{"id":117137,"date":"2024-07-09T15:43:01","date_gmt":"2024-07-09T13:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda"},"modified":"2024-07-09T15:43:01","modified_gmt":"2024-07-09T13:43:01","slug":"uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","title":{"rendered":"Nj\u00eb dob\u00ebsi n\u00eb paketat e OpenSSH nga RHEL 9, e cila lejon ekzekutimin e kodit n\u00eb distanc\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Gjat\u00eb shqyrtimit t\u00eb dob\u00ebsis\u00eb kritike n\u00eb OpenSSH t\u00eb zbuluar jav\u00ebn e kaluar, u zbulua nj\u00eb dob\u00ebsi tjet\u00ebr e ngjashme (CVE-2024-6409), e cila lejon ekzekutimin e kodit n\u00eb distanc\u00eb pa kaluar autentifikimin. Dob\u00ebsia e re nuk \u00ebsht\u00eb aq e rrezikshme sa e kaluara, pasi shfaqet pas rikthimit t\u00eb privilegjeve n\u00eb procesin e dyt\u00eb t\u00eb nisur nga serveri SSH. Dob\u00ebsia \u00ebsht\u00eb e pranishme n\u00eb paketat openssh nga distribuimi Red Hat Enterprise Linux 9, t\u00eb bazuara n\u00eb l\u00ebshimin e publikim n\u00eb 2021, OpenSSH 8.7. Problemi prek gjithashtu paketat p\u00ebr Fedora Linux 36 dhe 37, t\u00eb bazuara n\u00eb l\u00ebshimet OpenSSH 8.7 dhe 8.8. <\/p>\n
N\u00eb thelb, kjo dob\u00ebsi \u00ebsht\u00eb e ngjashme me problemin e m\u00ebparsh\u00ebm dhe \u00ebsht\u00eb gjithashtu e shkaktuar nga nj\u00eb gjendje garash n\u00eb menaxherin e nd\u00ebrprerjeve SIGALRM, q\u00eb ndodh si rezultat i ekzekutimit t\u00eb funksioneve q\u00eb nuk jan\u00eb t\u00eb p\u00ebrshtatshme p\u00ebr thirrje n\u00eb m\u00ebnyr\u00eb asinkrone nga menaxher\u00ebt e sinjalit. Menaxheri aktivizohet kur ndodh ngrirja, e cila \u00ebsht\u00eb e p\u00ebrcaktuar n\u00ebp\u00ebrmjet parametrin LoginGraceTime, dhe nd\u00ebrpret ekzekutimin aktual t\u00eb kodit. P\u00ebrdorimi i funksioneve n\u00eb menaxher\u00ebt e nd\u00ebrprerjeve t\u00eb cilat nuk jan\u00eb t\u00eb p\u00ebrgatitura p\u00ebr ekzekutim asinkron, dhe q\u00eb p\u00ebrfshijn\u00eb alokimin dinamik t\u00eb memories, t\u00eb tilla si syslog(), mund t\u00eb \u00e7oj\u00eb n\u00eb d\u00ebmtimin e strukturave t\u00eb brendshme malloc kur ndodh SIGALRM gjat\u00eb ekzekutimit t\u00eb nj\u00eb kodi t\u00eb caktuar. <\/p>\n
Dob\u00ebsia e re ve\u00e7ohet nga fakti se gjendja garash ndodh si rezultat i thirrjes n\u00eb menaxherin e sinjalit grace_alarm_handler() t\u00eb funksionit cleanup_exit(). N\u00eb baz\u00ebn kryesore t\u00eb kodit t\u00eb OpenSSH, ky funksion mund t\u00eb p\u00ebrdoret n\u00eb kodin q\u00eb ekzekutohet asinkronisht, por n\u00eb paketat p\u00ebr RHEL 9 dhe Fedora \u00ebsht\u00eb aplikuar nj\u00eb patch shtes\u00eb, i cili shton n\u00eb cleanup_exit() thirrjen e nj\u00eb funksioni p\u00ebr gjenerimin e ngjarjeve t\u00eb auditit, t\u00eb dizajnuar p\u00ebr p\u00ebrdorim n\u00eb menaxher\u00ebt e sinjalit. <\/p>\n
Ky ky\u00e7 ishte p\u00ebrdorur n\u00eb RHEL 9 dhe disqet e derivateve n\u00eb pakot q\u00eb bazohet n\u00eb OpenSSH 8.7p1. N\u00eb versionet e fundit t\u00eb Fedora, problemi nuk shfaqet, pasi q\u00eb nga Fedora 38 distribucioni kaloi n\u00eb nj\u00eb version m\u00eb t\u00eb ri t\u00eb OpenSSH pa ndryshuar cleanup_exit(). Ndryshe nga dob\u00ebsia e kaluar, nj\u00eb metod\u00eb parandaluese q\u00eb bazohet n\u00eb p\u00ebrdorimin e opsionit «-e» n\u00eb sshd, i cili \u00e7on n\u00eb \u00e7aktivizimin e regjistrimit t\u00eb log\u00ebve p\u00ebrmes syslog, nuk funksionon p\u00ebr t\u00eb bllokuar problemin e ri. Megjithat\u00eb, p\u00ebr t\u00eb bllokuar dob\u00ebsin\u00eb n\u00eb sshd_config, mund t\u00eb vendoset parametri «LoginGraceTime=0». \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"