{"id":170699,"date":"2026-05-15T06:24:37","date_gmt":"2026-05-15T04:24:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere"},"modified":"2026-05-15T06:24:37","modified_gmt":"2026-05-15T04:24:37","slug":"uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","title":{"rendered":"Shfryt\u00ebzimi n\u00eb Exim q\u00eb \u00e7on n\u00eb ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb vulnerabilitet kritik (CVE-2026-45185) \u00ebsht\u00eb identifikuar n\u00eb serverin e post\u00ebs Exim, i cili lejon ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb server. Problemi shfaqet q\u00eb nga dega Exim 4.97 kur nd\u00ebrtohet me bibliotek\u00ebn GnuTLS («USE_GNUTLS=yes») dhe \u00ebsht\u00eb zgjidhur n\u00eb l\u00ebshimin Exim 4.99.3. Nd\u00ebrtesat me OpenSSL dhe biblioteka t\u00eb tjera p\u00ebrve\u00e7 GnuTLS nuk preken nga vulnerabiliteti. <\/p>\n

Problemi shkaktohet nga qasja n\u00eb memorin\u00eb e l\u00ebshuar tashm\u00eb (use-after-free) n\u00eb backend-in e GnuTLS dhe mund t\u00eb shfryt\u00ebzohet kur aksesohen server\u00ebt q\u00eb mb\u00ebshtesin zgjerimin «ESMTP CHUNKING» dhe komand\u00ebn BDAT p\u00ebr t\u00eb d\u00ebrguar trupin e mesazhit me porcione n\u00eb vend t\u00eb d\u00ebrgimit t\u00eb nj\u00eb blloku t\u00eb pandar\u00eb p\u00ebrmes komand\u00ebs DATA. D\u00ebmtimi i p\u00ebrmbajtjes s\u00eb memories s\u00eb procesit ndodh kur klienti nxit p\u00ebrfundimin e parakohsh\u00ebm t\u00eb seanc\u00ebs TLS me komand\u00ebn close_notify gjat\u00eb d\u00ebrgimit t\u00eb trupit t\u00eb mesazhit p\u00ebrmes BDAT dhe pastaj d\u00ebrgon nj\u00eb byte tjet\u00ebr n\u00eb t\u00eb nj\u00ebjtin lidhje TCP pa enkriptim n\u00eb form\u00eb t\u00eb hapur. <\/p>\n

Kur komand\u00ebn close_notify t\u00eb marr\u00eb n\u00eb backendin GnuTLS, aktivizohet funksioni nd\u00ebrprer\u00ebs i sesionit TLS, i cili \u00e7liron tampon\u00ebt e lidhur me sesionin. P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb kodin e backend-it, pavar\u00ebsisht \u00e7lirimit t\u00eb tamponit TLS, procesori BDAT vazhdon t\u00eb lexoj\u00eb t\u00eb dh\u00ebna nga rrjedha dhe aktivizon funksionin ungetc(), i cili, kur d\u00ebrgohen t\u00eb dh\u00ebna t\u00eb padhembura m\u00eb pas, \u00e7on n\u00eb shkritjen e nj\u00eb byte n\u00eb tamponin tashm\u00eb t\u00eb \u00e7liruar. Ky byte d\u00ebmton metadata e alokatorit t\u00eb memories n\u00eb heap, e cila \u00ebsht\u00eb p\u00ebrdorur p\u00ebr t\u00eb kryer eksperimente p\u00ebr krijimin e nj\u00eb eksploit q\u00eb ekzekuton kod t\u00eb rast\u00ebsish\u00ebm n\u00eb serveri<\/a>. <\/p>\n

Fillimisht, hulumtuesit gjeneruan nj\u00eb eksploatues gjysm\u00ebfunksional p\u00ebrmes AI, i cili lejonte ekzekutimin e kodit, por funksiononte vet\u00ebm n\u00eb kushte ser\u00eb, n\u00eb sisteme me mbrojtje ASLR dhe PIE t\u00eb \u00e7aktivizuara dhe nj\u00eb version t\u00eb caktuar t\u00eb bibliotek\u00ebs libc. M\u00eb pas, u p\u00ebrpoq\u00ebn t\u00eb krijonin nj\u00eb eksploatues me ndihm\u00ebn e nj\u00eb njeriu, n\u00eb t\u00eb cilin disa v\u00ebshtir\u00ebsi u tejkaluan dhe u arrit nj\u00eb rrjedhje e adres\u00ebs s\u00eb stack-ut, por deri n\u00eb dat\u00ebn e planifikuar t\u00eb zbardhjes s\u00eb informacionit rreth dob\u00ebsis\u00eb, eksploatuesi nuk u finalizua. Sipas mendimit t\u00eb hulumtuesve q\u00eb zbuluan dob\u00ebsin\u00eb, asistuesit AI ende nuk jan\u00eb n\u00eb gjendje t\u00eb krijojn\u00eb eksploatues p\u00ebr produkte t\u00eb komplikuara, por shpresojn\u00eb se n\u00eb t\u00eb ardhmen hulumtues t\u00eb tjer\u00eb do t\u00eb mund t\u00eb p\u00ebrfundojn\u00eb pun\u00ebn e tyre dhe t\u00eb shkruajn\u00eb nj\u00eb eksploatues funksional t\u00eb plot\u00eb. <\/p>\n

Distribucioni i madh i versioneve t\u00eb Exim 4.97+ p\u00ebrdoret n\u00eb Debian 13, Ubuntu 24.04+, SUSE\/openSUSE, Arch Linux, Alpine Linux 3.19+, ALT Linux p11, ROSA, Gentoo, OpenWRT, Fedora, EPEL (exim nuk p\u00ebrfshihet n\u00eb depozitat standarde t\u00eb RHEL) dhe FreeBSD. Nd\u00ebrtimi i Exim me GnuTLS \u00ebsht\u00eb i aplikuesh\u00ebm si standard n\u00eb Debian dhe Ubuntu, nd\u00ebrsa n\u00eb distribucionet e tjera k\u00ebrkon konfirmim. Si nj\u00eb zgjidhje p\u00ebr t\u00eb bllokuar vulnerabilitetin, mund t\u00eb \u00e7aktivizoni zgjerimin CHUNKING duke p\u00ebrdorur cil\u00ebsimin chunking_advertise_hosts n\u00eb skedarin e konfigurimit.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-45185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 Exim 4.97 \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 GnuTLS («USE_GNUTLS=yes») \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Exim 4.99.3. \u0421\u0431\u043e\u0440\u043a\u0438 \u0441 OpenSSL \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 GnuTLS, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free) \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170699","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb Exim q\u00eb \u00e7on n\u00eb ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb server | ProHoster","description":"N\u00eb serverin e post\u00ebs Exim \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet kritik (CVE-2026-45185), i cili lejon ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb server. Problemi shfaqet q\u00eb nga dega Exim 4.97 kur nd\u00ebrtimi kryhet me bibliotek\u00ebn GnuTLS (\"USE_GNUTLS=yes\") dhe \u00ebsht\u00eb zgjidhur n\u00eb versionin Exim 4.99.3. Nd\u00ebrtimet me OpenSSL dhe biblioteka t\u00eb tjera p\u00ebrve\u00e7 GnuTLS nuk preken nga ky vulnerabilitet. Problemi shkaktohet nga referimi n\u00eb memorin\u00eb e l\u00ebshuar (use-after-free) n\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Exim, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster","og:description":"\u0412 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-45185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0442\u043a\u0438 Exim 4.97 \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 GnuTLS ("USE_GNUTLS=yes") \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Exim 4.99.3. \u0421\u0431\u043e\u0440\u043a\u0438 \u0441 OpenSSL \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 GnuTLS, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free) \u0432","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-exim-privodyashhaya-k-udalyonnomu-vypolneniyu-koda-na-servere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-15T04:24:37+00:00","article:modified_time":"2026-05-15T04:24:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=170699"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170699\/revisions"}],"predecessor-version":[{"id":170706,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170699\/revisions\/170706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=170699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=170699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=170699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}