N\u00eb p\u00ebrmir\u00ebsimin e publikuar n\u00eb fillim t\u00eb shtatorit, u zbulua nj\u00eb gabim logjik n\u00eb bibliotek\u00ebn libnv, i cili b\u00ebri q\u00eb dob\u00ebsia t\u00eb mos korrektohej si\u00e7 duhet dhe sistemi t\u00eb mbetej i ekspozuar ndaj sulmeve. Biblioteka libnv \u00ebsht\u00eb zhvilluar nga projekti FreeBSD dhe p\u00ebrdoret n\u00eb b\u00ebrtham\u00eb dhe n\u00eb aplikacione nga sistemi baz\u00eb p\u00ebr p\u00ebrpunimin e listave n\u00eb formatin \u00e7el\u00ebs\/faqe dhe p\u00ebr organizimin e transferit t\u00eb t\u00eb dh\u00ebnave gjat\u00eb nd\u00ebrveprimit midis proceseve. Biblioteka bazohet n\u00eb algoritmin nvlist, i aplikuar n\u00eb projektin OpenZFS, por n\u00eb FreeBSD \u00ebsht\u00eb krijuar nj\u00eb realizim i vet, prandaj dob\u00ebsia nuk prek OpenZFS. <\/p>\n
Dob\u00ebsia shkaktohet nga nj\u00eb mbingarkes\u00eb t\u00eb numrave t\u00eb plot\u00eb, q\u00eb \u00e7on n\u00eb alokimin e nj\u00eb buffer-i m\u00eb t\u00eb vog\u00ebl se blloku i t\u00eb dh\u00ebnave q\u00eb shkruhet n\u00eb t\u00eb. Gabimi i b\u00ebr\u00eb mund t\u00eb p\u00ebrdoret potencialisht p\u00ebr t\u00eb rritur privilegjet e p\u00ebrdoruesit p\u00ebrmes ri-shkruarjes s\u00eb hap\u00ebsirave t\u00eb memories n\u00eb b\u00ebrtham\u00eb dhe proceset sistemike, p\u00ebr shembull, libnv p\u00ebrdoret n\u00eb libcasper gjat\u00eb nd\u00ebrveprimit midis kodit me privilegje dhe atij pa privilegje. Korrigjimi korrekt i dob\u00ebsis\u00eb (CVE-2024-45287) \u00ebsht\u00eb propozuar n\u00eb p\u00ebrdit\u00ebsimet 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 dhe 13.3-RELEASE-p7, si dhe n\u00eb form\u00ebn e nj\u00eb patch-i. <\/p>\n
N\u00eb FreeBSD gjithashtu \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi (CVE-2024-41721) n\u00eb hiper-vizorin bhyve, e cila potencialisht lejon ekzekutimin e kodit n\u00eb nj\u00eb proces q\u00eb ekzekutohet n\u00eb an\u00ebn e sistemit t\u00eb hostit (zakonisht me t\u00eb drejta root, por e izoluar nga sandbox-i i bazuar n\u00eb Capsicum), gjat\u00eb manipulimeve brenda sistemit t\u00eb mysafir\u00ebve. Dob\u00ebsia \u00ebsht\u00eb e pranishme n\u00eb kodin p\u00ebr emulimin e kontrolluesit USB XHCI dhe shkaktohet nga nj\u00eb kontroll i pamjaftuesh\u00ebm i kufijve t\u00eb buffer-it, q\u00eb mund t\u00eb \u00e7oj\u00eb n\u00eb leximin e t\u00eb dh\u00ebnave nga nj\u00eb zon\u00eb jasht\u00eb buffer-it, si dhe potencialisht n\u00eb mund\u00ebsin\u00eb e shkruarjes n\u00eb nj\u00eb zon\u00eb t\u00eb rastesishme t\u00eb memories s\u00eb procesit. Sulmi mund t\u00eb realizohet n\u00ebse lejohet ekzekutimi i proceseve me privilegje n\u00eb sistemin e mysafirit. Dob\u00ebsia \u00ebsht\u00eb eliminuar n\u00eb p\u00ebrdit\u00ebsimet FreeBSD 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 dhe 13.3-RELEASE-p7. <\/p>\n
P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb theksohet publikimi i prototipeve funksional\u00eb t\u00eb eksploit\u00ebve dhe p\u00ebrshkrimeve t\u00eb metodave t\u00eb shfryt\u00ebzimit p\u00ebr dob\u00ebsit\u00eb e identifikuara m\u00eb par\u00eb n\u00eb b\u00ebrtham\u00ebn Linux CVE-2024-26808 dhe CVE-2024-1085. Problemet jan\u00eb rregulluar n\u00eb p\u00ebrdit\u00ebsimet e b\u00ebrtham\u00ebs 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3 dhe 6.8, dhe jan\u00eb tashm\u00eb korrigjuar n\u00eb shp\u00ebrndarjet kryesore (Debian, Ubuntu, RHEL, SUSE, Fedora). Dob\u00ebsit\u00eb shkaktohen nga qasja n\u00eb nj\u00eb zon\u00eb memorjeje t\u00eb \u00e7liruar n\u00eb funksionet nft_chain_filter dhe nft_setelem_catchall_deactivate n\u00eb n\u00ebn-sistemin netfilter dhe lejojn\u00eb ekzekutimin e kodit me t\u00eb drejtat root. P\u00ebr t\u00eb kryer nj\u00eb sulm k\u00ebrkohet qasje n\u00eb nftables, e cila mund t\u00eb fitohet duke pasur t\u00eb drejtat CAP_NET_ADMIN n\u00eb \u00e7do hap\u00ebsir\u00eb identiteti t\u00eb p\u00ebrdoruesve (user namespace) ose hap\u00ebsir\u00ebn rrjet (network namespace), t\u00eb ofruara, p\u00ebr shembull, n\u00eb konteiner\u00eb t\u00eb izoluar. <\/p>\n
Eksploit\u00ebt jan\u00eb p\u00ebrgatitur nga pjes\u00ebmarr\u00ebsit e iniciativ\u00ebs KernelCTF (Kernel Capture the Flag), n\u00eb kuad\u00ebr t\u00eb s\u00eb cil\u00ebs kompania Google ofron shp\u00ebrblime p\u00ebr zbardhjen e dob\u00ebsive n\u00eb b\u00ebrtham\u00ebn Linux. Fillimisht, problemet u trajtuan si disa nga shum\u00eb dob\u00ebsit\u00eb potenciale t\u00eb kaluara n\u00eb b\u00ebrtham\u00eb \u2014 p\u00ebr shembull, n\u00eb p\u00ebrdit\u00ebsimin e qershorit t\u00eb paket\u00ebs me b\u00ebrtham\u00ebn 5.10 n\u00eb Debian, p\u00ebrve\u00e7 CVE-2024-26808, u rregulluan edhe 345 (!) dob\u00ebsi potenciale. \u00c7do jav\u00eb, n\u00eb b\u00ebrtham\u00eb zbulohet disa dhjet\u00ebra dob\u00ebsi t\u00eb reja, t\u00eb cilat m\u00eb par\u00eb nuk ishin identifikuar si probleme sigurie (p\u00ebr shembull, jav\u00ebn e kaluar u sh\u00ebnua 68 dob\u00ebsi). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"