{"id":170428,"date":"2026-05-05T18:24:32","date_gmt":"2026-05-05T16:24:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-nix-i-lix-pozvolyayushhie-podnyat-privilegii-v-sisteme"},"modified":"2026-05-05T18:24:32","modified_gmt":"2026-05-05T16:24:32","slug":"uyazvimosti-v-nix-i-lix-pozvolyayushhie-podnyat-privilegii-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-nix-i-lix-pozvolyayushhie-podnyat-privilegii-v-sisteme","title":{"rendered":"Dob\u00ebsit\u00eb n\u00eb Nix dhe Lix, q\u00eb lejojn\u00eb shp\u00ebrblimin e privilegjeve n\u00eb sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb menaxher\u00ebt e paketave Nix dhe Lix \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet q\u00eb lejon ekzekutimin e kodit me t\u00eb drejtat e procesit n\u00eb sfond, i cili n\u00eb NixOS dhe instalimet multi-p\u00ebrdorues ekzekutohet n\u00ebn p\u00ebrdoruesin root. Problemi (CVE nuk \u00ebsht\u00eb caktuar) shfaqet n\u00eb procesin n\u00eb sfond nix-daemon, i p\u00ebrdorur p\u00ebr t\u00eb organizuar aksesin e p\u00ebrdoruesve pa privilegje n\u00eb operacionet e nd\u00ebrtimit dhe n\u00eb depozit\u00ebn e paketave. <\/p>\n
Vulnerabiliteti lind p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb kufizimit t\u00eb p\u00ebrpunimit rekurziv t\u00eb direktoreve n\u00eb kodin p\u00ebr analiz\u00ebn e arkivave NAR (Nix Archive), gj\u00eb q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb iniciuar ezaurimin e stack-ut t\u00eb kooperuar dhe p\u00ebr t\u00eb mbivendosur p\u00ebrmbajtjen e kup\u00ebs (heap), e vendosur pas stack-ut pa faqe mbrojt\u00ebse t\u00eb memories. Problemi mund t\u00eb shfryt\u00ebzohet nga \u00e7do p\u00ebrdorues q\u00eb \u00ebsht\u00eb n\u00eb gjendje t\u00eb krijoj\u00eb lidhje me nix-daemon. N\u00eb m\u00ebnyr\u00eb t\u00eb parazgjedhur, t\u00eb gjith\u00eb p\u00ebrdoruesit kan\u00eb nj\u00eb mund\u00ebsi t\u00eb till\u00eb, duke lejuar ngritjen e privilegjeve t\u00eb tyre deri n\u00eb p\u00ebrdoruesin root n\u00eb instalimet multi-p\u00ebrdorues Nix. <\/p>\n
Problemi \u00ebsht\u00eb zgjidhur me kufizimin e nivelit t\u00eb rekursivitetit n\u00eb 64 direktore t\u00eb nd\u00ebrlidhura, duke shtuar faqe mbrojt\u00ebse t\u00eb memories midis stack-ut dhe kup\u00ebs dhe duke realizuar kontrolle shtes\u00eb t\u00eb lidhjeve simbolike n\u00eb NAR. N\u00eb Nix, vulnerabiliteti shfaqet q\u00eb nga versioni 2.24.4 dhe \u00ebsht\u00eb rregulluar n\u00eb l\u00ebshimet 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, 2.28.7. N\u00eb Lix, vulnerabiliteti doli n\u00eb l\u00ebshimin 2.93.0 dhe \u00ebsht\u00eb rregulluar n\u00eb p\u00ebrdit\u00ebsimet 2.93.4, 2.94.2 dhe 2.95.2. Menaxheri i paketave Guix nuk \u00ebsht\u00eb prekur nga ky vulnerabilitet. <\/p>\n
P\u00ebrve\u00e7 k\u00ebsaj, n\u00eb p\u00ebrdit\u00ebsimet e publikuara, Nix ka eliminuar nj\u00eb tjet\u00ebr vulnerabilitet (CVE mungon), i cili ka nj\u00eb nivel t\u00eb mes\u00ebm rreziku (4.3 nga 10). Problemi shfaqet q\u00eb nga l\u00ebshimi i Nix 2.24.7 dhe lejon regjistrimin e skedar\u00ebve jasht\u00eb katalogut t\u00eb rr\u00ebnj\u00ebs, n\u00eb t\u00eb cilin arkivi shkarkohet. Vulnerabiliteti shfryt\u00ebzohet p\u00ebrmes krijimit t\u00eb elementeve me rrug\u00eb skedari absolute n\u00eb skedar\u00ebt tar. Kur arkivat e tilla shkarkohen me komand\u00ebn «nix-prefetch-url —unpack» ose «nix store prefetch-file —unpack», skedar\u00ebt me rrug\u00eb absolute nxirren ashtu si\u00e7 jan\u00eb, pa u transformuar n\u00eb nj\u00eb rrug\u00eb relative. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"