \u00een raportul MIT Kerberos se men\u021bioneaz\u0103 c\u0103 vulnerabilitatea poate conduce la execu\u021bia de cod de la distan\u021b\u0103. Exploatarea vulnerabilit\u0103\u021bii este posibil\u0103 doar pe sistemele pe 32 de bi\u021bi. <\/p>\n

Problema afecteaz\u0103 configura\u021biile cu KDC (Key Distribution Center) sau kadmind. \u00cen configura\u021biile f\u0103r\u0103 Active Directory, vulnerabilitatea apare de asemenea pe fi\u0219ierele Samba care utilizeaz\u0103 Kerberos. servere<\/a> Problema este cauzat\u0103 de o eroare \u00een func\u021bia krb5_parse_pac(), care calculeaz\u0103 incorect dimensiunea buffer-ului utilizat la analizarea c\u00e2mpurilor PAC. Pe sistemele pe 32 de bi\u021bi, la procesarea PAC-urilor special concepute, eroarea putea conduce la plasarea unui bloc de 16 octe\u021bi, trimis de atacator, \u00een afara buffer-ului alocat.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.17.3, 4.16.7 \u0438 4.15.12 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-42898) \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 Kerberos, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 PAC (Privileged Attribute Certificate), \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u041f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD. \u041a\u0440\u043e\u043c\u0435 Samba […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105611","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een Samba \u0219i MIT\/Heimdal Kerberos, care duce la dep\u0103\u0219irea buffer-ului | ProHoster","description":"Au fost publicate actualiz\u0103ri corective pentru pachetele Samba 4.17.3, 4.16.7 \u0219i 4.15.12, care remediaz\u0103 o vulnerabilitate (CVE-2022-42898) \u00een bibliotecile Kerberos, duc\u00e2nd la o dep\u0103\u0219ire a buffer-ului \u0219i scrierea de date \u00een afara acestuia.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-samba-i-mit-heimdal-kerberos-privodyashhaya-k-perepolneniyu-bufera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Samba \u0438 MIT\/Heimdal Kerberos, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.17.3, 4.16.7 \u0438 4.15.12 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-42898) \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 Kerberos, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-samba-i-mit-heimdal-kerberos-privodyashhaya-k-perepolneniyu-bufera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-17T13:36:54+00:00","article:modified_time":"2022-11-17T13:36:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105611"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105611\/revisions"}],"predecessor-version":[{"id":164425,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105611\/revisions\/164425"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}