{"id":101115,"date":"2021-08-28T10:22:53","date_gmt":"2021-08-28T08:22:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-libssh-privodyashhaya-k-perepolneniyu-bufera"},"modified":"2021-08-28T10:22:53","modified_gmt":"2021-08-28T08:22:53","slug":"uyazvimost-v-libssh-privodyashhaya-k-perepolneniyu-bufera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-libssh-privodyashhaya-k-perepolneniyu-bufera","title":{"rendered":"Nj\u00eb dob\u00ebsi n\u00eb libssh q\u00eb \u00e7on n\u00eb mbushjen e tankut.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb bibliotek\u00ebn libssh (mos e ngat\u00ebrroni me libssh2), e cila \u00ebsht\u00eb menduar p\u00ebr t\u00eb shtuar mb\u00ebshtetje klienti dhe serveri p\u00ebr protokollin SSHv2 n\u00eb programet n\u00eb gjuh\u00ebn C, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2021-3634) q\u00eb \u00e7on n\u00eb mbushjen e tamponit gjat\u00eb iniciimit t\u00eb procesit t\u00eb ndryshimit t\u00eb \u00e7el\u00ebsit (rekey) duke p\u00ebrdorur nj\u00eb mekaniz\u00ebm shk\u00ebmbimi \u00e7el\u00ebsash, i cili aplikon nj\u00eb algorit\u00ebm tjet\u00ebr hashimi. Problemi \u00ebsht\u00eb zgjidhur n\u00eb versionin 0.9.6. <\/p>\n
The essence of the problem is that the key exchange operation allows the use of cryptographic hashes with a digest size different from that of the originally used algorithm. In this case, the memory for the hash in libssh was allocated based on the original hash size, and using a hash of a larger size leads to data being overwritten beyond the allocated buffer. As a fallback protection method, the list of supported key exchange methods can be restricted to algorithms with the same hash size. For example, to bind to SHA256, the following can be added to the code: rc = ssh_options_set(s->ssh.session, SSH_OPTIONS_KEY_EXCHANGE, \"diffie-hellman-group14-sha256,curve25519-sha256,ecdh-sha2-nistp256\"); \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"