{"id":115207,"date":"2024-04-21T02:30:03","date_gmt":"2024-04-21T00:30:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php"},"modified":"2024-04-21T02:30:03","modified_gmt":"2024-04-21T00:30:03","slug":"uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","title":{"rendered":"Vulnerabilitate \u00een Glibc, exploatat\u0103 prin scripturi PHP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
O vulnerabilitate a fost identificat\u0103 \u00een biblioteca standard C Glibc (CVE-2024-2961), care duce la o dep\u0103\u0219ire a buffer-ului \u00een timpul conversiei \u0219irurilor formate special \u00een codificarea ISO-2022-CN-EXT de c\u0103tre func\u021bia iconv(). Cercet\u0103torul care a descoperit aceast\u0103 problem\u0103 inten\u021bioneaz\u0103 s\u0103 prezinte rezultatele pe 10 mai la conferin\u021ba OffensiveCon, unde se men\u021bioneaz\u0103 posibilitatea exploat\u0103rii vulnerabilit\u0103\u021bii prin aplica\u021bii scrise \u00een PHP. Se afirm\u0103 c\u0103 problema afecteaz\u0103 \u00eentreaga ecosistem PHP \u0219i unele aplica\u021bii. <\/p>\n
At the conversion of strings encoded in UCS4, in accordance with the requirements of RFC 1922, the library adds certain escape characters that highlight parts of the string where the encoding has changed. The vulnerability arises from improper boundary checking of internal buffers by the iconv() function, which can lead to a buffer overflow of up to 4 bytes. Specific fixed values, such as '$+I', '$+J', '$+K', '$+L', '$+M', and '$*H', may be written beyond the buffer limit. Although exploiting such a vulnerability for code execution seems unlikely, according to the researcher who discovered the issue, this was sufficient to prepare several exploit prototypes for a remote attack on PHP applications, leading to code execution. <\/p>\n
Vulnerabilitatea este activ\u0103 din anul 2000 \u0219i a fost remediat\u0103 \u00een ramura Glibc 2.40 aflat\u0103 \u00een dezvoltare. Corec\u021bia este, de asemenea, disponibil\u0103 sub form\u0103 de patch-uri pentru versiunile Glibc de la 2.32 la 2.39. \u00cen distribu\u021biile respective, remedierea vulnerabilit\u0103\u021bii poate fi urm\u0103rit\u0103 pe paginile: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Arch. \n Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"