{"id":184170,"date":"2026-11-06T23:40:44","date_gmt":"2026-11-06T21:40:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimost-v-paketnom-menedzhere-apt-pozvolyayushhaya-sovershit-mitm-ataku-dlya-polucheniya-prav-root"},"modified":"2026-11-06T23:40:54","modified_gmt":"2026-11-06T21:40:54","slug":"apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","title":{"rendered":"O vulnerabilitate \u00een managerul de pachete APT, care permite efectuarea unui atac MITM pentru ob\u021binerea drepturilor de root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Au fost publicate versiuni corective ale instrumentului de gestionare a pachetelor APT, \u00een care a fost remediat\u0103 vulnerabilitatea (CVE-2026-109518), care permite ocolirea verific\u0103rii \u00een timpul desc\u0103rc\u0103rii fi\u0219ierelor \u0219i ob\u021binerea execut\u0103rii codului propriu cu drepturi de root. \u00cen total, au fost formulate 13 versiuni, acoperind toate ramurile APT create \u00een ultimii 10 ani, \u00eencep\u00e2nd cu 1.2.x. Actualiz\u0103rile pachetelor care remediaz\u0103 vulnerabilitatea au fost de asemenea deja formulate pentru diferite versiuni de Debian, Ubuntu \u0219i Deepin. \u00cen configura\u021bia implicit\u0103, problema afecteaz\u0103 toate versiile \u00eencep\u00e2nd cu Debian 12 \u0219i Ubuntu 22.04. Exploatarea versiunilor mai vechi este posibil\u0103 \u00een cazul \u00een care parametrul Acquire::Retries este setat la o valoare mai mare de 0.<\/p>\n

Atacatorul, capabil s\u0103 se interpun\u0103 \u00een fluxul HTTP \u00eentre utilizator \u0219i depozitul de pachete \u00een timpul instal\u0103rii unui pachet, poate reu\u0219i s\u0103 instaleze o variant\u0103 modificat\u0103 \u0219i nevalidat\u0103 a pachetului, ceea ce \u00eei permite s\u0103 ob\u021bin\u0103 privilegii de root \u00een sistem. Atacul poate fi realizat, de exemplu, prin compromiterea oglinzilor, serverelor proxy, punctelor de acces wireless sau gateway-urilor furnizorilor. \u00cen raportul despre vulnerabilitate nu sunt men\u021bionate detalii, fiind specificat doar c\u0103 problema este cauzat\u0103 de gestionarea incorect\u0103 a link-urilor dure. Judec\u00e2nd dup\u0103 patch-ul \u00een care deschiderea fi\u0219ierului cu flag-ul FileFd::Empty (O_TRUNC) a fost \u00eenlocuit\u0103 cu FileFd::Exclusive (O_EXCL), la reluarea desc\u0103rc\u0103rii \u00eentrerupte, atacatorul ar fi putut reu\u0219i s\u0103 rescrie datele pentru care la prima desc\u0103rcare a fost deja efectuat\u0103 hashing-ul.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 APT, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-109518), \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412\u0441\u0435\u0433\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043e 13 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 10 \u043b\u0435\u0442 \u0432\u0435\u0442\u043a\u0438 APT, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 1.2.x. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u0443\u0436\u0435 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184170","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een managerul de pachete APT, care permite efectuarea unui atac MITM pentru ob\u021binerea drepturilor de root | ProHoster","description":"Au fost publicate versiuni corective ale instrumentului de gestionare a pachetelor APT, \u00een care a fost remediat\u0103 vulnerabilitatea (CVE-2026-109518), care permite ocolirea verific\u0103rii \u00een timpul desc\u0103rc\u0103rii fi\u0219ierelor \u0219i ob\u021binerea execut\u0103rii propriei.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 APT, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 APT, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-109518), \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/apt-package-manager-vulnerability-allows-attackers-to-gain-root-privileges-via-mitm-attacks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-06T21:40:44+00:00","article:modified_time":"2026-11-06T21:40:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=184170"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184170\/revisions"}],"predecessor-version":[{"id":184171,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184170\/revisions\/184171"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=184170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=184170"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=184170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}