{"id":170807,"date":"2026-05-16T06:24:35","date_gmt":"2026-05-16T04:24:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/qemutiny-uyazvimosti-v-qemu-pozvolyayushhie-poluchit-dostup-k-host-okruzheniyu-iz-gostevoj-sistemy"},"modified":"2026-05-16T06:24:35","modified_gmt":"2026-05-16T04:24:35","slug":"qemutiny-uyazvimosti-v-qemu-pozvolyayushhie-poluchit-dostup-k-host-okruzheniyu-iz-gostevoj-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/qemutiny-uyazvimosti-v-qemu-pozvolyayushhie-poluchit-dostup-k-host-okruzheniyu-iz-gostevoj-sistemy","title":{"rendered":"QEMUtiny \u2014 vulnerabilitete n\u00eb QEMU q\u00eb lejojn\u00eb qasje n\u00eb mjedisin host nga sistemi i mysafir\u00ebve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Hulumtuesit, t\u00eb cil\u00ebt pak dit\u00eb m\u00eb par\u00eb zbuluan nj\u00eb vulnerabilitet Fragnesia n\u00eb b\u00ebrtham\u00ebn Linux, publikuan informacione mbi vulnerabilitetet n\u00eb QEMU, q\u00eb lejojn\u00eb akses root n\u00eb mjedisin host nga sistemi i ftuar. Problemi ka marr\u00eb emrin kodor QEMUtiny, por identifikuesi CVE nuk \u00ebsht\u00eb akoma caktuar. \u00cbsht\u00eb p\u00ebrgatitur nj\u00eb eksploit q\u00eb p\u00ebrfshin dy vulnerabilitete n\u00eb kodin e simulimit t\u00eb pajisjes CXL (Compute Express Link). <\/p>\n
T\u00eb dyja dob\u00ebsit\u00eb jan\u00eb t\u00eb pranishme n\u00eb kodin cxl-mailbox-utils.c. Dob\u00ebsia e par\u00eb shfaqet q\u00eb nga l\u00ebshimi QEMU 7.1.0 dhe \u00e7on n\u00eb leximin e memories nga zona jasht\u00eb tamponit t\u00eb alokuar, p\u00ebr shkak se funksioni cmd_logs_get_log() interpreton gabimisht offsetin e k\u00ebrkuar t\u00eb CEL-logut si indeks n\u00eb array, kur n\u00eb t\u00eb v\u00ebrtet\u00eb \u00ebsht\u00eb caktuar n\u00eb bytes. Dob\u00ebsia e dyt\u00eb shfaqet q\u00eb nga QEMU 11.0.0 dhe \u00e7on n\u00eb mbipopullim t\u00eb tamponit n\u00eb funksionin cmd_features_set_feature() p\u00ebr shkak t\u00eb p\u00ebrpunimit t\u00eb offsetit n\u00eb struktura gjat\u00eb shkrimit t\u00eb atributeve pa kontrolluar q\u00eb vlera e llogaritur \"offset + bytes_to_copy\" d\u00ebrgohet brenda madh\u00ebsis\u00eb s\u00eb struktur\u00ebs p\u00ebrkat\u00ebse. <\/p>\n
N\u00eb t\u00eb v\u00ebrtet\u00eb, sulmi \u00ebsht\u00eb i mundur vet\u00ebm n\u00eb deg\u00ebn e fundit t\u00eb QEMU 11.0.0. P\u00ebr rregullimin e saj ende nuk \u00ebsht\u00eb raportuar asgj\u00eb, vet\u00ebm se para zbardhjes s\u00eb dob\u00ebsis\u00eb, informacioni p\u00ebr t\u00eb \u00ebsht\u00eb d\u00ebrguar zhvilluesve t\u00eb QEMU, t\u00eb cil\u00ebt p\u00ebrgjigj\u00ebn se mb\u00ebshtetja p\u00ebr pajisjen CXL n\u00eb QEMU \u00ebsht\u00eb implementuar jo p\u00ebr p\u00ebrdorim gjat\u00eb virtualizimit. <\/p>\n
Eksploit \u00ebsht\u00eb verifikuar me baz\u00ebn e kodit t\u00eb QEMU nga 11 maji me komitin e fundit 5e61afe. Funksionimi i eksploitit \u00ebsht\u00eb i lidhur me dislokimin e strukturave n\u00eb memorien e \u00e7do nd\u00ebrtese t\u00eb caktuar t\u00eb QEMU dhe libc t\u00eb sistemit, por sipas studiuesve, duke p\u00ebrdorur nj\u00eb dob\u00ebsi q\u00eb \u00e7on n\u00eb leximin nga nj\u00eb zon\u00eb jasht\u00eb tamponit p\u00ebr skanimin e memories, \u00ebsht\u00eb e mundur t\u00eb krijohet nj\u00eb eksploit universale q\u00eb funksionon me versione t\u00eb ndryshme t\u00eb QEMU. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"