N\u00eb korrigjimin e l\u00ebshuar n\u00eb fillim t\u00eb shtatorit, u identifikua nj\u00eb gabim logjik n\u00eb vulnerabilitetin e bibliotek\u00ebs libnv, p\u00ebr shkak t\u00eb t\u00eb cilit vulnerabiliteti nuk u eliminua si\u00e7 duhet dhe sistemi mbeti i ekspozuar ndaj sulmeve. Biblioteka libnv zhvillohet nga projekti FreeBSD dhe p\u00ebrdoret n\u00eb b\u00ebrtham\u00eb dhe n\u00eb aplikacione nga sistemi baz\u00eb p\u00ebr p\u00ebrpunimin e listave n\u00eb formatin \u00e7el\u00ebs\/vler\u00eb dhe p\u00ebr organizimin e transmetimit t\u00eb t\u00eb dh\u00ebnave gjat\u00eb nd\u00ebrveprimit mes proceseve. Kjo bibliotek\u00eb \u00ebsht\u00eb e bazuar n\u00eb algoritmin nvlist, i p\u00ebrdorur n\u00eb projektin OpenZFS, por n\u00eb FreeBSD \u00ebsht\u00eb krijuar nj\u00eb implementim i ve\u00e7ant\u00eb, k\u00ebshtu q\u00eb vulnerabiliteti nuk ndikon n\u00eb OpenZFS. <\/p>\n
Dob\u00ebsia e shkaktuar nga teprica e numrave t\u00eb plot\u00eb, q\u00eb \u00e7on n\u00eb alokimin e nj\u00eb buffer-i me madh\u00ebsi m\u00eb t\u00eb vog\u00ebl se blloku i t\u00eb dh\u00ebnave q\u00eb shkruhet n\u00eb buffer. Ky gabim mund t\u00eb shfryt\u00ebzohet p\u00ebr t\u00eb rritur privilegjet duke ripar\u00eb zona memorjeje n\u00eb b\u00ebrthama dhe procese sistemike, p\u00ebr shembull, libnv p\u00ebrdoret n\u00eb libcasper gjat\u00eb nd\u00ebrveprimit midis codit me privilegje dhe atij pa privilegje. Rregullimi i duhur i dob\u00ebsis\u00eb (CVE-2024-45287) \u00ebsht\u00eb propozuar n\u00eb p\u00ebrdit\u00ebsimet 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 dhe 13.3-RELEASE-p7, si dhe n\u00eb form\u00ebn e nj\u00eb patch-i. <\/p>\n
N\u00eb FreeBSD \u00ebsht\u00eb zgjidhur gjithashtu nj\u00eb vulnerabilitet (CVE-2024-41721) n\u00eb hipervizorin bhyve, i cili potencialisht mund t\u00eb lejoj\u00eb ekzekutimin e kodit n\u00eb nj\u00eb proces q\u00eb ekzekutohet n\u00eb sistemin host (zakonisht me t\u00eb drejta root, por i izoluar nga sandbox-i i bazuar n\u00eb Capsicum), gjat\u00eb manipulimeve brenda sistemit mysafir. Vulnerabiliteti ndodhet n\u00eb kodin p\u00ebr simulimin e kontrollorit USB XHCI dhe shkaktohet nga nj\u00eb kontroll i pamjaftuesh\u00ebm i kufijve t\u00eb buffers, gj\u00eb q\u00eb mund t\u00eb \u00e7oj\u00eb n\u00eb leximin e t\u00eb dh\u00ebnave nga nj\u00eb zon\u00eb jasht\u00eb buffers, si dhe potencialisht n\u00eb mund\u00ebsin\u00eb e shkrimit n\u00eb nj\u00eb zon\u00eb t\u00eb rast\u00ebsishme t\u00eb memorjes s\u00eb procesit. N\u00ebse \u00ebsht\u00eb e mundur t\u00eb nisen procese me privilegje n\u00eb sistemin mysafir, nj\u00eb sulm mund t\u00eb realizohet. Vulnerabiliteti \u00ebsht\u00eb zgjidhur n\u00eb azhurnimet FreeBSD 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 dhe 13.3-RELEASE-p7. <\/p>\n
P\u00ebr m\u00eb tep\u00ebr, mund t\u00eb p\u00ebrmendet publikimi i prototip\u00ebve funksional\u00eb t\u00eb eksploit\u00ebve dhe p\u00ebrshkrimeve t\u00eb metodave t\u00eb shfryt\u00ebzimit p\u00ebr vulnerabilitetet e identifikuara m\u00eb par\u00eb n\u00eb kernelin Linux CVE-2024-26808 dhe CVE-2024-1085. Problemet jan\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimet e kernelit 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3 dhe 6.8, dhe tashm\u00eb jan\u00eb korrigjuar n\u00eb distribucionet kryesore (Debian, Ubuntu, RHEL, SUSE, Fedora). Vulnerabilitetet shkaktohen nga qasja n\u00eb nj\u00eb hap\u00ebsir\u00eb t\u00eb liruar memorjeje n\u00eb funksionet nft_chain_filter dhe nft_setelem_catchall_deactivate n\u00eb n\u00ebn-sistemin netfilter dhe lejojn\u00eb ekzekutimin e kodit me t\u00eb drejta root. P\u00ebr t\u00eb kryer nj\u00eb sulm, k\u00ebrkohet qasje n\u00eb nftables, e cila mund t\u00eb merret me t\u00eb drejtat CAP_NET_ADMIN n\u00eb \u00e7do hap\u00ebsir\u00eb identifikuesish (user namespace) ose hap\u00ebsir\u00eb rrjeti (network namespace), q\u00eb ofrohen, p\u00ebr shembull, n\u00eb konteiner\u00ebt e izoluar. <\/p>\n
Eksploit\u00ebt jan\u00eb p\u00ebrgatitur nga pjes\u00ebmarr\u00ebsit e iniciativ\u00ebs KernelCTF (Kernel Capture the Flag), p\u00ebrmes s\u00eb cil\u00ebs kompania Google ofron shp\u00ebrblime p\u00ebr identifikimin e dob\u00ebsive n\u00eb b\u00ebrtham\u00ebn Linux. Fillimisht, problemet u konsideruan si disa nga shum\u00eb dob\u00ebsi t\u00eb mundshme n\u00eb b\u00ebrtham\u00eb \u2014 p\u00ebr shembull, n\u00eb p\u00ebrdit\u00ebsimin e qershorit t\u00eb paket\u00ebs s\u00eb b\u00ebrtham\u00ebs 5.10 n\u00eb Debian, p\u00ebrve\u00e7 CVE-2024-26808 u korrigjuan edhe 345 (!) dob\u00ebsi t\u00eb tjera t\u00eb mundshme. \u00c7do jav\u00eb identifikohen disa dhjet\u00ebra dob\u00ebsi t\u00eb reja n\u00eb b\u00ebrtham\u00eb, t\u00eb cilat m\u00eb par\u00eb nuk ishin identifikuar si probleme sigurie (p\u00ebr shembull, jav\u00ebn e kaluar u sh\u00ebnua 68 dob\u00ebsi). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"