{"id":104810,"date":"2022-08-10T21:36:44","date_gmt":"2022-08-10T19:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-yadre-linux-vyyavleny-ekspluatiruemye-uyazvimosti-v-posix-cpu-timer-cls_route-i-nf_tables"},"modified":"2022-08-10T21:36:44","modified_gmt":"2022-08-10T19:36:44","slug":"v-yadre-linux-vyyavleny-ekspluatiruemye-uyazvimosti-v-posix-cpu-timer-cls_route-i-nf_tables","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-yadre-linux-vyyavleny-ekspluatiruemye-uyazvimosti-v-posix-cpu-timer-cls_route-i-nf_tables","title":{"rendered":"N\u00eb b\u00ebrtham\u00ebn Linux jan\u00eb identifikuar dob\u00ebsit\u00eb e shfryt\u00ebzueshme n\u00eb POSIX CPU timer, cls_route dhe nf_tables","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb b\u00ebrtham\u00ebn Linux jan\u00eb zbuluar disa dob\u00ebsi, t\u00eb shkaktuara nga qasje n\u00eb zona memorie t\u00eb \u00e7liruar tashm\u00eb dhe q\u00eb i lejojn\u00eb nj\u00eb p\u00ebrdorues lokal t\u00eb rris\u00eb privilegjet e tij n\u00eb sistem. P\u00ebr t\u00eb gjitha problemet n\u00eb shqyrtim jan\u00eb krijuar prototipa funksional t\u00eb shfryt\u00ebzuesve, t\u00eb cilat do t\u00eb publikohet nj\u00eb jav\u00eb pas publikimit t\u00eb informacionit mbi dob\u00ebsit\u00eb. Patches p\u00ebr zgjidhjen e problemeve jan\u00eb d\u00ebrguar zhvilluesve t\u00eb b\u00ebrtham\u00ebs Linux. <\/p>\n
\n
CVE-2022-2588 \u2014 nj\u00eb vulnerabilitet n\u00eb implementimin e filtrit cls_route, i shkaktuar nga nj\u00eb gabim q\u00eb b\u00ebn q\u00eb filtri i vjet\u00ebr t\u00eb mos hiqet nga tabela e hash-it deri n\u00eb pastrimin e memories gjat\u00eb procesimit t\u00eb nj\u00eb deshifruesi null. Vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm q\u00eb nga l\u00ebshimi 2.6.12-rc2. P\u00ebr t\u00eb realizuar nj\u00eb sulm, k\u00ebrkohen t\u00eb drejtat CAP_NET_ADMIN, t\u00eb cilat mund t\u00eb merren n\u00ebse ka qasje n\u00eb krijimin e hap\u00ebsirave t\u00eb emrave t\u00eb rrjetit (network namespace) ose hap\u00ebsirave t\u00eb emrave t\u00eb identifikuesve t\u00eb p\u00ebrdoruesit (user namespace). Si nj\u00eb m\u00ebnyr\u00eb alternative mbrojtjeje, mund t\u00eb \u00e7aktivizohet moduli cls_route duke shtuar rreshtin 'install cls_route \/bin\/true' n\u00eb modprobe.conf.\n
CVE-2022-2586 \u2014 nj\u00eb vulnerabilitet n\u00eb n\u00ebnskem\u00ebn netfilter n\u00eb modul nf_tables, i cili siguron funksionimin e filtrit paketash nftables. Problemi \u00ebsht\u00eb shkaktuar nga fakti q\u00eb objekti nft mund t\u00eb referohet n\u00eb nj\u00eb list\u00eb grupesh n\u00eb nj\u00eb tabel\u00eb tjet\u00ebr, duke \u00e7uar n\u00eb qasjen n\u00eb nj\u00eb hap\u00ebsir\u00eb t\u00eb memories s\u00eb lir\u00eb pas fshirjes s\u00eb k\u00ebsaj tabele. Vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm q\u00eb nga l\u00ebshimi 3.16-rc1. P\u00ebr t\u00eb realizuar nj\u00eb sulm, k\u00ebrkohen t\u00eb drejtat CAP_NET_ADMIN, t\u00eb cilat mund t\u00eb merren n\u00ebse ka qasje n\u00eb krijimin e hap\u00ebsirave t\u00eb emrave t\u00eb rrjetit (network namespace) ose hap\u00ebsirave t\u00eb emrave t\u00eb identifikuesve t\u00eb p\u00ebrdoruesit (user namespace).\n
CVE-2022-2585 \u2014 nj\u00eb vulnerabilitet n\u00eb POSIX CPU timer, i shkaktuar nga fakti q\u00eb gjat\u00eb thirrjes nga nj\u00eb thread jo lider, struktura e timer-it mbetet n\u00eb list\u00eb, pavar\u00ebsisht nga pastrimi i memories s\u00eb alokuar p\u00ebr ruajtje. Vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm q\u00eb nga l\u00ebshimi 3.16-rc1. <\/ul>\n