{"id":32892,"date":"2019-10-31T21:49:35","date_gmt":"2019-10-31T18:49:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa\/"},"modified":"2019-10-31T21:49:35","modified_gmt":"2019-10-31T18:49:35","slug":"uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","title":{"rendered":"Zranite\u013enos\u0165 v jadre Linux, ktor\u00e1 umo\u017e\u0148uje sp\u00f4sobi\u0165 p\u00e1d prostredn\u00edctvom odoslania UDP paketu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V jadre Linux bola zisten\u00e1<\/a><\/noindex> zranite\u013enos\u0165 (CVE-2019-11683<\/a><\/noindex>), ktor\u00e1 umo\u017e\u0148uje vzdialene sp\u00f4sobi\u0165 v\u00fdpadok slu\u017eby zaslan\u00edm \u0161peci\u00e1lne tvarovan\u00fdch UDP paketov (packet-of-death). Probl\u00e9m je sp\u00f4soben\u00fd chybou v spracovate\u013eovi udp_gro_receive_segment (net\/ipv4\/udp_offload.c) s implement\u00e1ciou technol\u00f3gie GRO (Generic Receive Offload) a m\u00f4\u017ee vies\u0165 k po\u0161kodeniu obsahu oblast\u00ed pam\u00e4te jadra pri spracovan\u00ed UDP paketov s nulov\u00fdm vyplnen\u00edm (pr\u00e1zdny payload).<\/p>\n

Probl\u00e9m sa t\u00fdka iba jadra 5.0<\/a><\/noindex>, ke\u010f\u017ee podpora GRO pre UDP sokety bola bola implementovan\u00e1<\/a><\/noindex> v novembri minul\u00e9ho roka a dostala sa len do posledn\u00e9ho stabiln\u00e9ho vydania jadra. Technol\u00f3gia GRO umo\u017e\u0148uje ur\u00fdchli\u0165 spracovanie ve\u013ek\u00e9ho po\u010dtu prich\u00e1dzaj\u00facich paketov, v\u010faka agreg\u00e1cii nieko\u013ek\u00fdch paketov do v\u00e4\u010d\u0161\u00edch blokov, ktor\u00e9 si nevy\u017eaduj\u00fa samostatn\u00e9 spracovanie ka\u017ed\u00e9ho paketu.
\nPre TCP sa probl\u00e9m neprejavuje, ke\u010f\u017ee pre tento protokol sa nepodporuje agreg\u00e1cia paketov bez payload.<\/p>\n

Zranite\u013enos\u0165 zatia\u013e bola opraven\u00e1 iba vo forme patchu<\/a><\/noindex>, opravn\u00fa aktualiz\u00e1ciu e\u0161te nezverejnili (v\u010dera boli v aktualiz\u00e1cii 5.0.11 opravy neobsiahnut\u00e9<\/a><\/noindex>). Z distrib\u00faci\u00ed jadro 5.0 sa dostalo do Fedora 30<\/a><\/noindex>, Ubuntu 19.04<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, Gentoo<\/a><\/noindex> a \u010fal\u0161\u00edch nepretr\u017eite aktualizovan\u00fdch distrib\u00faci\u00ed. Debian<\/a><\/noindex>, Ubuntu 18.10 a star\u0161ie<\/a><\/noindex>, RHEL\/CentOS<\/a><\/noindex> a SUSE\/openSUSE<\/a><\/noindex> probl\u00e9m sa net\u00fdka.<\/p>\n

Probl\u00e9m bol n\u00e1jden\u00fd v d\u00f4sledku pou\u017eitia<\/a><\/noindex> automatizovan\u00e9ho syst\u00e9mu fuzzing testovania vytvoren\u00e9ho spolo\u010dnos\u0165ou Google syzbot<\/a><\/noindex> a analyz\u00e1tora KASAN<\/a><\/noindex> (KernelAddressSanitizer), zameran\u00e9ho na odha\u013eovanie ch\u00fdb pri pr\u00e1ci s pam\u00e4\u0165ou a faktov nespr\u00e1vneho pr\u00edstupu k pam\u00e4ti, ako s\u00fa pr\u00edstupy k uvo\u013enen\u00fdm oblastiam pam\u00e4te a umiestnenie k\u00f3du v oblastiach pam\u00e4te, ktor\u00e9 nie s\u00fa ur\u010den\u00e9 na tak\u00e9to manipul\u00e1cie. <\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11683), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 (packet-of-death). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 udp_gro_receive_segment (net\/ipv4\/udp_offload.c) \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 GRO (Generic Receive \u041effload) \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c (\u043f\u0443\u0441\u0442\u043e\u0439 payload). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u044f\u0434\u0440\u043e 5.0, \u0442\u0430\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32892","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enos\u0165 v jadre Linux, ktor\u00e1 umo\u017e\u0148uje sp\u00f4sobi\u0165 p\u00e1d zaslan\u00edm UDP paketu | ProHoster","description":"V jadre Linux bola identifikovan\u00e1 zranite\u013enos\u0165 (","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 UDP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:49:35+00:00","article:modified_time":"2019-10-31T18:49:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 13:01:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:50:25","updated":"2026-01-21 13:01:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=32892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=32892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=32892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=32892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}