{"id":152349,"date":"2025-12-22T17:12:34","date_gmt":"2025-12-22T15:12:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd"},"modified":"2025-12-22T17:12:34","modified_gmt":"2025-12-22T15:12:34","slug":"udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","title":{"rendered":"Caktohet Vulnerabiliteti root n\u00eb trajtuesin e vet\u00ebkonfigurimit IPv6 n\u00eb FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb procesin e p\u00ebrdorur n\u00eb FreeBSD n\u00eb procesin e prapm\u00eb rtsold dhe mjetin rtsol \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2025-14558), e cila lejon ekzekutimin e kodit n\u00eb distanc\u00eb me t\u00eb drejta root p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb pakete t\u00eb p\u00ebrgatitur posa\u00e7\u00ebrisht me nj\u00eb njoftim IPv6-ruteri. Mesazhet RA (Router Advertisement), t\u00eb cilat shfryt\u00ebzojn\u00eb k\u00ebt\u00eb dob\u00ebsi, nuk rregullohen dhe duhet t\u00eb p\u00ebrjashtohen nga ruteri. P\u00ebr t\u00eb kryer sulmin, nj\u00eb sulmues duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb d\u00ebrguar nj\u00eb paket\u00eb t\u00eb p\u00ebrgatitur posa\u00e7\u00ebrisht nga nj\u00eb sistem q\u00eb ndodhet n\u00eb t\u00eb nj\u00ebjtin segment rrjeti me hostin e prekur. <\/p>\n

Procesi i prapm\u00eb rtsold p\u00ebrdoret n\u00eb hoste p\u00ebr konfigurimin automatik t\u00eb lidhjes p\u00ebrmes IPv6 duke p\u00ebrdorur mekanizmin SLAAC (StateLess Address AutoConfiguration). Hosti d\u00ebrgon nj\u00eb mesazh ICMPv6 RS (Router Solicitation) n\u00eb modalitetin multicast dhe pret p\u00ebrgjigje RA (Router Advertisement) nga ruteri, t\u00eb cilat p\u00ebrmbajn\u00eb informacion rreth prefikseve rrjet dhe parametrave t\u00eb konfigurimit. Mjeti rtsol realizon funksionalitet t\u00eb ngjash\u00ebm pa filluar procesin n\u00eb prapavij\u00eb. <\/p>\n

Vulnerabiliteti shkaktohet nga fakti q\u00eb rtsold d\u00ebrgon list\u00ebn 'domain search' t\u00eb specifikuar n\u00eb mesazhin RA n\u00eb utilitarin resolvconf pa verifikimin e sakt\u00ebsis\u00eb dhe pa shtes\u00ebn e simboleve speciale. Utilitari resolvconf \u00ebsht\u00eb nj\u00eb skript shell q\u00eb nuk verifikon t\u00eb dh\u00ebnat e hyrjes. P\u00ebr t\u00eb shfryt\u00ebzuar k\u00ebt\u00eb vulnerabilitet, mjafton t\u00eb d\u00ebrgoni nj\u00eb paket\u00eb RA me emrin domenit<\/a>, duke p\u00ebrfshir\u00eb simbole speciale, p\u00ebr shembull 'test`id`test. Vulnerabiliteti \u00ebsht\u00eb zgjidhur n\u00eb azhurnimet e FreeBSD 15.0-RELEASE-p1, 14.3-RELEASE-p7, 13.5-RELEASE-p8. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, n\u00eb azhurnimet e FreeBSD 14.3-RELEASE-p7 dhe 13.5-RELEASE-p8 (dega 15.x nuk preket nga problemi) \u00ebsht\u00eb zgjidhur vulnerabiliteti (CVE-2025-14769) n\u00eb filtrin e paketave ipfw, i cili lejon t\u00eb shkaktohet nj\u00eb munges\u00eb sh\u00ebrbimi p\u00ebrmes d\u00ebrgimit t\u00eb paketimeve t\u00eb strukturuara posa\u00e7\u00ebrisht. Vulnerabiliteti shfaqet vet\u00ebm kur p\u00ebrdoret direktiva 'tcp-setmss' n\u00eb rregullat ipfw. Problemi shkaktohet nga fakti q\u00eb procesori tcp-setmss n\u00ebn rrethana t\u00eb caktuara mund t\u00eb liroj\u00eb memorien ku ruhen t\u00eb dh\u00ebnat e marr\u00eb nga paketa dhe t\u00eb kthej\u00eb nj\u00eb gabim. Gabimi i p\u00ebrmendur injorohet nga motori p\u00ebrpunues i rregullave, duke shkaktuar q\u00eb rregulli pasues t\u00eb lejoj\u00eb kalimin e paket\u00ebs, buffer-i me t\u00eb dh\u00ebnat e s\u00eb cil\u00ebs \u00ebsht\u00eb l\u00ebshuar tashm\u00eb, gj\u00eb q\u00eb \u00e7on n\u00eb dereferencimin e nj\u00eb treguesi zero.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e FreeBSD \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 rtsold \u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 rtsol \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-14558), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 c \u0430\u043d\u043e\u043d\u0441\u043e\u043c IPv6-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430. RA-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f (Router Advertisement), \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0442\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-152349","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia e distanc\u00ebs root n\u00eb trajtuesin e vet\u00ebkonfigurimit IPv6 n\u00eb FreeBSD | ProHoster","description":"N\u00eb procesin e p\u00ebrdorur n\u00eb FreeBSD, n\u00eb backgroundin e rtsold dhe utilitarin rtsol \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2025-14558) q\u00eb lejon kryerjen e kodit n\u00eb distanc\u00eb me t\u00eb drejta root p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb pakete t\u00eb formatuar posa\u00e7\u00ebrisht me nj\u00eb njoftim IPv6 p\u00ebr rrug\u00ebzuesin. Mesazhet RA (Router Advertisement), p\u00ebrmes t\u00eb cilave eksploatohet dob\u00ebsia, nuk rrug\u00ebzohen dhe duhet t\u00eb hidhensh nga rrug\u00ebzuesit. P\u00ebr t\u00eb kryer nj\u00eb sulm, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb d\u00ebrgoj\u00eb nj\u00eb paket\u00eb t\u00eb formatuar posa\u00e7\u00ebrisht nga nj\u00eb sistem,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u0430\u0432\u0442\u043e\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 IPv6 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e FreeBSD \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 rtsold \u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 rtsol \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-14558), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 c \u0430\u043d\u043e\u043d\u0441\u043e\u043c IPv6-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430. RA-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f (Router Advertisement), \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0442\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u044b,","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-22T15:12:34+00:00","article:modified_time":"2025-12-22T15:12:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"152349","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:13:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 13:45:19","updated":"2026-03-05 11:13:33"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/152349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=152349"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/152349\/revisions"}],"predecessor-version":[{"id":163270,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/152349\/revisions\/163270"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=152349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=152349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=152349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}