{"id":108680,"date":"2023-05-24T12:48:28","date_gmt":"2023-05-24T10:48:28","guid":{"rendered":"https:\/\/prohoster.info\/?p=108680"},"modified":"2023-05-24T16:23:52","modified_gmt":"2023-05-24T14:23:52","slug":"uyazvimosti-v-module-ksmbd-yadra-linux-pozvolyayushhie-udalyonno-vypolnit-svoj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-module-ksmbd-yadra-linux-pozvolyayushhie-udalyonno-vypolnit-svoj-kod","title":{"rendered":"Vulnerabilitetet n\u00eb modulit ksmbd t\u00eb b\u00ebrtham\u00ebs Linux, t\u00eb cilat lejojn\u00eb ekzekutimin e kodit tuaj t\u00eb distancuar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00eb modulin ksmbd, i cili ofron nj\u00eb implementim t\u00eb integruar n\u00eb b\u00ebrtham\u00ebn Linux t\u00eb serverit t\u00eb skedar\u00ebve mb\u00ebshtetur nga protokolli SMB, jan\u00eb identifikuar 14 vulnerabilitete, nga t\u00eb cilat kat\u00ebr lejojn\u00eb ekzekutimin e kodit t\u00eb tij n\u00eb m\u00ebnyr\u00eb t\u00eb larg\u00ebt me t\u00eb drejta b\u00ebrthamore. Sulmi mund t\u00eb kryhet pa autentifikim, mjafton q\u00eb moduli ksmbd t\u00eb jet\u00eb aktivizuar n\u00eb sistem. Problemet shfaqen q\u00eb nga b\u00ebrthama 5.15, n\u00eb t\u00eb cil\u00ebn u pranuar moduli ksmbd. Vulnerabilitetet jan\u00eb rregulluar n\u00eb p\u00ebrdit\u00ebsimet e b\u00ebrtham\u00ebs 6.3.2, 6.2.15, 6.1.28 dhe 5.15.112. Mund t\u00eb ndjekni rregullimet n\u00eb distribuimet n\u00eb faqet e m\u00ebposhtme: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Gentoo, Arch.     <\/p>\n<p>Problemet e identifikuara:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2023-32254, CVE-2023-32250, CVE-2023-32257, CVE-2023-32258 \u2014 ekzekutimi i kodit t\u00eb larg\u00ebt me t\u00eb drejta b\u00ebrthamore p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb bllokimeve t\u00eb duhura t\u00eb objekteve gjat\u00eb trajtimit t\u00eb k\u00ebrkesave t\u00eb jashtme, q\u00eb p\u00ebrmbajn\u00eb komandat SMB2_TREE_DISCONNECT, SMB2_SESSION_SETUP, SMB2_LOGOFF dhe SMB2_CLOSE, \u00e7ka \u00e7on n\u00eb nj\u00eb gjendje garancie t\u00eb shfryt\u00ebzueshme. Sulmi mund t\u00eb realizohet pa kaluar autentifikimin.\n<li class=\"l\"> CVE-2023-32256 \u2014 rrjedhja e p\u00ebrmbajtjes s\u00eb hap\u00ebsirave t\u00eb memories b\u00ebrthamore p\u00ebr shkak t\u00eb nj\u00eb gjendjeje garancie gjat\u00eb trajtimit t\u00eb komandave SMB2_QUERY_INFO dhe SMB2_LOGOFF. Sulmi mund t\u00eb realizohet pa kaluar autentifikimin.\n<li class=\"l\"> CVE-2023-32252, CVE-2023-32248 \u2014 refuzim n\u00eb sh\u00ebrbim n\u00eb larg\u00ebsi p\u00ebr shkak t\u00eb dereferencimit t\u00eb nj\u00eb treguesi t\u00eb null n\u00eb trajtimin e komandave SMB2_LOGOFF, SMB2_TREE_CONNECT dhe SMB2_QUERY_INFO. Sulmi mund t\u00eb realizohet pa kaluar autentifikimin.\n<li class=\"l\"> CVE-2023-32249 \u2014 mund\u00ebsia e kapjes s\u00eb seanc\u00ebs me p\u00ebrdoruesin p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb izolimit t\u00eb duhur gjat\u00eb trajtimit t\u00eb identifikuesit t\u00eb seanc\u00ebs n\u00eb modin multi-kanal.\n<li class=\"l\"> CVE-2023-32247, CVE-2023-32255 \u2014 refuzim n\u00eb sh\u00ebrbim p\u00ebr shkak t\u00eb rrjedhjes s\u00eb memories gjat\u00eb trajtimit t\u00eb komand\u00ebs SMB2_SESSION_SETUP. Sulmi mund t\u00eb realizohet pa kaluar autentifikimin.\n<li class=\"l\"> CVE-2023-2593 \u2014 refuzim n\u00eb sh\u00ebrbim p\u00ebr shkak t\u00eb shterimit t\u00eb memories s\u00eb disponueshme, i shkaktuar nga nj\u00eb gabim q\u00eb \u00e7on n\u00eb mos-rimbursimin e memories n\u00eb trajtimin e lidhjeve t\u00eb reja TCP. Sulmi mund t\u00eb realizohet pa kaluar autentifikimin.\n<li class=\"l\"> CVE-2023-32253 \u2014 refuzim n\u00eb sh\u00ebrbim p\u00ebr shkak t\u00eb nj\u00eb bllokimi t\u00eb nd\u00ebrsjell\u00eb gjat\u00eb trajtimit t\u00eb komand\u00ebs SMB2_SESSION_SETUP. Sulmi mund t\u00eb realizohet pa kaluar autentifikimin.\n<li class=\"l\"> CVE-2023-32251 \u2014 mungesa e mbrojtjes nga sulme p\u00ebr gjetjen e parametrave t\u00eb autentifikimit (brute force).\n<li class=\"l\"> CVE-2023-32246 \u2014 nj\u00eb p\u00ebrdorues lokal i sistemit, q\u00eb ka t\u00eb drejt\u00eb t\u00eb shkarkoj\u00eb modulin ksmbd, mund t\u00eb arrihet p\u00ebr t\u00eb ekzekutuar kodin e tij n\u00eb nivelin e b\u00ebrtham\u00ebs Linux.    <\/ul>\n<p>P\u00ebr m\u00eb tep\u00ebr, jan\u00eb identifikuar edhe 5 vulnerabilitete n\u00eb paket\u00ebn ksmbd-tools, e cila p\u00ebrfshin utilitetet p\u00ebr menaxhimin dhe funksionimin e ksmbd, q\u00eb ekzekutohen n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit. Vulnerabilitetet m\u00eb t\u00eb rrezikshme (ZDI-CAN-17822, ZDI-CAN-17770, ZDI-CAN-17820, CVE ende nuk \u00ebsht\u00eb caktuar) lejojn\u00eb nj\u00eb sulmues t\u00eb paautentifikuar t\u00eb ekzekutoj\u00eb kodin e tij me t\u00eb drejta root. Vulnerabilitetet shkaktohen nga mungesa e kontrollit t\u00eb madh\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb jashtme t\u00eb marra para se t\u00eb kopjohen n\u00eb bufet n\u00eb kodin e sh\u00ebrbimit WKSSVC dhe n\u00eb trajtuesit e opcode-ve LSARPC_OPNUM_LOOKUP_SID2 dhe SAMR_OPNUM_QUERY_USER_INFO. Dy vulnerabilitete t\u00eb tjera (ZDI-CAN-17823, ZDI-CAN-17821) mund t\u00eb \u00e7ojn\u00eb n\u00eb refuzim n\u00eb sh\u00ebrbim n\u00eb larg\u00ebsi pa kaluar autentifikimin.            <\/p>\n<p>Ksmbd paraqitet si nj\u00eb zgjerim me performanc\u00eb t\u00eb lart\u00eb dhe i gatsh\u00ebm p\u00ebr t'u p\u00ebrdorur n\u00eb pajisje t\u00eb integruara, i integruar sipas nevoj\u00ebs me mjetet dhe bibliotekat e Samba. Mb\u00ebshtetje p\u00ebr funksionimin e serverit SMB p\u00ebrmes modulit ksmbd \u00ebsht\u00eb i pranish\u00ebm n\u00eb paket\u00ebn Samba, q\u00eb nga l\u00ebshimi 4.16.0. Ndryshe nga serveri SMB q\u00eb punon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, ksmbd \u00ebsht\u00eb m\u00eb i efektsh\u00ebm n\u00eb terma t\u00eb performanc\u00ebs, konsumit t\u00eb memories dhe integrimit me kapacitetet e zgjeruara t\u00eb b\u00ebrtham\u00ebs. Autor\u00ebt e kodit ksmbd jan\u00eb Namjae Jeon nga kompania Samsung dhe Hyunchul Lee nga LG, nd\u00ebrsa mbik\u00ebqyrja n\u00eb p\u00ebrb\u00ebrjen e b\u00ebrtham\u00ebs b\u00ebhet nga Steve French nga kompania Microsoft, mbik\u00ebqyr\u00ebsi i n\u00ebn-sistemit CIFS\/SMB2\/SMB3 n\u00eb b\u00ebrtham\u00ebn Linux dhe nj\u00eb pjes\u00ebtar i gjat\u00eb i ekipit t\u00eb zhvilluesve t\u00eb Samba, q\u00eb ka dh\u00ebn\u00eb nj\u00eb kontribut t\u00eb konsideruesh\u00ebm n\u00eb realizimin e mb\u00ebshtetjes p\u00ebr protokollet SMB\/CIFS n\u00eb Samba dhe Linux.      <\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb theksohen dy vulnerabilitete n\u00eb drejtuesin grafik vmwgfx, i p\u00ebrdorur p\u00ebr realizimin e p\u00ebrshpejtimit 3D n\u00eb ambientet VMware. Vulnerabiliteti i par\u00eb (ZDI-CAN-20292) lejon nj\u00eb p\u00ebrdorues lokal t\u00eb rris\u00eb privilegjet e tij n\u00eb sistem. Vulnerabiliteti shkaktohet nga mungesa e kontrollit t\u00eb gjendjes s\u00eb bufes para \u00e7lirimit n\u00eb trajtimin e objektit vmw_buffer_object, \u00e7ka mund t\u00eb \u00e7oj\u00eb n\u00eb nj\u00eb thirrje t\u00eb dyfisht\u00eb t\u00eb funksionit free. Vulnerabiliteti i dyt\u00eb (ZDI-CAN-20110) \u00e7on n\u00eb nj\u00eb rrjedhje t\u00eb p\u00ebrmbajtjes s\u00eb memories b\u00ebrthamore p\u00ebr shkak t\u00eb gabimeve gjat\u00eb organizimit t\u00eb bllokimeve t\u00eb objekteve GEM.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=59189\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108680","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-module-ksmbd-yadra-linux-pozvolyayushhie-udalyonno-vypolnit-svoj-kod\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-module-ksmbd-yadra-linux-pozvolyayushhie-udalyonno-vypolnit-svoj-kod\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-05-24T10:48:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-05-24T14:23:52+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsi n\u00eb modulin ksmbd t\u00eb b\u00ebrtham\u00ebs Linux, q\u00eb lejojn\u00eb ekzekutimin e kodit tuaj n\u00eb distanc\u00eb | ProHoster","description":"N\u00eb modulit ksmbd, i cili ofron nj\u00eb implementim t\u00eb integruar n\u00eb kernelin Linux t\u00eb nj\u00eb serveri skedar\u00ebsh t\u00eb bazuar n\u00eb protokollin SMB, jan\u00eb zbuluar 14 vulnerabilitete, nga t\u00eb cilat kat\u00ebr lejojn\u00eb ekzekutimin e kodit t\u00eb p\u00ebrdoruesit n\u00eb m\u00ebnyr\u00eb t\u00eb larg\u00ebt me t\u00eb drejta t\u00eb kernelit. Sulmi mund t\u00eb realizohet pa autentifikim, mjafton q\u00eb moduli ksmbd t\u00eb jet\u00eb aktiv n\u00eb sistem. Problemet shfaqen q\u00eb nga kerneli 5.15, n\u00eb p\u00ebrb\u00ebrjen e t\u00eb cilit \u00ebsht\u00eb pranuar","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-module-ksmbd-yadra-linux-pozvolyayushhie-udalyonno-vypolnit-svoj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-module-ksmbd-yadra-linux-pozvolyayushhie-udalyonno-vypolnit-svoj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-24T10:48:28+00:00","article:modified_time":"2023-05-24T14:23:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/108680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=108680"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/108680\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=108680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=108680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=108680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}