{"id":91251,"date":"2020-08-10T13:42:19","date_gmt":"2020-08-10T11:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ghostscript-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-postscript-dokumenta"},"modified":"2020-08-10T13:42:19","modified_gmt":"2020-08-10T11:42:19","slug":"uyazvimost-v-ghostscript-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-postscript-dokumenta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ghostscript-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-postscript-dokumenta","title":{"rendered":"Vulnerabilitate \u00een Ghostscript care permite executarea de cod la deschiderea unui document PostScript","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen Ghostscript, un set de instrumente pentru procesarea, conversia \u0219i generarea documentelor \u00een formatele PostScript \u0219i PDF, a fost identificat\u0103<\/a><\/noindex> vulnerabilitate (CVE-2020-15900<\/a><\/noindex>), care poate duce la modificarea fi\u0219ierelor \u0219i la executarea unor comenzi arbitrare la deschiderea documentelor special concepute \u00een format PostScript. Utilizarea unui operator PostScript nestandard \u00een document rsearch<\/a><\/noindex> permite provocarea unui overflow de tip uint32_t la calcularea dimensiunii, rescrierea zonelor de memorie din afara buffer-ului alocat \u0219i accesarea fi\u0219ierelor din sistemul de fi\u0219iere, ceea ce poate fi utilizat pentru a organiza un atac pentru a executa cod arbitrar \u00een sistem (de exemplu, prin ad\u0103ugarea de comenzi \u00een ~\/ .bashrc sau ~\/ .profile).<\/p>\n

Problema afecteaz\u0103 versiuni<\/a><\/noindex> de la 9.50 la 9.52 (eroare exist\u0103<\/a><\/noindex> \u00eencep\u00e2nd cu versiunea 9.28rc1, dar, potrivit informa\u021biile<\/a><\/noindex> cercet\u0103torilor care au descoperit vulnerabilitatea, se manifest\u0103 \u00eencep\u00e2nd cu versiunea 9.50).<\/p>\n

Corec\u021bia a fost propus\u0103 \u00een versiunea 9.52.1<\/a><\/noindex> (patch<\/a><\/noindex>). Actualiz\u0103ri de pachete cu corective sunt deja disponibile pentru Debian<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, SUSE<\/a><\/noindex>. Pachetele din RHEL<\/a><\/noindex> nu sunt afectate de probleme.<\/p>\n

Reamintim c\u0103 vulnerabilit\u0103\u021bile din Ghostscript reprezint\u0103 un pericol crescut, deoarece acest pachet este utilizat \u00een multe aplica\u021bii populare pentru procesarea formatelor PostScript \u0219i PDF. De exemplu, Ghostscript este apelat \u00een procesul de creare a miniaturilor pe desktop, \u00een indexarea \u00een fundal a datelor \u0219i \u00een conversia imaginilor. \u00cen multe cazuri, pentru un atac de succes, este suficient s\u0103 se \u00eencarce un fi\u0219ier cu un exploit sau s\u0103 se vizualizeze un director care con\u021bine acesta \u00een Nautilus. Vulnerabilit\u0103\u021bile din Ghostscript pot fi, de asemenea, exploatate prin intermediul handler-elor de imagini bazate pe pachetele ImageMagick \u0219i GraphicsMagick, prin transmiterea unui fi\u0219ier JPEG sau PNG, \u00een care, \u00een loc de imagine, se afl\u0103 cod PostScript (acest fi\u0219ier va fi procesat \u00een Ghostscript, deoarece tipul MIME este recunoscut \u00een func\u021bie de con\u021binut, nu baz\u00e2ndu-se pe extensie).<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 Ghostscript, \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u0445 PostScript \u0438 PDF, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-15900), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 PostScript. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e PostScript-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 rsearch \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0442\u0438\u043f\u0430 uint32_t \u043f\u0440\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430, \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91251","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een Ghostscript care permite executarea de cod la deschiderea unui document PostScript | ProHoster","description":"\u00cen Ghostscript, un set de instrumente pentru procesarea, conversia \u0219i generarea documentelor \u00een formatele PostScript \u0219i PDF,","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ghostscript-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-postscript-dokumenta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ghostscript, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 PostScript-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430 | ProHoster","og:description":"\u0412 Ghostscript, \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u0445 PostScript \u0438 PDF,","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ghostscript-pozvolyayushhaya-vypolnit-kod-pri-otkrytii-postscript-dokumenta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-10T11:42:19+00:00","article:modified_time":"2020-08-10T11:42:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91251","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:31:22","updated":"2022-10-13 08:06:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=91251"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91251\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=91251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=91251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=91251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}