{"id":103489,"date":"2022-03-07T21:36:38","date_gmt":"2022-03-07T19:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-pozvolyayushhaya-iskazit-fajly-dostupnye-tolko-dlya-chteniya"},"modified":"2022-03-07T21:36:38","modified_gmt":"2022-03-07T19:36:38","slug":"uyazvimost-v-yadre-linux-pozvolyayushhaya-iskazit-fajly-dostupnye-tolko-dlya-chteniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-iskazit-fajly-dostupnye-tolko-dlya-chteniya","title":{"rendered":"Nj\u00eb dob\u00ebsi n\u00eb kernelin Linux q\u00eb lejon t\u00eb ndyshohen skedar\u00ebt e disponuesh\u00ebm vet\u00ebm p\u00ebr lexim.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb dob\u00ebsi n\u00eb kernelin Linux \u00ebsht\u00eb identifikuar (CVE-2022-0847), e cila lejon rishkrimin e p\u00ebrmbajtjes s\u00eb caches s\u00eb faqeve p\u00ebr \u00e7do skedare, p\u00ebrfshir\u00eb ato t\u00eb hapura me flag O_RDONLY ose ato q\u00eb jan\u00eb vendosur n\u00eb sisteme skedar\u00ebsh t\u00eb montuara n\u00eb modalitetin vet\u00ebm p\u00ebr lexim. Nga ana praktike, kjo dob\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb injektuar kod n\u00eb procese t\u00eb rastit ose p\u00ebr t\u00eb ndyshuar t\u00eb dh\u00ebna n\u00eb skedar\u00ebt e hapur. P\u00ebr shembull, \u00ebsht\u00eb e mundur t\u00eb modifikohet p\u00ebrmbajtja e skedarit authorized_keys p\u00ebr procesin sshd. Nj\u00eb prototip i eksploit t\u00eb testimit \u00ebsht\u00eb n\u00eb dispozicion. <\/p>\n

Problemit i \u00ebsht\u00eb dh\u00ebn\u00eb emri kodik Dirty Pipe, p\u00ebr shkak t\u00eb analogjis\u00eb me dob\u00ebsin\u00eb kritike Dirty COW q\u00eb u zbulua n\u00eb vitin 2016. V\u00ebrehet se niveli i rrezikshm\u00ebris\u00eb s\u00eb Dirty Pipe \u00ebsht\u00eb i ngjash\u00ebm me at\u00eb t\u00eb Dirty COW, por \u00ebsht\u00eb shum\u00eb m\u00eb i leht\u00eb p\u00ebr tu shfryt\u00ebzuar. Dob\u00ebsia u identifikua gjat\u00eb shqyrtimit t\u00eb ankesave p\u00ebr d\u00ebmtimin e rastit t\u00eb skedar\u00ebve t\u00eb shkarkuar n\u00eb m\u00ebnyr\u00eb t\u00eb rrjeteve n\u00eb nj\u00eb sistem q\u00eb shkarkon arkiva t\u00eb kompresuara nga log-server (37 d\u00ebmtime n\u00eb nj\u00eb periudh\u00eb 3-mujore n\u00eb nj\u00eb sistem me ngarkes\u00eb t\u00eb lart\u00eb), ku operacioni splice() dhe kanale t\u00eb paem\u00ebruara ishin p\u00ebrdorur. <\/p>\n

Dob\u00ebsia shfaqet q\u00eb nga kernelin Linux 5.8, i l\u00ebshuar n\u00eb gusht 2020, dmth e pranishme n\u00eb Debian 11, por nuk prek kernelin e baz\u00ebs n\u00eb Ubuntu 20.04 LTS. Kernels RHEL 8.x dhe openSUSE\/SUSE 15 fillimisht bazohet n\u00eb deg\u00eb m\u00eb t\u00eb vjetra, por nuk p\u00ebrjashtohet q\u00eb ndryshimi q\u00eb shkaktoi problemin t\u00eb jet\u00eb bashkuar n\u00eb to (nuk ka t\u00eb dh\u00ebna t\u00eb sakta p\u00ebr k\u00ebt\u00eb). T\u00eb dh\u00ebnat p\u00ebr publikimin e p\u00ebrdit\u00ebsimeve t\u00eb paketave n\u00eb shp\u00ebrndarje mund t\u00eb gjenden n\u00eb k\u00ebto faqe: Debian, SUSE, Ubuntu, RHEL, Fedora, Gentoo, Arch Linux. Rregullimi i dob\u00ebsis\u00eb \u00ebsht\u00eb propozuar n\u00eb versionet 5.16.11, 5.15.25 dhe 5.10.102. Rregullimi \u00ebsht\u00eb gjithashtu p\u00ebrfshir\u00eb n\u00eb kernelin e p\u00ebrdorur n\u00eb platform\u00ebn Android. <\/p>\n

\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f «buf->flags» \u0432 \u043a\u043e\u0434\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 copy_page_to_iter_pipe() \u0438 push_pipe(), \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0440\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0435 \u043e\u0447\u0438\u0449\u0430\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u0445 \u0441 \u043d\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043a\u0430\u043d\u0430\u043b\u0430\u043c\u0438 \u0432 «buf->flags» \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043e\u0442 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0430\u043d\u043d\u0443\u044e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e \u0444\u043b\u0430\u0433\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f PIPE_BUF_FLAG_CAN_MERGE, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b (pipe). <\/p>\n

P\u00ebr sulmin, skedari i targetit duhet t\u00eb jet\u00eb n\u00eb dispozitCuando, dhe duke qen\u00eb se kur shkruhet n\u00eb pipe nuk kontrollet e drejta e aksesit, z\u00ebvend\u00ebsimi n\u00eb cache-in e faqeve mund t\u00eb kryhet gjithashtu p\u00ebr skedar\u00eb q\u00eb ndodhen n\u00eb seksione t\u00eb montuara vet\u00ebm p\u00ebr lexim (p.sh., p\u00ebr skedar\u00eb n\u00eb CD-ROM). Pas z\u00ebvend\u00ebsimit t\u00eb informacionit n\u00eb cache-in e faqeve, procesi gjat\u00eb leximit t\u00eb t\u00eb dh\u00ebnave nga skedari do t\u00eb marr\u00eb t\u00eb dh\u00ebna t\u00eb manipuluara n\u00eb vend t\u00eb atyre reale. <\/p>\n

Eksploatimi p\u00ebrb\u00ebhet nga krijimi i nj\u00eb kanali t\u00eb paem\u00ebrtuar dhe mbushja e tij me t\u00eb dh\u00ebna t\u00eb rast\u00ebsishme p\u00ebr t\u00eb arritur vendosjen e flagut PIPE_BUF_FLAG_CAN_MERGE n\u00eb t\u00eb gjitha strukturat e lidhura ring. Pastaj, t\u00eb dh\u00ebnat lexohen nga kanali, por flagu mbetet i vendosur n\u00eb t\u00eb gjitha shembujt e struktur\u00ebs pipe_buffer n\u00eb strukturat rrethore pipe_inode_info. M\u00eb pas, kryhet thirrja splice() p\u00ebr t\u00eb lexuar t\u00eb dh\u00ebnat nga skedari i targetit n\u00eb kanal t\u00eb paem\u00ebrtuar, duke filluar nga offset-i i k\u00ebrkuar. Kur shkruhen t\u00eb dh\u00ebna n\u00eb k\u00ebt\u00eb kanal t\u00eb paem\u00ebrtuar, p\u00ebr shkak t\u00eb flagut PIPE_BUF_FLAG_CAN_MERGE, t\u00eb dh\u00ebnat n\u00eb cache-in e faqeve do t\u00eb rishkruhen, n\u00eb vend q\u00eb t\u00eb krijohet nj\u00eb shembull i ri i struktur\u00ebs pipe_buffer.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-0847), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u043a\u044d\u0448\u0430 \u0434\u043b\u044f \u043b\u044e\u0431\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c O_RDONLY \u0438\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043f\u0440\u0438\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f. \u0421 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438\u043b\u0438 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103489","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb kernelin Linux q\u00eb lejon manipulimin e skedar\u00ebve t\u00eb aksesuesh\u00ebm vet\u00ebm p\u00ebr lexim | ProHoster","description":"N\u00eb kernelin Linux \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2022-0847), i cili lejon rishkrimin e p\u00ebrmbajtjes s\u00eb cache-it t\u00eb faqeve p\u00ebr \u00e7do skedar, p\u00ebrfshir\u00eb ata q\u00eb jan\u00eb n\u00eb modin vet\u00ebm p\u00ebr lexim, t\u00eb hapura me flagun O_RDONLY ose t\u00eb vendosura.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-iskazit-fajly-dostupnye-tolko-dlya-chteniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0438\u0441\u043a\u0430\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-0847), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u043a\u044d\u0448\u0430 \u0434\u043b\u044f \u043b\u044e\u0431\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c O_RDONLY \u0438\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-iskazit-fajly-dostupnye-tolko-dlya-chteniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-03-07T19:36:38+00:00","article:modified_time":"2022-03-07T19:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103489","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-03-07 19:37:31","updated":"2022-10-03 12:20:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=103489"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103489\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=103489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=103489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=103489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}