{"id":105776,"date":"2022-12-01T15:37:11","date_gmt":"2022-12-01T13:37:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd"},"modified":"2022-12-01T15:37:11","modified_gmt":"2022-12-01T13:37:11","slug":"udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","title":{"rendered":"Vulnerabiliteti i larg\u00ebt root n\u00eb utilitarin ping, i shp\u00ebrndar\u00eb me FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb FreeBSD \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2022-23093) n\u00eb utilitarin ping, pjes\u00eb e paket\u00ebs s\u00eb baz\u00ebs. Problemi mund t\u00eb \u00e7oj\u00eb potencialisht n\u00eb ekzekutimin e kodit n\u00eb distanc\u00eb me t\u00eb drejtat root kur kontrollohet duke p\u00ebrdorur ping me nj\u00eb host t\u00eb jasht\u00ebm, i kontrolluar nga nj\u00eb sulmues. Nj\u00eb zgjidhje e propozuar \u00ebsht\u00eb p\u00ebrmir\u00ebsuar n\u00eb p\u00ebrdit\u00ebsimet FreeBSD 13.1-RELEASE-p5, 12.4-RC2-p2 dhe 12.3-RELEASE-p10. N\u00ebse sistemet e tjera BSD jan\u00eb t\u00eb prekura nga ky vulnerabilitet ende nuk dihet (raportet p\u00ebr vulnerabilitetin n\u00eb NetBSD, DragonFlyBSD dhe OpenBSD ende nuk jan\u00eb shfaqur). <\/p>\n

Vulnerabiliteti shkaktohet nga mbushja e tepric\u00ebs n\u00eb kodin e analiz\u00ebs s\u00eb mesazheve ICMP q\u00eb vijn\u00eb si p\u00ebrgjigje ndaj k\u00ebrkes\u00ebs verifikuese. Kodi i d\u00ebrgimit dhe marrjes s\u00eb mesazheve ICMP n\u00eb ping p\u00ebrdor soket t\u00eb pap\u00ebrpunuara dhe ekzekutohet me privilegje t\u00eb rritur (utilitari ofrohet me flamurin setuid root). Procesimi i p\u00ebrgjigjes b\u00ebhet n\u00eb an\u00ebn e ping-ut duke rind\u00ebrtuar titujt IP dhe ICMP t\u00eb paketave q\u00eb marrin nga soketi i pap\u00ebrpunuar. Titujt IP dhe ICMP t\u00eb ndar\u00eb kopjohen nga funksioni pr_pack() n\u00eb bufere, pa marr\u00eb parasysh se n\u00eb paket\u00eb pas titullit IP mund t\u00eb jen\u00eb t\u00eb pranishme tituj t\u00eb tjer\u00eb t\u00eb zgjeruar. <\/p>\n

Titujt e till\u00eb ndahen nga paketa dhe p\u00ebrfshihen n\u00eb bllokun e titujve, por nuk merren parasysh n\u00eb llogaritjen e madh\u00ebsis\u00eb s\u00eb bufereve. N\u00eb rast se hosti n\u00eb p\u00ebrgjigje t\u00eb k\u00ebrkes\u00ebs ICMP t\u00eb d\u00ebrguar kthjellon nj\u00eb paket\u00eb me tituj t\u00eb tjer\u00eb t\u00eb zgjeruar, p\u00ebrmbajtja e tyre do t\u00eb shkruhet n\u00eb nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb bufereve n\u00eb stack. Si rezultat, sulmuesi mund t\u00eb mbivendos\u00eb deri n\u00eb 40 bytes t\u00eb dh\u00ebnash n\u00eb stack, q\u00eb potencialisht lejon ekzekutimin e kodit t\u00eb tij. Rreziku i problemit zbutet nga fakti se n\u00eb momentin e shfaqjes s\u00eb gabimit, procesi ndodhet n\u00eb nj\u00eb gjendje t\u00eb izolimit t\u00eb thirrjeve sistemike (kapaciteti i mod\u00ebs), gj\u00eb q\u00eb e v\u00ebshtir\u00ebson qasjen n\u00eb sistemin e mbetur pas shfryt\u00ebzimit t\u00eb vulnerabilitetit.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043e FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-23093) \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 ping \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0445\u043e\u0441\u0442\u0430, \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 13.1-RELEASE-p5, 12.4-RC2-p2 \u0438 12.3-RELEASE-p10. \u041f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u044f\u0441\u043d\u043e (\u043e\u0442\u0447\u0451\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NetBSD, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105776","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet i distancuar root n\u00eb utilitarin ping, i ofruar n\u00eb FreeBSD | ProHoster","description":"N\u00eb FreeBSD \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2022-23093) n\u00eb utilitarin ping, pjes\u00eb e paket\u00ebs s\u00eb baz\u00ebs.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412\u043e FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-23093) \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-01T13:37:11+00:00","article:modified_time":"2022-12-01T13:37:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105776"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105776\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105776"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}