{"id":106239,"date":"2022-12-22T15:36:49","date_gmt":"2022-12-22T13:36:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-systemd-coredump-pozvolyayushhaya-opredelit-soderzhimoe-pamyati-suid-programm"},"modified":"2022-12-22T15:36:49","modified_gmt":"2022-12-22T13:36:49","slug":"uyazvimost-v-systemd-coredump-pozvolyayushhaya-opredelit-soderzhimoe-pamyati-suid-programm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-systemd-coredump-pozvolyayushhaya-opredelit-soderzhimoe-pamyati-suid-programm","title":{"rendered":"Dob\u00ebsi n\u00eb systemd-coredump q\u00eb lejon p\u00ebrcaktimin e p\u00ebrmbajtjes s\u00eb memories s\u00eb programeve suid","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb komponentin systemd-coredump, i cili siguron p\u00ebrpunimin e skedar\u00ebve core t\u00eb gjeneruar pas p\u00ebrfundimit t\u00eb papritur t\u00eb proceseve, \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2022-4415) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb pa privilegjuar t\u00eb p\u00ebrcaktoj\u00eb p\u00ebrmbajtjen e memories s\u00eb proceseve me privilegje, t\u00eb nisura me flagun suid root. Prania e k\u00ebsaj problemi n\u00eb konfigurimin e paracaktuar \u00ebsht\u00eb konfirmuar n\u00eb distribucione si openSUSE, Arch, Debian, Fedora dhe SLES. <\/p>\n

Vulnerabiliteti shkaktohet nga mungesa e p\u00ebrpunimit t\u00eb sakt\u00eb t\u00eb parametrave sysctl fs.suid_dumpable n\u00eb systemd-coredump, i cili me vler\u00ebn e paracaktuar 2 lejon gjenerimin e core-dump p\u00ebr proceset me flagun suid. N\u00ebnkuptohet se p\u00ebr skedar\u00ebt core t\u00eb proceseve suid duhet t\u00eb vendosen t\u00eb drejtat e aksesit q\u00eb lejojn\u00eb leximin vet\u00ebm p\u00ebr p\u00ebrdoruesin root. Utilitari systemd-coredump, i cili thirret nga b\u00ebrthama p\u00ebr t\u00eb ruajtur skedar\u00ebt core, ruan skedarin core n\u00ebn identifikuesin root, por gjithashtu ofron akses n\u00eb skedar\u00ebt core n\u00eb baz\u00eb t\u00eb ACL, q\u00eb lejon leximin n\u00eb baz\u00eb t\u00eb identifikuesit t\u00eb pronarit q\u00eb filloi procesin. <\/p>\n

Kjo ve\u00e7ori lejon ngarkimin e skedar\u00ebve core pa marr\u00eb parasysh faktin se programi mund t\u00eb ndryshoj\u00eb identifikuesin e p\u00ebrdoruesit dhe t\u00eb ekzekutohet me privilegje t\u00eb rritura. Sulmi p\u00ebrfshin q\u00eb p\u00ebrdoruesi t\u00eb mund t\u00eb nis\u00eb nj\u00eb aplikacion suid dhe t\u2019i d\u00ebrgoj\u00eb atij sinjalin SIGSEGV, pas s\u00eb cil\u00ebs ngarkon p\u00ebrmbajtjen e skedarit core, q\u00eb p\u00ebrfshin nj\u00eb pjes\u00eb t\u00eb memories s\u00eb procesit gjat\u00eb p\u00ebrfundimit t\u00eb papritur. <\/p>\n

P\u00ebr shembull, p\u00ebrdoruesi mund t\u00eb ekzekutoj\u00eb « \/usr\/bin\/su » dhe n\u00eb nj\u00eb terminal tjet\u00ebr mund ta p\u00ebrfundoj\u00eb at\u00eb me komand\u00ebn « kill -s SIGSEGV `pidof su` », pas s\u00eb cil\u00ebs systemd-coredump do t\u00eb ruaj\u00eb skedarin e core n\u00eb katalogun \/var\/lib\/systemd\/coredump, duke caktuar nj\u00eb ACL q\u00eb lejon leximin nga p\u00ebrdoruesi aktual. Duke qen\u00eb se utilita suid ‘su’ lexon n\u00eb memorje p\u00ebrmbajtjen e \/etc\/shadow, sulmuesi mund t\u00eb aksesoj\u00eb informacionin mbi hash-t\u00eb e fjal\u00ebkalimeve t\u00eb t\u00eb gjith\u00eb p\u00ebrdoruesve n\u00eb sistem. Utilita sudo nuk \u00ebsht\u00eb e prekur nga sulmi, sepse ndalon gjenerimin e skedar\u00ebve core p\u00ebrmes ulimit. <\/p>\n

Sipas zhvilluesve t\u00eb systemd, kjo dob\u00ebsi shfaqet q\u00eb nga l\u00ebshimi i systemd 247 (n\u00ebntor 2020), por sipas k\u00ebrkuesit q\u00eb e identifikoi, edhe versioni 246 \u00ebsht\u00eb i preksh\u00ebm. Dob\u00ebsia shfaqet n\u00ebse systemd \u00ebsht\u00eb nd\u00ebrtuar me bibliotek\u00ebn libacl (e cila \u00ebsht\u00eb e paracaktuar n\u00eb t\u00eb gjitha shp\u00ebrndarjet popullore). Nj\u00eb rregullim \u00ebsht\u00eb aktualisht n\u00eb dispozicion n\u00eb form\u00ebn e nj\u00eb patch-i. Mund t\u00eb monitoroni rregullimet n\u00eb shp\u00ebrndarjet p\u00ebrkat\u00ebse n\u00eb k\u00ebto faqe: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Gentoo, Arch. Si nj\u00eb zgjidhje p\u00ebr mbrojtje, mund t\u00eb vendosni sysctl fs.suid_dumpable n\u00eb vler\u00ebn 0, e cila \u00e7on n\u00eb fikjen e transferimit t\u00eb dump-eve tek p\u00ebrpunuesi systemd-coredump.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 systemd-coredump, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 core-\u0444\u0430\u0439\u043b\u043e\u0432, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-4415), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c suid root. \u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043e \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 openSUSE, Arch, Debian, Fedora \u0438 SLES. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 sysctl-\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 fs.suid_dumpable \u0432 systemd-coredump, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106239","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb systemd-coredump, q\u00eb lejon p\u00ebrcaktimin e p\u00ebrmbajtjes s\u00eb memories s\u00eb programeve suid | ProHoster","description":"N\u00eb komponentin systemd-coredump, q\u00eb siguron p\u00ebrpunimin e skedar\u00ebve core t\u00eb gjeneruar pas p\u00ebrfundimeve fatale t\u00eb proceseve, \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi (CVE-2022-4415), e cila lejon nj\u00eb p\u00ebrdorues lokal jo t\u00eb privilegjuar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-systemd-coredump-pozvolyayushhaya-opredelit-soderzhimoe-pamyati-suid-programm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 systemd-coredump, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 suid-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c | ProHoster","og:description":"\u0412 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 systemd-coredump, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 core-\u0444\u0430\u0439\u043b\u043e\u0432, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-4415), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-systemd-coredump-pozvolyayushhaya-opredelit-soderzhimoe-pamyati-suid-programm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-22T13:36:49+00:00","article:modified_time":"2022-12-22T13:36:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/106239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=106239"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/106239\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=106239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=106239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=106239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}