{"id":123470,"date":"2025-04-11T15:05:06","date_gmt":"2025-04-11T13:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares"},"modified":"2025-04-11T15:05:06","modified_gmt":"2025-04-11T13:05:06","slug":"uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","title":{"rendered":"Vulnerabilit\u0103\u021bi \u00een configuratorul de re\u021bea ConnMan \u0219i biblioteca DNS c-ares.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen configuratorul de re\u021bea ConnMan, utilizat pe scar\u0103 larg\u0103 \u00een sistemele Linux \u00eencorporate, platformele auto \u0219i dispozitivele Internetului Lucrurilor, a fost descoperit\u0103 o vulnerabilitate (CVE-2025-32743) care poate conduce la execu\u021bia de cod prin procesarea r\u0103spunsurilor special concepute de la serverul DNS. Problema a fost clasificat\u0103 cu un nivel critic de severitate (9.1 din 10). Vulnerabilitatea se manifest\u0103 p\u00e2n\u0103 la versiunea actual\u0103 a ConnMan 1.44 \u0219i r\u0103m\u00e2ne nerezolvat\u0103 deocamdat\u0103. <\/p>\n

Vulnerabilitatea este prezent\u0103 \u00een implementarea proxy-ului DNS \u0219i este cauzat\u0103 de faptul c\u0103, \u00een timpul proces\u0103rii r\u0103spunsului DNS cu bitul TC (Truncated), \u0219irul \u201elookup\u201d din func\u021bia ns_resolv r\u0103m\u00e2ne gol sau are valoarea NULL. Acest lucru duce ulterior la un overflow de buffer din cauza calcul\u0103rii gre\u0219ite a dimensiunii datelor copiate cu ajutorul func\u021biei memcpy. <\/p>\n

De asemenea, se remarc\u0103 o vulnerabilitate (CVE-2025-31498) \u00een biblioteca c-ares, destinat\u0103 trimiterii de cereri DNS \u00een mod asincron. Vulnerabilitatea este provocat\u0103 de accesarea unei zone de memorie deja eliberate (use-after-free) \u00een func\u021bia de procesare a r\u0103spunsurilor de la serverul DNS. <\/p>\n

Problema este cauzat\u0103 de faptul c\u0103, \u00een cazul \u00eentreruperii conexiunii, poate ap\u0103rea o situa\u021bie \u00een care descriptorul conexiunii a fost deja eliberat, dar func\u021bia read_answers() consider\u0103 c\u0103 acesta este \u00eenc\u0103 disponibil la excluderea cererilor din coad\u0103. Exploatarea vulnerabilit\u0103\u021bii este complicat\u0103 de faptul c\u0103 atacatorul trebuie s\u0103 controleze serverul DNS prin care se realizeaz\u0103 rezolvarea \u0219i s\u0103 creeze condi\u021bii pentru a provoca o eroare \u00een apelurile send()\/write(), ceea ce este teoretic posibil prin inundarea victimei cu pachete ICMP UNREACHABLE. <\/p>\n

Vulnerabilitatea poate fi utilizat\u0103 pentru a ataca proiecte care utilizeaz\u0103 biblioteca c-ares. De exemplu, c-ares este utilizat \u00een Node.js, sssd, apt-cacher-ng, wireshark, pgbouncer, shadowsocks, zephyr, sysdig \u0219i frr. Problema se manifest\u0103 \u00eencep\u00e2nd cu versiunea 1.32.3 (iulie 2024) \u0219i a fost remediat\u0103 \u00een actualizarea c-ares 1.34.5. Urm\u0103ri\u021bi remedierea vulnerabilit\u0103\u021bii \u00een distribu\u021bii pe urm\u0103toarele pagini: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 ConnMan, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-32743), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043e\u0442 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.1 \u0438\u0437 10). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 ConnMan 1.44 \u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123470","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bile \u00een configuratorul de re\u021bea ConnMan \u0219i biblioteca DNS c-ares | ProHoster","description":"\u00cen configuratorul de re\u021bea ConnMan, utilizat pe scar\u0103 larg\u0103 \u00een sistemele Linux \u00eencorporate, platformele auto \u0219i dispozitivele Internetului Lucrurilor, a fost descoperit\u0103 o vulnerabilitate (CVE-2025-32743) care poate conduce.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 ConnMan \u0438 DNS-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 c-ares | ProHoster","og:description":"\u0412 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 ConnMan, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-32743), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-11T13:05:06+00:00","article:modified_time":"2025-04-11T13:05:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123470","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 12:10:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:10:19","updated":"2026-01-23 12:10:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/123470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=123470"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/123470\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=123470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=123470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=123470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}