{"id":123470,"date":"2025-04-11T15:05:06","date_gmt":"2025-04-11T13:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares"},"modified":"2025-04-11T15:05:06","modified_gmt":"2025-04-11T13:05:06","slug":"uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-setevom-konfiguratore-connman-i-dns-biblioteke-c-ares","title":{"rendered":"Dob\u00ebsit\u00eb n\u00eb konfiguratorin e rrjetit ConnMan dhe bibliotek\u00ebn DNS c-ares","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb konfiguruesin e rrjetit ConnMan, q\u00eb ka gjetur p\u00ebrdorim n\u00eb sistemet e integruara Linux, platformat automobilistike dhe pajisjet e internetit t\u00eb gj\u00ebrave, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2025-32743), i cili mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e kodit gjat\u00eb p\u00ebrpunimit t\u00eb p\u00ebrgjigjeve t\u00eb formuluara posa\u00e7\u00ebrisht nga serveri DNS. Problemi ka marr\u00eb nj\u00eb nivel kritik rreziku (9.1 nga 10). Vulnerabiliteti shfaqet deri n\u00eb versionin aktual ConnMan 1.44 dhe ende nuk \u00ebsht\u00eb zgjidhur. <\/p>\n
Vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm n\u00eb implementimin e DNS proxy dhe shkaktohet nga fakti q\u00eb gjat\u00eb p\u00ebrpunimit t\u00eb p\u00ebrgjigjes DNS me bitin TC (Truncated), vargu \"lookup\" n\u00eb funksionin ns_resolv mbetet i zbraz\u00ebt ose me vler\u00eb NULL. N\u00eb vazhdim, kjo \u00e7on n\u00eb mbushjen e buffer-it p\u00ebr shkak t\u00eb llogaritjes s\u00eb gabuar t\u00eb madh\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave q\u00eb kopjohen me an\u00eb t\u00eb funksionit memcpy. <\/p>\n
Gjithashtu, mund t\u00eb vihet n\u00eb pah nj\u00eb vulnerabilitet (CVE-2025-31498) n\u00eb bibliotek\u00ebn c-ares, e cila \u00ebsht\u00eb projektuar p\u00ebr d\u00ebrgimin e k\u00ebrkesave DNS n\u00eb m\u00ebnyr\u00eb asinkrone. Vulnerabiliteti shkaktohet nga referimi n\u00eb nj\u00eb zon\u00eb t\u00eb kujtes\u00ebs q\u00eb \u00ebsht\u00eb liruar tashm\u00eb (use-after-free) n\u00eb funksionin e p\u00ebrpunimit t\u00eb p\u00ebrgjigjeve t\u00eb serverit DNS. <\/p>\n
Problemi ndodh sepse, n\u00eb rast t\u00eb nd\u00ebrprerjes s\u00eb lidhjes, mund t\u00eb ket\u00eb nj\u00eb situat\u00eb kur deshifruesi i lidhjes \u00ebsht\u00eb liruar, por funksioni read_answers() mendon se \u00ebsht\u00eb ende i disponuesh\u00ebm duke p\u00ebrjashtuar k\u00ebrkesa t\u00eb tjera nga radhitja. Shfryt\u00ebzimi i vulnerabilitetit \u00ebsht\u00eb i v\u00ebshtir\u00eb sepse sulmuesi duhet t\u00eb kontrolloj\u00eb serverin DNS p\u00ebrmes t\u00eb cilit b\u00ebhet rezolucioni dhe t\u00eb krijoj\u00eb kushte p\u00ebr ta b\u00ebr\u00eb q\u00eb thirrjet send()\/write() t\u00eb d\u00ebshtojn\u00eb, gj\u00eb q\u00eb \u00ebsht\u00eb teorikisht e mundur duke bombarduar viktim\u00ebn me paketa ICMP UNREACHABLE. <\/p>\n
Vulnerabiliteti mund t\u00eb p\u00ebrdoret p\u00ebr sulme ndaj projekteve q\u00eb p\u00ebrdorin bibliotek\u00ebn c-ares. P\u00ebr shembull, c-ares p\u00ebrdoret n\u00eb Node.js, sssd, apt-cacher-ng, wireshark, pgbouncer, shadowsocks, zephyr, sysdig dhe frr. Problemi fillon q\u00eb nga versioni 1.32.3 (korrik 2024) dhe \u00ebsht\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimin e c-ares 1.34.5. Mund t\u00eb ndiqni progresin e zgjidhjes s\u00eb vulnerabilitetit n\u00eb paketat p\u00ebrkat\u00ebse n\u00eb faqet e m\u00ebposhtme: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"