{"id":103053,"date":"2022-01-21T15:36:44","date_gmt":"2022-01-21T13:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b"},"modified":"2022-01-21T15:36:44","modified_gmt":"2022-01-21T13:36:44","slug":"%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","title":{"rendered":"Vulnerabilitet n\u00eb VFS-n\u00eb e kernel-it Linux, q\u00eb lejon rritjen e privilegjeve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb API Filesystem Context, t\u00eb ofruar nga b\u00ebrthama Linux, \u00ebsht\u00eb zbuluar nj\u00eb cenueshm\u00ebri (CVE-2022-0185) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb t\u00eb drejtat root n\u00eb sistem. Hulumtuesi q\u00eb zbuloi problemin publikoi nj\u00eb demonstrim t\u00eb funksionimit t\u00eb eksploitatit q\u00eb mund t\u00eb ekzekutoj\u00eb kod me t\u00eb drejta root n\u00eb Ubuntu 20.04 n\u00eb konfigurimin si\u00e7 \u00ebsht\u00eb. Kodi i eksploitatit \u00ebsht\u00eb planifikuar t\u00eb publikohet n\u00eb GitHub brenda jav\u00ebs, pasi distribuimet t\u00eb l\u00ebshojn\u00eb nj\u00eb azhurnim me nj\u00eb rregullim p\u00ebr cenueshm\u00ebrin\u00eb. <\/p>\n

Vulnerabiliteti ndodhet n\u00eb funksionin legacy_parse_param() n\u00eb VFS dhe shkaktohet nga mungesa e kontrollit t\u00eb duhur t\u00eb madh\u00ebsis\u00eb maksimale t\u00eb parametrave q\u00eb ofrohen n\u00eb sistemet e skedar\u00ebve q\u00eb nuk mb\u00ebshtesin API Filesystem Context. Kur kalon nj\u00eb paramet\u00ebr tep\u00ebr t\u00eb madh, mund t\u00eb shkaktoj\u00eb tejkalim t\u00eb nj\u00eb vargu t\u00eb numrave t\u00eb plot\u00eb, i p\u00ebrdorur p\u00ebr llogaritjen e madh\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave q\u00eb shkruhen \u2014 n\u00eb kod ekziston nj\u00eb kontroll p\u00ebr daljen jasht\u00eb kufirit t\u00eb buffers 'if (len > PAGE_SIZE \u2014 2 \u2014 size)', q\u00eb nuk aktivizohet n\u00ebse vlera e size \u00ebsht\u00eb m\u00eb e madhe se 4094 p\u00ebr shkak t\u00eb tejkalimit t\u00eb numrit t\u00eb plot\u00eb p\u00ebrmes kufirit t\u00eb posht\u00ebm (integer underflow, duke e p\u00ebrkthyer 4096 \u2014 2 \u2014 4095 n\u00eb unsigned int rezulton 2147483648). <\/p>\n

Gabimi i dh\u00ebn\u00eb lejon q\u00eb gjat\u00eb qasjes n\u00eb nj\u00eb imazh t\u00eb posa\u00e7\u00ebm t\u00eb FS t\u00eb ndodh\u00eb nj\u00eb mbingarkes\u00eb e buferrit dhe t\u00eb p\u00ebrmbushen t\u00eb dh\u00ebnat e b\u00ebrtham\u00ebs q\u00eb ndodhen pas zon\u00ebs s\u00eb dedikuar t\u00eb memories. P\u00ebr t\u00eb shfryt\u00ebzuar cenueshm\u00ebrin\u00eb k\u00ebrkohen t\u00eb drejtat CAP_SYS_ADMIN, dometh\u00ebn\u00eb fuqit\u00eb e administratorit. Problemi \u00ebsht\u00eb se nj\u00eb p\u00ebrdorues i pazot mund t\u00eb fitoj\u00eb t\u00eb tilla fuqira n\u00eb nj\u00eb kazan t\u00eb izoluar, n\u00ebse n\u00eb sistem \u00ebsht\u00eb aktivizuar mb\u00ebshtetja p\u00ebr hap\u00ebsirat e identifikuesve t\u00eb p\u00ebrdoruesve (user namespaces). P\u00ebr shembull, user namespaces jan\u00eb t\u00eb aktivizuara si parazgjedhje n\u00eb Ubuntu dhe Fedora, por nuk jan\u00eb aktivizuar n\u00eb Debian dhe RHEL (n\u00ebse nuk p\u00ebrdoren platforma t\u00eb izolimit t\u00eb kazan\u00ebve). <\/p>\n

Problemi shfaqet q\u00eb nga b\u00ebrthama Linux 5.1 dhe \u00ebsht\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimet e djeshme 5.16.2, 5.15.16, 5.10.93, 5.4.173. P\u00ebrdit\u00ebsimet e paketave q\u00eb eliminojn\u00eb vulnerabilitetin jan\u00eb l\u00ebshuar tashm\u00eb p\u00ebr RHEL, Debian, Fedora, Ubuntu. Rregullimi momentalisht nuk \u00ebsht\u00eb n\u00eb dispozicion n\u00eb Arch Linux, Gentoo, SUSE dhe openSUSE. Si nj\u00eb zgjidhje mbrojt\u00ebse p\u00ebr sistemet q\u00eb nuk p\u00ebrdorin izolimin e konteiner\u00ebve, mund t\u00eb vendosni n\u00eb 0 vler\u00ebn e sysctl 'user.max_user_namespaces': echo 'user.max_user_namespaces=0' > \/etc\/sysctl.d\/userns.conf # sysctl -p \/etc\/sysctl.d\/userns.conf
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 API Filesystem Context, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u044f\u0434\u0440\u043e\u043c Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-0185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0432 Ubuntu 20.04 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u041a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u043d\u0430 GitHub \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103053","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb VFS-n\u00eb e b\u00ebrthames Linux, q\u00eb lejon rritjen e privilegjeve | ProHoster","description":"N\u00eb API-n\u00eb Filesystem Context, e ofruar nga b\u00ebrthama Linux, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2022-0185) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb t\u00eb drejtat root n\u00eb sistem.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VFS \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 | ProHoster","og:description":"\u0412 API Filesystem Context, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u044f\u0434\u0440\u043e\u043c Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-0185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-21T13:36:44+00:00","article:modified_time":"2022-01-21T13:36:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103053","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-21 13:38:17","updated":"2022-09-27 16:20:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=103053"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103053\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=103053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=103053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=103053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}