Kusagadzikana muAF_PACKET socket kuitiswa kweLinux kernel

Makore matatu mushure mekuputika kwekusagadzikana (1, 2, 3, 4, 5) muAF_PACKET subsystem yeLinux kernel kuzivikanwa rimwe dambudziko (CVE-2020-14386), zvichibvumira mushandisi wepanzvimbo asina rusarura kuti aite kodhi semudzi kana kubuda midziyo yakasarudzika kana vaine midzi yekuwana.

Kugadzira socket yeAF_PACKET uye kushandisa kusazvibata kunoda CAP_NET_RAW ropafadzo. Nekudaro, iyo mvumo yakatsanangurwa inogona kuwanikwa nemushandisi asina rombo mumidziyo yakagadzirwa pamasisitimu ane rutsigiro rwenzvimbo dzemazita dzakagoneswa. Semuenzaniso, nzvimbo dzemazita dzemushandisi inogoneswa nekusarudzika paUbuntu neFedora, asi isingagoneswe paDebian neRHEL. Pa Android, iyo mediaserver process ine kodzero yekugadzira AF_PACKET sockets, kuburikidza iyo kusazvibata kunogona kushandiswa.

Kusagadzikana kuripo mune tpacket_rcv basa uye kunokonzerwa nekukanganisa pakuverenga iyo netoff variable. Anorwisa anogona kugadzira mamiriro ekuti netoff vhezheni inonyorerwa kukosha kushoma pane maclen vhezheni, izvo zvinokonzeresa kufashukira paunenge uchiverenga "macoff = netoff - maclen" uye wozogadzirisa zvisizvo chinongedzo kune buffer ye data inouya. Nekuda kweizvozvo, munhu anorwisa anogona kutanga kunyora kubva pa1 kusvika ku10 bytes kuenda kunzvimbo iri mhiri kwemuganhu webhafa yakagoverwa. Zvinocherechedzwa kuti kubiridzira kuri mukusimudzira kunobvumidza iwe kuti uwane kodzero dzemidzi muhurongwa.

Dambudziko rave riripo mu kernel kubva munaJuly 2008, i.e. inozviratidza mumanyuclei chaiwo. Iyo gadziriso iripo ikozvino se chigamba. Iwe unogona kuteedzera kuwanikwa kwepakeji yekuvandudza mukugovera pamapeji anotevera: Ubuntu, Fedora, suse, Debian, RHEL, Arch.

Source: opennet.ru

Voeg