{"id":181665,"date":"2026-05-22T18:24:54","date_gmt":"2026-05-22T16:24:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost"},"modified":"2026-05-22T18:24:54","modified_gmt":"2026-05-22T16:24:54","slug":"vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","title":{"rendered":"\u00cen FreeBSD au fost remediate 4 vulnerabilit\u0103\u021bi care permit cre\u0219terea privilegiilor \u0219i o vulnerabilitate root de la distan\u021b\u0103","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen FreeBSD au fost remediate 7 vulnerabilit\u0103\u021bi, dintre care una permite executarea de cod de la distan\u021b\u0103 cu privilegii de root, iar patru permit cre\u0219terea privilegiilor \u00een sistem. Vulnerabilit\u0103\u021bile au fost remediat\u0103 \u00een actualiz\u0103rile FreeBSD 15.0-RELEASE-p9, 14.4-RELEASE-p5 \u0219i 14.3-RELEASE-p14. <\/p>\n<ul>\n<li class=\"l\"> CVE-2026-45255 \u2014 \u00een instalatorul bsdinstall \u0219i configuratorul bsdconfig a existat o lips\u0103 de escapare a caracterelor speciale \u00een scriptul shell care afi\u0219eaz\u0103 utilizatorului lista re\u021belelor wireless disponibile pentru conectare, definite \u00een urma scan\u0103rii. Un atacator poate crea un punct de acces fals \u0219i poate atribui un identificator de re\u021bea (SSID) special format, care con\u021bine comenzi shell executabile (de exemplu, \u201etest`id`\u201d). Atunci c\u00e2nd utilizatorul invoc\u0103 func\u021bia de c\u0103utare a re\u021belelor wireless, comenzile shell introduse de atacator vor fi executate pe sistemul utilizatorului cu privilegii de root (nu este necesar\u0103 selectarea sau conectarea la re\u021beaua atacatorului, este suficient s\u0103 se ini\u021bieze scanarea re\u021belelor).\n<li class=\"l\"> CVE-2026-45250 \u2014 dep\u0103\u0219irea stivei \u00een apelul de sistem setcred, permi\u021b\u00e2nd unui utilizator local f\u0103r\u0103 privilegii s\u0103 execute cod pe nivel de kernel. Problema este cauzat\u0103 de o verificare incorect\u0103 a dimensiunii datelor plasate \u00een buffer \u2014 \u00een loc de \u201esizeof(gid_t)\u201d a fost specificat \u201esizeof(*groups)\u201d. Pentru a accesa apelul de sistem setcred sunt necesare privilegii ridicate, dar vulnerabilitatea este prezent\u0103 \u00een codul de copiere ini\u021bial \u00eentr-un buffer separat al listei de grupuri transmise de utilizator, care este efectuat \u00eenainte de verificarea privilegiilor.\n<li class=\"l\"> CVE-2026-45251 \u2014 accesarea memoriei deja eliberate (use-after-free) \u00een apelurile de sistem select \u0219i poll, care apare \u00een cazul \u00een care se \u00eenchide un descriptor de fi\u0219ier transmis \u00eenainte de deblocarea unui fir de execu\u021bie care a\u0219teapt\u0103 descriptoare de fi\u0219iere de la apelurile de sistem select \u0219i poll. O exploatare reu\u0219it\u0103 permite unui utilizator f\u0103r\u0103 privilegii s\u0103 execute cod pe nivel de kernel.\n<li class=\"l\"> CVE-2026-45253 \u2014 lipsa unei verific\u0103ri adecvate a parametrilor transmi\u0219i \u00een apelul de sistem ptrace \u00een timpul efectu\u0103rii opera\u021biei PT_SC_REMOTE. Vulnerabilitatea permite unui utilizator f\u0103r\u0103 privilegii s\u0103 organizeze executarea de cod arbitrar \u00een kernel, chiar dac\u0103 procesul \u021bint\u0103 care este debuggat nu are privilegii speciale.\n<li class=\"l\"> CVE-2026-39461 \u2014 overflow of the stack in the libcasper library, which provides applications isolated by the Capsicum mechanism with access to system interfaces. When interacting with the handler via UNIX sockets, the library uses the select system call to wait for data, but does not check the socket descriptor against the actual select limit of FD_SETSIZE (1024). An attacker can initiate the allocation of large file descriptors in the libcasper-based application and trigger a stack overflow. By manipulating setuid root programs in this way, it is possible to execute code with root privileges.\n<li class=\"l\"> CVE-2026-45254 \u2014 the potential to bypass cap_net limits in an application due to the missing key being perceived as \"allow any\" instead of blocking.\n<li class=\"l\"> CVE-2026-45252 \u2014 buffer overflow in the fusefs module when handling FUSE_LISTXATTR messages, allowing reading up to 253 bytes from kernel memory outside the buffer or writing up to 250 bytes in unused heap space.\n<\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65497\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.0-RELEASE-p9, 14.4-RELEASE-p5 \u0438 14.3-RELEASE-p14. CVE-2026-45255 &#8212; \u0432 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0435 bsdinstall \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0442\u043e\u0440\u0435 bsdconfig \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 shell-\u0441\u043a\u0440\u0438\u043f\u0442\u0435, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181665","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0438 \u043e\u0434\u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-22T16:24:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-22T16:24:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen FreeBSD au fost remediate 4 vulnerabilit\u0103\u021bi ce permit cre\u0219terea privilegiilor \u0219i o vulnerabilitate root de la distan\u021b\u0103 | ProHoster","description":"\u00cen FreeBSD au fost remediate 7 vulnerabilit\u0103\u021bi, dintre care una permite executarea de cod de la distan\u021b\u0103 cu privilegii root, iar patru pot cre\u0219te privilegiile \u00een sistem.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0438 \u043e\u0434\u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-22T16:24:54+00:00","article:modified_time":"2026-05-22T16:24:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=181665"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181665\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=181665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=181665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=181665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}