{"id":125200,"date":"2025-05-20T03:05:16","date_gmt":"2025-05-20T01:05:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen"},"modified":"2025-05-20T03:05:16","modified_gmt":"2025-05-20T01:05:16","slug":"uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","title":{"rendered":"Dob\u00ebsi n\u00eb Glibc q\u00eb prek skedar\u00ebt suid t\u00eb nd\u00ebrtuar statikisht me dlopen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb bibliotek\u00ebn standarde t\u00eb C-s\u00eb Glibc \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2025-4802), i cili lejon ekzekutimin e kodeve me privilegje t\u00eb p\u00ebrdoruesve t\u00eb tjer\u00eb, t\u00eb caktuara gjat\u00eb shkarkimit t\u00eb aplikacioneve me flamurin suid. Rreziku i k\u00ebtij problemi minimizohet nga kushtet n\u00ebn t\u00eb cilat ai shfaqet \u2014 zhvilluesit e Glibc nuk kan\u00eb arritur t\u00eb gjejn\u00eb asnj\u00eb program suid p\u00ebr t\u00eb cilin ishte e aplikueshme vulnerabiliteti i zbuluar. Megjithat\u00eb, nuk p\u00ebrjashtohet ende q\u00eb mund t\u00eb p\u00ebrdoren programe suid t\u00eb personalizuara, q\u00eb p\u00ebrmbushin kushtet p\u00ebr realizimin e sulmit. <\/p>\n

Shfryt\u00ebzimi i vulnerabilitetit \u00ebsht\u00eb i mundur vet\u00ebm p\u00ebr programet suid q\u00eb jan\u00eb nd\u00ebrtuar statikisht dhe q\u00eb th\u00ebrrasin funksionin dlopen. P\u00ebrve\u00e7 programeve q\u00eb th\u00ebrrasin drejt\u00eb dlopen, vulnerabiliteti prek edhe programet n\u00eb t\u00eb cilat funksioni dlopen ekzekutohet n\u00eb m\u00ebnyr\u00eb indirekte, si pasoj\u00eb e thirrjes s\u00eb setlocale ose funksioneve NSS si getaddrinfo. <\/p>\n

Problemi shkaktohet nga p\u00ebrpunimi i variables s\u00eb mjedisit LD_LIBRARY_PATH n\u00eb kontekstin e aplikacioneve suid n\u00eb rastin e thirrjes s\u00eb dlopen nga programet e nd\u00ebrtuara statikisht (shk\u00ebputja e LD_LIBRARY_PATH ndodhte vet\u00ebm gjat\u00eb nd\u00ebrtimit dinamik). Duke vendosur nj\u00eb rrug\u00eb n\u00eb LD_LIBRARY_PATH, sulmuesi mund t\u00eb organizoj\u00eb ngarkimin e nj\u00eb biblioteke t\u00eb rrem\u00eb nga katalogu i tij. Vulnerabiliteti shfaqet q\u00eb nga versioni Glibc 2.27 (shkurt 2018) dhe \u00ebsht\u00eb eliminuar n\u00eb versionin Glibc 2.39 (shkurt 2024).
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Glibc \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-4802), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c suid. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u043e\u0434\u044f\u0442 \u043d\u0430 \u043d\u0435\u0442 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043d\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f — \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Glibc \u043d\u0430 \u0441\u043c\u043e\u0433\u043b\u0438 \u043d\u0430\u0439\u0442\u0438 \u043d\u0435 \u043e\u0434\u043d\u043e\u0439 suid-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0430 \u0431\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432 \u043e\u0431\u0438\u0445\u043e\u0434\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125200","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb Glibc, q\u00eb preku skedar\u00ebt suid t\u00eb nd\u00ebrtuar statikisht me dlopen | ProHoster","description":"N\u00eb bibliotek\u00ebn standarde t\u00eb C-s\u00eb Glibc \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2025-4802), i cili lejon ekzekutimin e kodit me privilegjet e nj\u00eb p\u00ebrdoruesi tjet\u00ebr, t\u00eb cilat caktohen gjat\u00eb nisjes s\u00eb aplikacioneve me flamurin suid.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Glibc, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 suid-\u0444\u0430\u0439\u043b\u044b \u0441 dlopen | ProHoster","og:description":"\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Glibc \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-4802), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c suid.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-20T01:05:16+00:00","article:modified_time":"2025-05-20T01:05:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125200","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 12:53:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:53:19","updated":"2026-01-23 12:53:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/125200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=125200"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/125200\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=125200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=125200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=125200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}