{"id":104289,"date":"2022-06-06T09:36:38","date_gmt":"2022-06-06T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter"},"modified":"2022-06-06T09:36:38","modified_gmt":"2022-06-06T07:36:38","slug":"eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","title":{"rendered":"Nj\u00eb tjet\u00ebr vulnerabilitet n\u00eb n\u00ebn-sistemin e b\u00ebrtham\u00ebs Linux Netfilter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb n\u00ebn-sistemin e b\u00ebrtham\u00ebs Netfilter \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2022-1972), e ngjashme me problemin e zbuluar n\u00eb fund t\u00eb majit. Kjo dob\u00ebsi e re gjithashtu lejon nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb t\u00eb drejtat root n\u00eb sistem p\u00ebrmes manipulimeve me rregullat n\u00eb nftables dhe k\u00ebrkon p\u00ebr realizimin e sulmit aksesin n\u00eb nftables, i cili mund t\u00eb merret n\u00eb nj\u00eb hap\u00ebsir\u00eb em\u00ebrtimi t\u00eb ve\u00e7ant\u00eb (network namespace ose user namespace) me t\u00eb drejtat CLONE_NEWUSER, CLONE_NEWNS ose CLONE_NEWNET (p\u00ebr shembull, n\u00ebse \u00ebsht\u00eb e mundur t\u00eb nisni nj\u00eb kontejner t\u00eb izoluar). <\/p>\n

Problemi shkaktohet nga nj\u00eb gabim n\u00eb kodin p\u00ebr trajtimin e set-listave me fushat q\u00eb p\u00ebrfshijn\u00eb disa diapazone, dhe \u00e7on n\u00eb shkrimin p\u00ebrtej zon\u00ebs s\u00eb caktuar t\u00eb memories gjat\u00eb trajtimit t\u00eb parametrave t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb t\u00eb list\u00ebs. K\u00ebrkuesit arrit\u00ebn t\u00eb p\u00ebrgatisin nj\u00eb exploit funkcional p\u00ebr t\u00eb marr\u00eb t\u00eb drejtat root n\u00eb Ubuntu 21.10 me b\u00ebrtham\u00eb 5.13.0-39-generic. Vulnerabiliteti shfaqet q\u00eb nga b\u00ebrthama 5.6. Nj\u00eb rregullim \u00ebsht\u00eb propozuar n\u00eb form\u00ebn e nj\u00eb patch. P\u00ebr t\u00eb bllokuar shfryt\u00ebzimin e k\u00ebtij vulnerabiliteti n\u00eb sistemet e zakonshme, duhet t\u00eb siguroheni q\u00eb t\u00eb jet\u00eb fikur mund\u00ebsia e krijimit t\u00eb hap\u00ebsirave t\u00eb emrave nga p\u00ebrdoruesit e pa privilegjuar (\"sudo sysctl -w kernel.unprivileged_userns_clone=0\"). <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, jan\u00eb publikuar informacione p\u00ebr tre dob\u00ebsi n\u00eb b\u00ebrtham\u00eb q\u00eb lidhen me n\u00ebn-sistemin NFC. Dob\u00ebsit\u00eb lejojn\u00eb t\u00eb shkaktohet nj\u00eb nd\u00ebrprerje e papritur p\u00ebrmes ekzekutimit t\u00eb veprimeve nga nj\u00eb p\u00ebrdorues i paprivilegjuar (vektor\u00ebt e sulmit m\u00eb t\u00eb rreziksh\u00ebm ende nuk jan\u00eb demonstruar): <\/p>\n