{"id":181730,"date":"2026-05-25T20:48:13","date_gmt":"2026-05-25T18:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/7-novyh-uyazvimostej-v-freebsd"},"modified":"2026-05-25T20:48:13","modified_gmt":"2026-05-25T18:48:14","slug":"7-novyh-uyazvimostej-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","title":{"rendered":"7 noi vulnerabilit\u0103\u021bi \u00een FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pe 20 mai 2026, dezvoltatorii FreeBSD au anun\u021bat corectarea a \u0219apte vulnerabilit\u0103\u021bi noi \u00een sistem. Nu toate sunt la fel de periculoase, dar unele sunt extrem de nepl\u0103cute.
\n<\/p>\n

<\/p>\n

CVE-2026-45251<\/a> — use-after-free \u00een apelurile de tip select, dac\u0103 \u00een lista lor de a\u0219teptare exist\u0103 descriptorii de procese (\u00een FreeBSD 15 — inclusiv descriptorii noi ai jail-urilor), iar ace\u0219ti descriptori au fost \u00eenchi\u0219i \u00een alt fir de execu\u021bie, \u00een timp ce apelul de sistem r\u0103m\u00e2ne \u00een a\u0219teptare. Judec\u00e2nd dup\u0103 aceast\u0103 modificare<\/a>, sunt afecta\u021bi de asemenea descriptorii asocia\u021bi cu netmap (driver pentru acces direct accelerat la adaptorul de re\u021bea), dar nu exist\u0103 informa\u021bii oficiale \u00een acest sens. Descriptorii proceselor au fost introdu\u0219i \u00een FreeBSD 9, a\u0219a c\u0103 vulnerabilitatea exist\u0103 probabil \u00eenc\u0103 de atunci. \u00cen declara\u021bia oficial\u0103 se men\u021bioneaz\u0103 c\u0103 vulnerabilitatea permite ob\u021binerea privilegiilor de superuser. Nu exist\u0103 modalit\u0103\u021bi de a o neutraliza f\u0103r\u0103 patch-uri\/actualiz\u0103ri.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45250<\/a> — calcularea incorect\u0103 a dimensiunii bufferului \u0219i ulterior scrierea \u00een afara bufferului pe stiv\u0103 \u00een apelul de sistem setcred, de\u0219i setcred necesit\u0103 privilegii root, coruperea stivei se produce \u00eenainte ca privilegiile s\u0103 fie verificate, fiind astfel disponibil\u0103 tuturor. Acest apel de sistem a ap\u0103rut \u00een FreeBSD 14.3 (adic\u0103 versiunile anterioare nu sunt afectate) \u0219i ofer\u0103 o metod\u0103 de a seta toate identificatoarele de utilizator \u0219i grupuri ale procesului curent cu un singur apel, \u00een loc de combina\u021bii setuid+setgid+setgroups \u0219i altele similare. Vulnerabilitatea permite executarea de cod mali\u021bios \u00een contextul nucleului. Nu exist\u0103 nicio modalitate de a o neutraliza f\u0103r\u0103 un patch\/update.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45252<\/a> — lipsa verific\u0103rii existen\u021bei caracterului nul final \u00eenainte de copierea unui \u0219ir ob\u021binut de la demonul fuse \u00eentr-un buffer nou. Cu toate acestea, exist\u0103 o verificare a dimensiunii maxime a copieri, iar nu se pot citi mai mult de 253 de octe\u021bi suplimentari din memoria nucleului. De asemenea, se pot scrie p\u00e2n\u0103 la 250 de octe\u021bi \u00een «spa\u021biul nealocat al heap-ului nucleului». \u00cen mod implicit, \u00een FreeBSD montarea sistemelor de fi\u0219iere de c\u0103tre utilizatorii non-root este interzis\u0103, ceea ce \u00eenseamn\u0103 c\u0103 pentru a injecta un demon fuse mali\u021bios \u00een nucleu trebuie s\u0103 fii root. Cu toate acestea, dac\u0103 sysctl vfs.usermount=1 — sistemul devine vulnerabil \u0219i pentru utilizatorii obi\u0219nui\u021bi. De asemenea, trebuie avut \u00een vedere pericolul demonului fuse \u00een jail, unde acesta poate fi root (dar \u0219i aceasta este interzis\u0103 \u00een mod implicit).<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45253<\/a> — utilizarea ptrace a permis lansarea unui apel de sistem cu un num\u0103r incorect \u00een procesul de depanare, ceea ce ducea la executarea \u00een nucleu a codului care nu era prev\u0103zut pentru a fi lansat ca apel de sistem, av\u00e2nd poten\u021bial consecin\u021be negative. Dac\u0103 security.bsd.unprivileged_proc_debug=0 este setat ( ceea ce este o bun\u0103 practic\u0103 pentru servere \u00een orice caz, iar instalatorul sistemului chiar sugereaz\u0103 s\u0103 se fac\u0103 acest lucru op\u021bional), atunci procesele utilizatorilor \u0219i cele \u00eenchise (jailed) nu pot folosi ptrace \u0219i astfel vulnerabilitatea r\u0103m\u00e2ne disponibil\u0103 doar pentru root.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45255<\/a> — injectarea comenzilor shell cu privilegii de root \u00een bsdinstall\/bsdconfig prin denumirile re\u021belelor wireless mali\u021bioase, care nu au fost escapate, \u00een momentul vizualiz\u0103rii listei lor. Pentru a nu \u00eent\u00e2lni aceast\u0103 vulnerabilitate, este suficient s\u0103 nu accesa\u021bi lista re\u021belelor wireless din bsdinstall\/bsdconfig.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-39461<\/a>, CVE-2026-45254<\/a> — vulnerabilit\u0103\u021bi \u00een biblioteca libcasper (nu \u00een nucleu). Biblioteca este destinat\u0103 furniz\u0103rii sigure \u0219i personalizabile a serviciilor proceselor \u00een sandbox. Una dintre vulnerabilit\u0103\u021bi este legat\u0103 de dep\u0103\u0219irea limitei bufferului \u00een stiva \u0219i coruperea stivei prin organizarea \u00een aceast\u0103 bibliotec\u0103 a descriptorilor de fi\u0219iere cu numere mari (aceasta a fost proiectat\u0103 pentru numere de p\u00e2n\u0103 la 1024 — limita implicit\u0103 a structurii pentru syscall-ul select). A doua vulnerabilitate — posibilitatea de a elimina listele de restric\u021bii impuse (ideologia bibliotecii este c\u0103 restric\u021biile impuse asupra unui proces pot fi doar \u00eent\u0103rite) cap_net.<\/p>\n

<\/noindex><\/p>\n

Versiunile corectate ale sistemului au numerele: 14.3-RELEASE-p14, 14.4-RELEASE-p5 \u0219i 15.0-RELEASE-p9. De asemenea, merit\u0103 men\u021bionat un moment important pentru unii: lansarea FreeBSD 13.5 a fost recent eliminat\u0103 din suport — 30 aprilie 2026, iar pentru aceasta (\u0219i pentru ramura 13.x \u00een general) nu mai exist\u0103 corec\u021bii oficiale. Cu toate acestea, dac\u0103 din anumite motive nu dori\u021bi s\u0103 gr\u0103bi\u021bi trecerea la lansarea 14.x, patch-urile pentru versiunea 14.3 se potrivesc \u00een general \u0219i cu sursele 13.5, iar CVE-2026-45250 pentru ramura 13 nu este relevant din cauza absen\u021bei \u00een aceasta a setcred().<\/p>\n

<\/noindex><\/p>\n

Sursa: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435. CVE-2026-45251 — use-after-free \u0432 select-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u043a\u043e\u043b\u043b\u0430\u0445, \u0435\u0441\u043b\u0438 \u0432 \u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u0432 FreeBSD 15 — \u0435\u0449\u0451 \u043d\u043e\u0432\u044b\u0435 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b jail-\u043e\u0432), \u0438 \u044d\u0442\u0438 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435 \u043f\u043e\u043a\u0430 \u043e\u0436\u0438\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u043a\u043e\u043b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181730","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 noi vulnerabilit\u0103\u021bi \u00een FreeBSD | ProHoster","description":"Pe 20 mai 2026, dezvoltatorii FreeBSD au anun\u021bat corectarea a \u0219apte vulnerabilit\u0103\u021bi noi \u00een sistem. Nu toate sunt la fel de periculoase, dar unele sunt extrem de nepl\u0103cute.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FreeBSD | ProHoster","og:description":"20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-25T18:48:14+00:00","article:modified_time":"2026-05-25T18:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=181730"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181730\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=181730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=181730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=181730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}