Kure kure kusagadzikana muNetBSD kernel, yakashandiswa kubva kunetiweki yemuno

Pamusoro peNetBSD kubviswa vulnerability, zvichikonzerwa nekushaikwa kwekutarisa miganhu yebuffer paunenge uchigadzira jumbo mafuremu mumadhiraivha etiweki adapta akabatana kuburikidza ne USB. Nyaya iyi inokonzeresa kuti chikamu chepakiti chikopwe kupfuura buffer yakagoverwa mumbuf cluster, iyo inogona kushandiswa kuita kurwisa kodhi padanho rekernel nekutumira mafaera chaiwo kubva kunetiweki yenzvimbo. Gadziriso yekuvhara njodzi yakaburitswa muna Nyamavhuvhu 28, asi ruzivo rwedambudziko rwave kungoburitswa. Nyaya inobata atu, demo, demo, otus, run and ure drivers.

Panguva iyi, mu TCP/IP murwi Windows kuzivikanwa kutsoropodza vulnerability, kubvumira kuita kure attacker code nekutumira ICMPv6 packet ine IPv6 router kushambadzira (RA, Router Advertisement).
Kunetseka anooneka kutanga nekuvandudza 1709 kwe Windows 10/Windows Server 2019, iyo yakaunza rutsigiro rwekutumira maDNS configuration kuburikidza nemapaketi eICMPv6 RA, sezvakatsanangurwa muRFC 6106. Dambudziko iri rakakonzerwa nekugoverwa kwebuffer zvisiri izvo kwezviri muRDNSS field contents pakutumira saizi dzisina kuenzana (saizi dzemunda dzakadudzirwa sehuwandu hwe16, zvichikonzera matambudziko ekuongorora uye kugoverwa kwemabyte masere less memory, sezvo mabyte masere ekuwedzera akaonekwa seari emunda unotevera).

Source: opennet.ru