Kompania Qualys zbuloi nj\u00eb dob\u00ebsi kritike (CVE-2024-6387) n\u00eb OpenSSH, duke lejuar ekzekutimin n\u00eb distanc\u00eb t\u00eb kodit me privilegje root pa kalimin e autentifikimit. Dob\u00ebsia, e em\u00ebrtuar regreSSHion, shfaqet n\u00eb konfigurimin standard q\u00eb nga versioni OpenSSH 8.5 n\u00eb sisteme me bibliotek\u00ebn e zakonshme Glibc. <\/p>\n
Mund\u00ebsia e realizimit t\u00eb nj\u00eb sulmi u demonstruar n\u00eb nj\u00eb sistem 32-bit me Glibc me mbrojtjen ASLR (randomizimi i hap\u00ebsir\u00ebs s\u00eb adresave) t\u00eb aktivizuar. P\u00ebr t\u00eb realizuar me sukses sulmin n\u00eb kushte laboratori, ishin nevojitur 6-8 or\u00eb, gjat\u00eb t\u00eb cilave ishin server<\/a> krijuar vazhdimisht lidhje me intensitetin maksimal t\u00eb lejuar n\u00eb konfigurimin e sshd. Realizimi i sulmit leht\u00ebsohet dhe k\u00ebrkon m\u00eb pak koh\u00eb n\u00eb sistemet pa ASLR ose n\u00eb distribucione q\u00eb p\u00ebrdorin nj\u00eb OpenSSH t\u00eb modifikuar, n\u00eb t\u00eb cilin \u00ebsht\u00eb \u00e7aktivizuar riparandomizimi ASLR p\u00ebr \u00e7do lidhje. Prototipi funksional i eksploitatit nuk do t\u00eb publikohet publikisht deri n\u00eb eliminimin universitar t\u00eb dob\u00ebsis\u00eb, megjithat\u00eb \u00ebsht\u00eb e disponueshme nj\u00eb p\u00ebrshkrim mjaft i detajuar i natyr\u00ebs s\u00eb dob\u00ebsis\u00eb, q\u00eb e b\u00ebn shfaqjen e eksploitateve t\u00eb jashtme \u00e7\u00ebshtje kohe.<\/p>\n Nuk p\u00ebrjashtohet mund\u00ebsia e realizimit t\u00eb sulmit n\u00eb sistemet 64-bit, por nj\u00eb exploit funksional p\u00ebr k\u00ebto sisteme ende nuk \u00ebsht\u00eb gati. Supozohet se realizimi i sulmit n\u00eb sistemet 64-bit do t\u00eb k\u00ebrkoj\u00eb shum\u00eb m\u00eb tep\u00ebr koh\u00eb, por jo m\u00eb shum\u00eb se nj\u00eb jav\u00eb. OpenSSH n\u00eb OpenBSD nuk \u00ebsht\u00eb i preksh\u00ebm nga problemi, pasi n\u00eb k\u00ebt\u00eb sistem \u00ebsht\u00eb p\u00ebrdorur nj\u00eb mekaniz\u00ebm mbrojtjeje q\u00eb nga viti 2001, duke bllokuar klasat e tilla sulmesh. N\u00eb sistemet e tjera bazuar n\u00eb biblioteka standarde, ndryshe nga Glibc, teorikisht \u00ebsht\u00eb e mundur adaptimi i metod\u00ebs p\u00ebr realizimin e sulmit (n\u00eb Qualys kjo \u00e7\u00ebshtje ende nuk \u00ebsht\u00eb studiuar). <\/p>\n Vulnerabiliteti \u00ebsht\u00eb eliminuar n\u00eb versionin e publikuar sot t\u00eb OpenSSH 9.8 (patch). Mund t\u00eb ndiqni publikimin e p\u00ebrdit\u00ebsimeve t\u00eb pakot n\u00eb distribucione si: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, ROSA, Gentoo, ALT Linux, Arch dhe FreeBSD. Si nj\u00eb zgjidhje p\u00ebr bllokimin e vulnerabilitetit n\u00eb sshd_config, mund t\u00eb vendosni parametrin \u00abLoginGraceTime=0\u00bb, megjithat\u00eb, \u00e7aktivizimi i koh\u00ebs s\u00eb pritjes do t\u00eb leht\u00ebsoj\u00eb iniciat\u00ebn e nj\u00eb sulmi t\u00eb shmangies n\u00eb rastin e nj\u00eb numri t\u00eb madh lidhjesh q\u00eb tejkalojn\u00eb kufijt\u00eb e vendosur p\u00ebrmes parametrin MaxStartups. Vulnerabiliteti erdhi si nj\u00eb rezultat i nj\u00eb ndryshimi regresiv q\u00eb hyri n\u00eb versionin e l\u00ebshuar OpenSSH 8.5 dhe q\u00eb \u00e7on n\u00eb nj\u00eb gjendje garancie n\u00eb kodin e trajtimit t\u00eb sinjaleve n\u00eb sshd. Regresioni \u00e7oi n\u00eb mbylljen e mbrojtjes nga nj\u00eb vulnerabilitet i vjet\u00ebr CVE-2006-5051, q\u00eb shfaqej deri n\u00eb versionin OpenSSH 4.4 (2006) dhe kishte nj\u00eb karakter teoretik. Trajtuesi SIGALRM thirret n\u00eb sshd n\u00eb m\u00ebnyr\u00eb asinkrone, n\u00ebse klienti nuk \u00ebsht\u00eb autentikuar brenda nj\u00eb koh\u00eb t\u00eb kufizuar, e cila p\u00ebrcaktohet nga koha e pritjes p\u00ebr autentikim (LoginGraceTime, n\u00eb m\u00ebnyr\u00eb default 120 sek). Sulmi bazohet n\u00eb faktin se trajtuesi i sinjaleve thirret n\u00eb funksione jo t\u00eb sigurta gjat\u00eb trajtimit asinkron t\u00eb sinjaleve, si syslog(). Funksioni syslog() n\u00eb Glibc nuk \u00ebsht\u00eb i parashikuar p\u00ebr t'u p\u00ebrdorur n\u00eb trajtues t\u00eb sinjaleve q\u00eb ekzekutohen asinkronisht, pasi th\u00ebrritet funksionet malloc() dhe free(). Aktivizimi i sinjalit SIGALRM, i cili nd\u00ebrpritet pun\u00ebn e nj\u00eb kodi t\u00eb caktuar n\u00eb sshd, mund t\u00eb \u00e7oj\u00eb n\u00eb nj\u00eb shkelje t\u00eb gjendjes s\u00eb ekzekutimit, dhe q\u00ebllimi i eksploitat \u00ebsht\u00eb t\u00eb krijoj\u00eb kushte p\u00ebr nd\u00ebrprerjen e kodit t\u00eb nevojsh\u00ebm n\u00eb momentin e duhur t\u00eb ekzekutimit t\u00eb tij. Vulnerabiliteti nuk prekin OpenBSD, sepse atje n\u00eb vend t\u00eb syslog() nga trajtuesi i sinjalit SIGALRM thirret funksioni syslog_r(), i krijuar posa\u00e7\u00ebrisht p\u00ebr ekzekutimin asinkron. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6387) \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f regreSSHion, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSH 8.5 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Glibc. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 Glibc \u0441 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 ASLR (\u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116883","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabiliteti n\u00eb OpenSSH, i cili lejon ekzekutimin n\u00eb distanc\u00eb t\u00eb kodit me t\u00eb drejta root n\u00eb server\u00ebt me Glibc | ProHoster","description":"Kompania Qualys identifikoi nj\u00eb vulnerabilitet kritik (CVE-2024-6387) n\u00eb OpenSSH, q\u00eb lejon ekzekutimin n\u00eb distanc\u00eb t\u00eb kodit me t\u00eb drejta root pa kaluar autentikimin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-openssh-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root-na-serverah-s-glibc","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 Glibc | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6387) \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-openssh-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root-na-serverah-s-glibc","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-01T16:05:44+00:00","article:modified_time":"2024-07-01T16:05:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116883","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:18:19","updated":"2026-02-09 21:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116883","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=116883"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116883\/revisions"}],"predecessor-version":[{"id":160364,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116883\/revisions\/160364"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=116883"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=116883"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=116883"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nNj\u00eb nga shenjat e p\u00ebrpjekjeve p\u00ebr t\u00eb kryer nj\u00eb sulm \u00ebsht\u00eb shfaqja n\u00eb logun e nj\u00eb numri t\u00eb madh t\u00eb regjistrimeve \u00abTimeout before authentication\u00bb.<\/p>\n
\nGjat\u00eb zhvillimit t\u00eb OpenSSH 8.5, p\u00ebr fat t\u00eb keq, nga funksioni sigdie(), i cili thirret drejtp\u00ebrdrejt nga menaxheri SIGALRM, ishte hequr blloku \u00ab#ifdef DO_LOG_SAFE_IN_SIGHAND\u00bb.<\/p>\n
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"