{"id":106404,"date":"2023-01-19T06:48:10","date_gmt":"2023-01-19T04:48:10","guid":{"rendered":"https:\/\/prohoster.info\/?p=106404"},"modified":"2023-01-19T14:02:40","modified_gmt":"2023-01-19T12:02:40","slug":"dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda","title":{"rendered":"Dy vulnerabilitete n\u00eb Git, t\u00eb cilat mund t\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit nga larg","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb publikuar versionet e korrigjuara t\u00eb sistemit t\u00eb shp\u00ebrndar\u00eb t\u00eb menaxhimit t\u00eb kodit burimor Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6 dhe 2.30.7, n\u00eb t\u00eb cilat jan\u00eb eliminuar dy vulnerabilitete q\u00eb lejojn\u00eb ekzekutimin e kodit t\u00eb p\u00ebrdoruesit n\u00eb sistemin e p\u00ebrdoruesit gjat\u00eb p\u00ebrdorimit t\u00eb komand\u00ebs «git archive» dhe pun\u00ebs me repozita t\u00eb jashtme t\u00eb pasiguruara. Vulnerabilitetet jan\u00eb shkaktuar nga gabime n\u00eb kodimin e formatimit t\u00eb komiteteve dhe analizimin e skedarit «.gitattributes», q\u00eb gjat\u00eb p\u00ebrpunimit t\u00eb repozitave t\u00eb jashtme mund t\u00eb \u00e7ojn\u00eb n\u00eb shkruarjen jasht\u00eb kujtes\u00ebs dhe leximin e t\u00eb dh\u00ebnave t\u00eb rastit nga memoria. <\/p>\n
T\u00eb dyja dob\u00ebsit\u00eb jan\u00eb zbuluar gjat\u00eb nj\u00eb auditimi t\u00eb siguris\u00eb s\u00eb kodit burimor t\u00eb Git, t\u00eb kryer nga kompania X41 me porosi t\u00eb fondit OSTIF (Open Source Technology Improvement Fund), i krijuar p\u00ebr t\u00eb forcuar sigurin\u00eb e projekteve t\u00eb hapura. P\u00ebrve\u00e7 dy problemeve kritike t\u00eb diskutuar m\u00eb posht\u00eb, gjat\u00eb auditimit u gjet gjithashtu nj\u00eb dob\u00ebsi e rrezikshme, nj\u00eb dob\u00ebsi me ndjeshm\u00ebri t\u00eb mesme dhe kat\u00ebr probleme t\u00eb tjera q\u00eb nuk jan\u00eb t\u00eb rrezikshme. Gjithashtu jan\u00eb dh\u00ebn\u00eb 27 rekomandime p\u00ebr p\u00ebrmir\u00ebsimin e siguris\u00eb s\u00eb kodit burimor. <\/p>\n
\n
CVE-2022-41903: mbidozimi i numrave t\u00eb plot\u00eb n\u00eb kodin e formatimit t\u00eb informacionit t\u00eb komiteteve, q\u00eb ndodh gjat\u00eb p\u00ebrpunimit t\u00eb vlerave t\u00eb m\u00ebdha t\u00eb offset n\u00eb operator\u00ebt e mbushjes, si\u00e7 jan\u00eb «%<(«, «%<|(«, «%>(«, «%>>(» dhe «%><( )». Mbidozimi i numrave t\u00eb plot\u00eb ndodh n\u00eb funksionin format_and_pad_commit() p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb tipit int p\u00ebr variablin size_t, i cili merr pjes\u00eb n\u00eb caktimin e madh\u00ebsis\u00eb s\u00eb bllokut t\u00eb kopjimit gjat\u00eb thirrjes s\u00eb memcpy().\n
Vulnerabiliteti shfaqet si gjat\u00eb thirrjeve t\u00eb drejtp\u00ebrdrejta me parametra formatimi t\u00eb specializuar (p.sh., kur ekzekutohet «git log —format=…»), ashtu edhe gjat\u00eb p\u00ebrdorimit t\u00eb indirekt formatimit gjat\u00eb ekzekutimit t\u00eb komand\u00ebs «git archive» n\u00eb nj\u00eb repozitor t\u00eb kontrolluar nga sulmuesi. N\u00eb k\u00ebt\u00eb rast, modifikator\u00ebt e formatimit p\u00ebrcaktohen p\u00ebrmes parametrit export-subst n\u00eb skedarin «.gitattributes», i cili mund t\u00eb vendoset nga sulmuesi n\u00eb repozitorin e tij. Problemi mund t\u00eb p\u00ebrdoret p\u00ebr leximin dhe shkruarjen e zonave t\u00eb rastit n\u00eb kujtes\u00eb dhe p\u00ebr t\u00eb \u00e7uar n\u00eb ekzekutimin e kodit t\u00eb keq q\u00ebllimsh\u00ebm gjat\u00eb pun\u00ebs me repozita t\u00eb jashtme t\u00eb paprovuar. <\/p>\n
CVE-2022-23521: mbidozime t\u00eb numrave t\u00eb plot\u00eb gjat\u00eb analizimit t\u00eb p\u00ebrmbajtjes s\u00eb skedar\u00ebve «.gitattributes» n\u00eb repozitorin, q\u00eb shfaqen gjat\u00eb p\u00ebrpunimit t\u00eb nj\u00eb numri shum\u00eb t\u00eb madh t\u00eb modele t\u00eb rrug\u00ebve t\u00eb skedar\u00ebve ose nj\u00eb numri t\u00eb madh t\u00eb atributeve me nj\u00eb model, si dhe gjat\u00eb analizimit t\u00eb emrave shum\u00eb t\u00eb m\u00ebdhenj t\u00eb atributeve. Problemi mund t\u00eb p\u00ebrdoret p\u00ebr leximin dhe shkruarjen e zonave t\u00eb rastit n\u00eb kujtes\u00eb dhe p\u00ebr t\u00eb \u00e7uar n\u00eb ekzekutimin e kodit t\u00eb keq q\u00ebllimsh\u00ebm gjat\u00eb pun\u00ebs me nj\u00eb repozitor t\u00eb pa verifikuar, n\u00eb t\u00eb cilin sulmuesi mund t\u00eb vendos\u00eb nj\u00eb skedar t\u00eb specializuar .gitattributes dhe t\u00eb siguroj\u00eb p\u00ebrfshirjen e tij n\u00eb indeks. <\/ul>\n
Publikimi i p\u00ebrdit\u00ebsimeve t\u00eb pakove n\u00eb shp\u00ebrndarjet mund t\u00eb ndiqet n\u00eb faqet: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD, NetBSD. P\u00ebr t\u00eb ulur rrezikun e sulmeve n\u00eb rast se nuk \u00ebsht\u00eb e mundur t\u00eb instalohet e fundit n\u00eb koh\u00eb, rekomandohet q\u00eb t\u00eb shmangni pun\u00ebn me repozita t\u00eb pasigurta dhe p\u00ebrdorimin e komand\u00ebs «git archive». \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb mbani mend se komanda «git archive» mund t\u00eb ekzekutohet n\u00eb m\u00ebnyr\u00eb implicite, p\u00ebr shembull, nga git daemon. P\u00ebr t\u00eb \u00e7aktivizuar ekzekutimin e «git archive» n\u00eb git daemon, duhet t\u00eb ndryshoni parametrin daemon.uploadArch me komand\u00ebn «git config —global daemon.uploadArch false». <\/p>\n
Gjithashtu, mund t\u00eb p\u00ebrmendim nj\u00eb tjet\u00ebr vulnerabilitet (CVE-2022-41953) n\u00eb produktin Git for Windows, q\u00eb mund\u00ebson ekzekutimin e kodit gjat\u00eb klonimit p\u00ebrmes nd\u00ebrfaqes grafike t\u00eb repozitave t\u00eb jashtme t\u00eb pa verifikuara. Problemi \u00ebsht\u00eb shkaktuar nga fakti q\u00eb Git GUI p\u00ebr Windows pas operacionit «checkout» automatikisht ekzekuton disa komanda post-procesimi, si\u00e7 \u00ebsht\u00eb ekzekutimi i programit t\u00eb kontrollit t\u00eb shkrimit p\u00ebr verifikimin e drejtshkrimit, duke marr\u00eb parasysh se rrug\u00ebt e k\u00ebrkimit t\u00eb skedar\u00ebve t\u00eb kontrollit t\u00eb shkrimit mbulojn\u00eb gjithashtu pem\u00ebn e pun\u00ebs t\u00eb klonuar (sulmi konsiston n\u00eb shtimin e kontrollit t\u00eb shkrimit n\u00eb pem\u00ebn e pun\u00ebs t\u00eb repozitorit). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"