N\u00eb procesin prapa FreeBSD rtsold dhe utilitarin rtsol \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2025-14558) q\u00eb lejon ekzekutimin e kodeve n\u00eb distanc\u00eb me t\u00eb drejta root p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb pakete t\u00eb formatuar posa\u00e7\u00ebrisht me nj\u00eb njoftim IPv6-ruteri. Mesazhet RA (Router Advertisement), p\u00ebrmes t\u00eb cilave shfryt\u00ebzohet vulnerabiliteti, nuk rrug\u00ebtohen dhe duhet t\u00eb hidhen posht\u00eb nga router-at. P\u00ebr t\u00eb kryer nj\u00eb sulm, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb e d\u00ebrgimit t\u00eb nj\u00eb pakete t\u00eb formatuar posa\u00e7\u00ebrisht nga nj\u00eb sistem q\u00eb ndodhet n\u00eb t\u00eb nj\u00ebjtin segment rrjetor me hostin vulnerab\u00ebl. <\/p>\n
Procesi prapa rtsold p\u00ebrdoret n\u00eb hoste p\u00ebr konfigurimin automatike t\u00eb lidhjes p\u00ebrmes IPv6 duke p\u00ebrdorur mekanizmin SLAAC (StateLess Address AutoConfiguration). Hosti d\u00ebrgon nj\u00eb mesazh ICMPv6 RS (Router Solicitation) n\u00eb modalitetin multicast dhe pret t\u00eb marr\u00eb mesazhe RA (Router Advertisement) p\u00ebrgjigjeje nga router-at, t\u00eb cil\u00ebt p\u00ebrmbajn\u00eb informacione mbi prefiksat rrjetor\u00eb dhe parametrat e konfigurimit. Utilitari rtsol realizon nj\u00eb funksionalitet t\u00eb ngjash\u00ebm pa e nisur procesin prapa. <\/p>\n
Vulnerabiliteti shkaktohet nga fakti se rtsold kalon list\u00ebn e specifikuar n\u00eb mesazhin RA \"domain search\" n\u00eb utilitarin resolvconf pa verifikimin e sakt\u00ebsis\u00eb dhe pa skanimin e karaktereve speciale. Utilitari resolvconf \u00ebsht\u00eb nj\u00eb skript shell q\u00eb nuk kontrollon t\u00eb dh\u00ebnat q\u00eb pranohen. P\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetin mjafton t\u00eb d\u00ebrgoni nj\u00eb paket\u00eb RA me emrin e domenit<\/a>, q\u00eb p\u00ebrmban karaktere speciale, p\u00ebr shembull \"test`id`test.\" Vulnerabiliteti \u00ebsht\u00eb rregulluar n\u00eb p\u00ebrdit\u00ebsimet FreeBSD 15.0-RELEASE-p1, 14.3-RELEASE-p7, 13.5-RELEASE-p8. <\/p>\n P\u00ebr m\u00eb tep\u00ebr, n\u00eb p\u00ebrdit\u00ebsimet FreeBSD 14.3-RELEASE-p7 dhe 13.5-RELEASE-p8 (\u00e7elja 15.x nuk preket) \u00ebsht\u00eb eliminuar vulnerabiliteti (CVE-2025-14769) n\u00eb filtrin e paketave ipfw, i cili lejon t\u00eb shkaktohet nj\u00eb nd\u00ebrprerje sh\u00ebrbimi p\u00ebrmes d\u00ebrgimit t\u00eb paketimeve t\u00eb dizajnuara posa\u00e7\u00ebrisht. Vulnerabiliteti shfaqet vet\u00ebm kur p\u00ebrdoret direktiva \"tcp-setmss\" n\u00eb rregullat ipfw. Problemi shkaktohet nga fakti q\u00eb p\u00ebrpunuesi tcp-setmss, n\u00ebn rrethana t\u00eb caktuara, mund t\u00eb liroj\u00eb kujtes\u00eb, n\u00eb t\u00eb cil\u00ebn ruhen t\u00eb dh\u00ebnat e marra t\u00eb paket\u00ebs, dhe t\u00eb kthej\u00eb nj\u00eb gabim. Gabimi i p\u00ebrmendur injorohej nga motorin e p\u00ebrpunimit t\u00eb rregullave, gj\u00eb q\u00eb b\u00ebn q\u00eb rregulli pasues t\u00eb mund\u00ebsoj\u00eb kalimin e paket\u00ebs, buferri me t\u00eb dh\u00ebnat e s\u00eb cil\u00ebs tashm\u00eb \u00ebsht\u00eb liruar, \u00e7ka \u00e7on n\u00eb dereferencimin e nj\u00eb treguesi zero. \u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e FreeBSD \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 rtsold \u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 rtsol \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-14558), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 c \u0430\u043d\u043e\u043d\u0441\u043e\u043c IPv6-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430. RA-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f (Router Advertisement), \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0442\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-152349","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia e distanc\u00ebs root n\u00eb menaxherin e konfiguarit automatik IPv6 n\u00eb FreeBSD | ProHoster","description":"N\u00eb procesin n\u00eb prapavij\u00eb rtsold dhe mjetin rtsol t\u00eb p\u00ebrdorur n\u00eb FreeBSD \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi (CVE-2025-14558), e cila lejon ekzekutimin n\u00eb distanc\u00eb t\u00eb kodit me t\u00eb drejtat root p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb pakete t\u00eb formuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u0430\u0432\u0442\u043e\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 IPv6 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e FreeBSD \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 rtsold \u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 rtsol \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-14558), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-22T15:12:34+00:00","article:modified_time":"2025-12-22T15:12:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"152349","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:13:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 13:45:19","updated":"2026-03-05 11:13:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/152349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=152349"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/152349\/revisions"}],"predecessor-version":[{"id":163270,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/152349\/revisions\/163270"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=152349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=152349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=152349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"