{"id":108095,"date":"2023-04-26T12:48:19","date_gmt":"2023-04-26T10:48:19","guid":{"rendered":"https:\/\/prohoster.info\/?p=108095"},"modified":"2023-04-27T10:34:32","modified_gmt":"2023-04-27T08:34:32","slug":"uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","title":{"rendered":"Vulnerabilit\u0103\u021bile din Git, care permit rescrierea fi\u0219ierelor sau executarea propriului cod","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Au fost publicate versiunile corective ale sistemului distribuit de control al versiunilor Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 \u0219i 2.30.9, \u00een care au fost remediate cinci vulnerabilit\u0103\u021bi. Pute\u021bi urm\u0103ri lans\u0103rile actualiz\u0103rilor pachetelor \u00een distribu\u021bii pe paginile Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. Ca solu\u021bii alternative pentru a v\u0103 proteja de vulnerabilit\u0103\u021bi, se recomand\u0103 s\u0103 evita\u021bi executarea comenzii «git apply —reject» atunci c\u00e2nd lucra\u021bi cu patch-uri externe nesigure \u0219i s\u0103 verifica\u021bi con\u021binutul $GIT_DIR\/config \u00eenainte de a rula comenzile «git submodule deinit», «git config —rename-section» \u0219i «git config —remove-section» atunci c\u00e2nd lucra\u021bi cu repozitorii nedemni de \u00eencredere. <\/p>\n

Vulnerabilitatea CVE-2023-29007 permite substituirea set\u0103rilor \u00een fi\u0219ierul de configurare $GIT_DIR\/config, care pot fi utilizate pentru a executa cod \u00een sistem prin specificarea c\u0103ilor c\u0103tre fi\u0219ierele executabile \u00een directivele core.pager, core.editor \u0219i core.sshCommand. Vulnerabilitatea este cauzat\u0103 de o eroare logic\u0103, din cauza c\u0103reia valorile de configurare foarte lungi pot fi procesate ca \u00eenceputul unei noi sec\u021biuni \u00een timpul opera\u021biunilor de redenumire sau eliminare a unei sec\u021biuni din fi\u0219ierul de configurare. \u00cen practic\u0103, valorile exploatatoare ale vulnerabilit\u0103\u021bii pot fi ob\u021binute prin specificarea unor URL-uri foarte lungi pentru submodule, care sunt salvate \u00een fi\u0219ierul $GIT_DIR\/config \u00een timpul ini\u021bializ\u0103rii. Aceste URL-uri pot fi interpretate ca noi set\u0103ri atunci c\u00e2nd \u00eencerca\u021bi s\u0103 le elimina\u021bi prin «git submodule deinit». <\/p>\n

Vulnerabilitatea CVE-2023-25652 permite suprascrierea con\u021binutului fi\u0219ierelor \u00een afara arborelui de lucru atunci c\u00e2nd este procesat\u0103 de comanda «git apply —reject» a patch-urilor formate special. La \u00eencercarea de a executa comanda «git apply» cu un patch mali\u021bios care \u00eencearc\u0103 s\u0103 scrie \u00eentr-un fi\u0219ier printr-un link simbolic, opera\u021biunea va fi respins\u0103. \u00cen Git 2.39.1, protec\u021bia \u00eempotriva manipul\u0103rilor prin linkuri simbolice a fost completat\u0103 cu blocarea patch-urilor care creeaz\u0103 linkuri simbolice \u0219i \u00eencearc\u0103 s\u0103 scrie prin acestea. Esen\u021ba vulnerabilit\u0103\u021bii discutate este c\u0103 Git nu lua \u00een considerare c\u0103 utilizatorul poate executa comanda «git apply —reject» pentru a scrie p\u0103r\u021bile respinse ale patch-ului sub form\u0103 de fi\u0219iere cu extensia «.rej» \u0219i atacatorul poate folosi aceast\u0103 oportunitate pentru a scrie con\u021binut \u00eentr-un director arbitrar, \u00een m\u0103sura \u00een care permit drepturile de acces curente. <\/p>\n

\u00cen plus, au fost remediate trei vulnerabilit\u0103\u021bi care se manifestau doar pe platforma Windows: CVE-2023-29012 (c\u0103utarea executabilului doskey.exe \u00een directorul de lucru al repository-ului la executarea comenzii «Git CMD», permi\u021b\u00e2nd executarea propriului cod \u00een sistemul utilizatorului), CVE-2023-25815 (supra\u00eenc\u0103rcarea buffer-ului la procesarea fi\u0219ierelor de localizare formate special \u00een gettext) \u0219i CVE-2023-29011 (posibilitatea \u00eenlocuirii fi\u0219ierului connect.exe \u00een timpul lucrului prin SOCKS5).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 \u0438 2.30.9, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108095","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bi \u00een Git care permit rescrierea fi\u0219ierelor sau executarea de cod personal | ProHoster","description":"Au fost publicate versiunile corective ale sistemului distribuit de gestionare a codului surs\u0103 Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 \u0219i 2.30.9, \u00een care au fost remediate cinci.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Git, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.40.1, 2.39.3, 2.38.5, 2.37.7, 2.36.6, 2.35.8, 2.34.8, 2.33.8, 2.32.7, 2.31.8 \u0438 2.30.9, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-git-pozvolyayushhie-perezapisat-fajly-ili-vypolnit-svoj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-26T10:48:19+00:00","article:modified_time":"2023-04-27T08:34:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108095","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=108095"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108095\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=108095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=108095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=108095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}