N\u00eb Netfilter, n\u00ebn-sistemi i b\u00ebrtham\u00ebs Linux q\u00eb p\u00ebrdoret p\u00ebr filtrimin dhe modifikimin e paketave rrjet, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2021-22555) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb privilegje root n\u00eb sistem, p\u00ebrfshir\u00eb n\u00eb nj\u00eb kontejner t\u00eb izoluar. Nj\u00eb prototip funksional i shfryt\u00ebzuesit \u00ebsht\u00eb p\u00ebrgatitur p\u00ebr testim, q\u00eb kalon mekanizmat mbrojt\u00ebs KASLR, SMAP dhe SMEP. Studiuesi q\u00eb zbuloj\u00eb dob\u00ebsin\u00eb mori nj\u00eb shp\u00ebrblim prej 20 mij\u00eb dollar\u00ebsh nga Google p\u00ebr zbulimin e metod\u00ebs p\u00ebr t\u00eb menjanuar izolimin e konteiner\u00ebve Kubernetes n\u00eb klasterin kCTF. <\/p>\n
Problemi shfaqet q\u00eb nga b\u00ebrthama 2.6.19, e l\u00ebshuar 15 vjet m\u00eb par\u00eb, dhe shkaktohet nga nj\u00eb gabim n\u00eb p\u00ebrpunuesit IPT_SO_SET_REPLACE dhe IP6T_SO_SET_REPLACE, q\u00eb \u00e7on n\u00eb mbushjen e tamponit kur d\u00ebrgohen parametra t\u00eb strukturuar n\u00ebp\u00ebrmjet thirrjes setsockopt n\u00eb modalitetin compat. N\u00eb kushte normale, thirrja compat_setsockopt() mund t\u00eb realizohet vet\u00ebm nga p\u00ebrdoruesi root, por autorizimet e nevojshme p\u00ebr kryerjen e sulmit gjithashtu mund t\u00eb merren nga nj\u00eb p\u00ebrdorues i pavlefsh\u00ebm n\u00eb sistemet q\u00eb kan\u00eb aktivizuar mb\u00ebshtetje p\u00ebr hap\u00ebsirat e identitetit t\u00eb p\u00ebrdoruesve (user namespaces). <\/p>\n
P\u00ebrdoruesi mund t\u00eb krijoj\u00eb nj\u00eb konteiner me nj\u00eb p\u00ebrdorues t\u00eb ve\u00e7ant\u00eb root dhe t\u00eb shfryt\u00ebzoj\u00eb nj\u00eb vulnerabilitet nga ai. P\u00ebr shembull, 'user namespaces' \u00ebsht\u00eb aktivizuar nga parazgjedhja n\u00eb Ubuntu dhe Fedora, por nuk \u00ebsht\u00eb aktiv n\u00eb Debian dhe RHEL. Patch-i p\u00ebr korrigjimin e vulnerabilitetit \u00ebsht\u00eb pranuar n\u00eb b\u00ebrtham\u00ebn Linux m\u00eb 13 prill. P\u00ebrdit\u00ebsimet e paketave jan\u00eb formuar tashm\u00eb nga projektet Debian, Arch Linux dhe Fedora. N\u00eb Ubuntu, RHEL dhe SUSE, p\u00ebrdit\u00ebsimet jan\u00eb n\u00eb faz\u00ebn e p\u00ebrgatitjes. <\/p>\n
Problemi ndodh n\u00eb funksionin xt_compat_target_from_user() p\u00ebr shkak t\u00eb llogaritjes s\u00eb gabuar t\u00eb madh\u00ebsis\u00eb s\u00eb memories gjat\u00eb ruajtjes s\u00eb strukturave t\u00eb b\u00ebrtham\u00ebs pas konvertimit nga 32-bit n\u00eb 64-bit. Gabimi lejon t\u00eb shkruhet kat\u00ebr byte t\u00eb zeros n\u00eb \u00e7do pozit\u00eb jasht\u00eb buffer-it t\u00eb alokuar, e cila \u00ebsht\u00eb e kufizuar nga zhvendosja 0x4C. Kjo mund\u00ebsi u tregua e mjaftueshme p\u00ebr t\u00eb krijuar nj\u00eb eksploit q\u00eb mund\u00ebson marrjen e t\u00eb drejtave t\u00eb root \u2014 p\u00ebrmes pastrimit t\u00eb treguesit m_list->next n\u00eb struktur\u00ebn msg_msg, duke krijuar kushte p\u00ebr qasjen n\u00eb t\u00eb dh\u00ebnat pas lirimit t\u00eb memories (use-after-free), e cila pastaj u p\u00ebrdor p\u00ebr t\u00eb marr\u00eb informacionet mbi adresat dhe p\u00ebr t\u00eb modifikuar struktura t\u00eb tjera p\u00ebrmes manipulimit me thirrjen sistemore msgsnd(). \u0412 Netfilter, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-22555), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0441\u044c \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435. \u0414\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043e\u0431\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b KASLR, SMAP \u0438 SMEP. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043e\u0442 Google \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 20 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0437\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100767","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb n\u00ebnndeg\u00ebn e b\u00ebrtham\u00ebs Linux Netfilter | ProHoster","description":"N\u00eb Netfilter, n\u00ebnndeg\u00eb t\u00eb b\u00ebrtham\u00ebs Linux, e p\u00ebrdorur p\u00ebr filtrimin dhe modifikimin e pakove rrjet, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2021-22555) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb privilegje root n\u00eb sistem, p\u00ebrfshir\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-podsisteme-yadra-linux-netfilter","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux Netfilter | ProHoster","og:description":"\u0412 Netfilter, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-22555), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-podsisteme-yadra-linux-netfilter","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-15T14:22:45+00:00","article:modified_time":"2021-07-15T14:22:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100767","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-15 14:42:50","updated":"2022-10-01 06:19:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=100767"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100767\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=100767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=100767"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=100767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"