{"id":119988,"date":"2024-09-30T09:21:07","date_gmt":"2024-09-30T07:21:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux"},"modified":"2024-09-30T09:21:07","modified_gmt":"2024-09-30T07:21:07","slug":"uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","title":{"rendered":"Vulnerabilitate \u00een libnv \u00een FreeBSD \u0219i vulnerabilit\u0103\u021bi \u00een Netfilter \u00een Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen corectarea vulnerabilit\u0103\u021bii din biblioteca libnv, lansat\u0103 la \u00eenceputul lunii septembrie, a fost identificat\u0103 o eroare logic\u0103, din cauza c\u0103reia vulnerabilitatea nu a fost corect remediat\u0103 \u0219i sistemul a r\u0103mas expus la atacuri. Biblioteca libnv este dezvoltat\u0103 de proiectul FreeBSD \u0219i este utilizat\u0103 \u00een nucleu \u0219i \u00een aplica\u021biile din sistemul de baz\u0103 pentru procesarea listelor \u00een format cheie\/valoare \u0219i pentru organizarea transferului de date \u00eentre procese. Biblioteca se bazeaz\u0103 pe algoritmul nvlist, utilizat \u00een proiectul OpenZFS, dar \u00een FreeBSD a fost creat\u0103 o implementare proprie, astfel c\u0103 vulnerabilitatea nu afecteaz\u0103 OpenZFS. <\/p>\n

Vulnerabilitatea este cauzat\u0103 de o supra\u00eenc\u0103rcare a unui num\u0103r \u00eentreg, ceea ce duce la alocarea unui buffer de dimensiune mai mic\u0103 dec\u00e2t blocul de date scris \u00een buffer. Eroarea admis\u0103 poate fi utilizat\u0103 poten\u021bial pentru a-\u0219i cre\u0219te privilegiile prin suprascrierea zonelor de memorie \u00een nucleu \u0219i \u00een procesele de sistem; de exemplu, libnv este utilizat \u00een libcasper la interac\u021biunea dintre codul privilegiat \u0219i cel neprivilegiat. Remedierea corect\u0103 a vulnerabilit\u0103\u021bii (CVE-2024-45287) a fost propus\u0103 \u00een actualiz\u0103rile 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 \u0219i 13.3-RELEASE-p7, precum \u0219i sub form\u0103 de patch. <\/p>\n

De asemenea, \u00een FreeBSD a fost remediat\u0103 vulnerabilitatea (CVE-2024-41721) \u00een hipervizorul bhyve, care permite poten\u021bial executarea de cod \u00een procesul care ruleaz\u0103 pe sistemul gazd\u0103 (de obicei cu drepturi de root, dar izolat \u00eentr-un sandbox bazat pe Capsicum), \u00een timpul manipul\u0103rilor din interiorul sistemului gazd\u0103. Vulnerabilitatea este prezent\u0103 \u00een codul de emulare a controlerului USB XHCI \u0219i este cauzat\u0103 de o verificare insuficient\u0103 a limitelor buffer-ului, ceea ce poate conduce la citirea de date dintr-o zon\u0103 din afara buffer-ului \u0219i, de asemenea, poten\u021bial la posibilitatea de a scrie \u00eentr-o zon\u0103 arbitrar\u0103 de memorie a procesului. Atacul poate fi realizat \u00een cazul \u00een care exist\u0103 posibilitatea de a lansa procese privilegiate \u00een sistemul gazd\u0103. Vulnerabilitatea a fost remediat\u0103 \u00een actualiz\u0103rile FreeBSD 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 \u0219i 13.3-RELEASE-p7. <\/p>\n

\u00cen plus, se remarc\u0103 publicarea prototipurilor de exploatare \u0219i a descrierilor metodologiilor de exploatare pentru vulnerabilit\u0103\u021bile identificate anterior \u00een kernelul Linux CVE-2024-26808 \u0219i CVE-2024-1085. Problemele au fost remediate \u00een actualiz\u0103rile nucleului 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3 \u0219i 6.8, \u0219i au fost deja corectate \u00een distribu\u021biile principale (Debian, Ubuntu, RHEL, SUSE, Fedora). Vulnerabilit\u0103\u021bile sunt cauzate de accesarea unei zone de memorie deja eliberate \u00een func\u021biile nft_chain_filter \u0219i nft_setelem_catchall_deactivate \u00een subsistemul netfilter \u0219i permit executarea de cod cu drepturi root. Pentru a efectua un atac, este necesar s\u0103 ave\u021bi acces la nftables, care poate fi ob\u021binut \u00een cazul de\u021binerii dreptului CAP_NET_ADMIN \u00een orice spa\u021biu de nume de identificatori de utilizator (user namespace) sau spa\u021biu de nume de re\u021bea (network namespace), oferit, de exemplu, \u00een containere izolate. <\/p>\n

Exploitele sunt preg\u0103tite de participan\u021bii ini\u021biativei KernelCTF (Kernel Capture the Flag), prin care compania Google ofer\u0103 recompense pentru descoperirea vulnerabilit\u0103\u021bilor din nucleul Linux. Ini\u021bial, problemele erau considerate drept unele dintre multele vulnerabilit\u0103\u021bi poten\u021biale trec\u0103toare din nucleu \u2014 de exemplu, \u00een actualizarea din iunie a pachetului cu nucleul 5.10 \u00een Debian, pe l\u00e2ng\u0103 CVE-2024-26808, au fost remediate \u00eenc\u0103 345 (!) de vulnerabilit\u0103\u021bi poten\u021biale. S\u0103pt\u0103m\u00e2nal, \u00een nucleu sunt descoperite c\u00e2teva zeci de vulnerabilit\u0103\u021bi noi, care anterior nu fuseser\u0103 corelate cu probleme de securitate (de exemplu, s\u0103pt\u0103m\u00e2na trecut\u0103 au fost marcate 68 de vulnerabilit\u0103\u021bi).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libnv \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c FreeBSD \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438\u0437 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u043a\u043b\u044e\u0447\/\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119988","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabilitate \u00een libnv \u00een FreeBSD \u0219i vulnerabilit\u0103\u021bi \u00een Netfilter \u00een Linux | ProHoster","description":"\u00cen corectarea publicat\u0103 la \u00eenceputul lunii septembrie a vulnerabilit\u0103\u021bii din biblioteca libnv, a fost identificat\u0103 o eroare logic\u0103, din cauza c\u0103reia vulnerabilitatea nu a fost remediat\u0103 corespunz\u0103tor \u0219i sistemul a r\u0103mas expus atacurilor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 libnv \u0432\u043e FreeBSD \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter \u0432 Linux | ProHoster","og:description":"\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-30T07:21:07+00:00","article:modified_time":"2024-09-30T07:21:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119988","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 06:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:55:19","updated":"2026-01-23 06:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/119988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=119988"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/119988\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=119988"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=119988"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=119988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}