N\u00eb sistemin e nd\u00ebrtimit Buildroot, i dizajnuar p\u00ebr t\u00eb krijuar ambientet bootable Linux p\u00ebr sisteme t\u00eb integruara, jan\u00eb identifikuar gjasht\u00eb vulnerabilitete, t\u00eb cilat lejojn\u00eb, gjat\u00eb interceptimit t\u00eb trafikut transit (MITM), t\u00eb b\u00ebhen ndryshime n\u00eb imazhet sistemike t\u00eb gjeneruara ose t\u00eb organizohet ekzekutimi i kodit n\u00eb nivelin e sistemit t\u00eb nd\u00ebrtimit. Vulnerabilitetet jan\u00eb rregulluar n\u00eb l\u00ebshimet Buildroot 2023.02.8, 2023.08.4 dhe 2023.11. <\/p>\n
Pes\u00eb vulnerabilitetet e para (CVE-2023-45841, CVE-2023-45842, CVE-2023-45838, CVE-2023-45839, CVE-2023-45840) prekin kodin e verifikimit t\u00eb integritetit t\u00eb paketave sipas hash-eve. Problemet p\u00ebrfshijn\u00eb mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb HTTP p\u00ebr ngarkimin e skedar\u00ebve dhe munges\u00ebn e skedareve t\u00eb kontrollit hash p\u00ebr disa paketa, gj\u00eb q\u00eb lejon z\u00ebvend\u00ebsimin e p\u00ebrmbajtjes s\u00eb k\u00ebtyre paketeve, duke pasur mund\u00ebsin\u00eb t\u00eb interfezohet n\u00eb trafik si\u00e7 \u00ebsht\u00eb sistemi i nd\u00ebrtimit. server\u00eb<\/a> (p\u00ebr shembull, kur p\u00ebrdoruesi lidhjet p\u00ebrmes nj\u00eb rrjeti wireless t\u00eb kontrolluar nga sulmuesi). <\/p>\n N\u00eb ve\u00e7anti, paketat aufs dhe aufs-util u shkarkuan p\u00ebrmes HTTP dhe nuk u kontrolluan p\u00ebrmes hash-eve. Hash-et gjithashtu mungonin p\u00ebr paketat riscv64-elf-toolchain, versal-firmware dhe mxsldr, t\u00eb cilat si parazgjedhje u shkarkuan p\u00ebrmes HTTPS, por n\u00eb rast probleme, riktheheshin n\u00eb shkarkim pa kriptim nga hosti http:\/\/sources.buildroot.net. N\u00eb munges\u00eb t\u00eb skedave '.hash', instrumenti Buildroot e konsideronte kontrollin si t\u00eb suksessh\u00ebm dhe p\u00ebrpunonte paketat e shkarkuara, duke p\u00ebrfshir\u00eb aplikimin e patch-eve hyr\u00ebse n\u00eb paketa dhe duke ekzekutuar skenar\u00ebt e nd\u00ebrtimit. Duke pasur mund\u00ebsin\u00eb p\u00ebr t\u00eb z\u00ebvend\u00ebsuar paketat e shkarkuara, nj\u00eb sulmues mund t\u00eb shtonte patch-e ose skedar\u00eb nd\u00ebrtimi Makefiles t\u00eb tij n\u00eb to, duke lejuar k\u00ebshtu ndryshimin e imazhit p\u00ebrfundimtar ose skenar\u00ebve t\u00eb sistemit t\u00eb nd\u00ebrtimit dhe realizimin e kodit t\u00eb tij. <\/p>\n Vulnerabiliteti i gjasht\u00eb (CVE-2023-43608) \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim n\u00eb realizimin e funksionalitetit BR_NO_CHECK_HASH_FOR, q\u00eb lejon p\u00ebrjashtimin e verifikimit t\u00eb integritetit sipas hash-eve p\u00ebr paketa selektive. Disa paketa, si b\u00ebrthama Linux, U-Boot dhe versal-firmware, lejonin ngarkimin e versioneve t\u00eb fundit, p\u00ebr t\u00eb cilat ende nuk ishin formuar skedar\u00ebt e kontrollit hash. P\u00ebr k\u00ebto versione u p\u00ebrdor opsioni BR_NO_CHECK_HASH_FOR, i cili \u00e7aktivizonte verifikimin sipas hash-eve. T\u00eb dh\u00ebnat ngarkoheshin p\u00ebrmes HTTPS, por si parazgjedhje, n\u00eb rast t\u00eb d\u00ebshtimit t\u00eb ngarkimit, p\u00ebrdorej rikthimi n\u00eb access n\u00eb source.buildroot.net pa enkriptim p\u00ebrmes protokollit http:\/\/. Sulmuesi gjat\u00eb nj\u00eb sulmi MITM mund t\u00eb bllokonte lidhjen me serverin HTTPS dhe ngarkimi do t\u00eb rikthehej n\u00eb http:\/\/sources.buildroot.net. \u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Buildroot, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0445 Linux-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 (MITM) \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u0438\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 Buildroot 2023.02.8, 2023.08.4 \u0438 2023.11. \u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45841, CVE-2023-45842, CVE-2023-45838, CVE-2023-45839, CVE-2023-45840) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112136","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb n\u00eb Buildroot q\u00eb lejojn\u00eb ekzekutimin e kodit n\u00eb serverin e nd\u00ebrtimit p\u00ebrmes nj\u00eb sulmi MITM | ProHoster","description":"N\u00eb sistemin e nd\u00ebrtimit Buildroot, e cila \u00ebsht\u00eb e fokusuar n\u00eb krijimin e ambienteve boot p\u00ebr Linux p\u00ebr sisteme t\u00eb integruara, jan\u00eb zbuluar gjasht\u00eb dob\u00ebsi q\u00eb lejojn\u00eb, gjat\u00eb kapjes s\u00eb trafikut kalues (MITM), kryerjen e modifikimeve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-buildroot-pozvolyayushhie-cherez-mitm-ataku-vypolnit-kod-na-sborochnom-servere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Buildroot, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 MITM-\u0430\u0442\u0430\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster","og:description":"\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Buildroot, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u044b\u0445 Linux-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 (MITM) \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-buildroot-pozvolyayushhie-cherez-mitm-ataku-vypolnit-kod-na-sborochnom-servere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-11T13:10:27+00:00","article:modified_time":"2023-12-11T13:10:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112136","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-22 15:30:24","updated":"2026-02-22 15:30:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112136"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112136\/revisions"}],"predecessor-version":[{"id":162262,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112136\/revisions\/162262"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"