{"id":170807,"date":"2026-05-16T06:24:35","date_gmt":"2026-05-16T04:24:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/qemutiny-uyazvimosti-v-qemu-pozvolyayushhie-poluchit-dostup-k-host-okruzheniyu-iz-gostevoj-sistemy"},"modified":"2026-05-16T06:24:35","modified_gmt":"2026-05-16T04:24:35","slug":"qemutiny-uyazvimosti-v-qemu-pozvolyayushhie-poluchit-dostup-k-host-okruzheniyu-iz-gostevoj-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/qemutiny-uyazvimosti-v-qemu-pozvolyayushhie-poluchit-dostup-k-host-okruzheniyu-iz-gostevoj-sistemy","title":{"rendered":"QEMUtiny \u2014 vulnerabilitete n\u00eb QEMU, q\u00eb lejojn\u00eb qasjen n\u00eb ambientin e host-it nga sistemi i mysafir\u00ebve.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Hulumtuesit, t\u00eb cil\u00ebt s\u00eb fundmi zbuluan nj\u00eb dob\u00ebsi Fragnesia n\u00eb b\u00ebrtham\u00ebn Linux, publikuan informacion n\u00eb lidhje me dob\u00ebsit\u00eb n\u00eb QEMU, t\u00eb cilat lejojn\u00eb qasjen root n\u00eb mjedisin host nga sistemi mysafir. Problemit i \u00ebsht\u00eb dh\u00ebn\u00eb emri kodor QEMUtiny, por identifikuesi CVE ende nuk \u00ebsht\u00eb caktuar. \u00cbsht\u00eb p\u00ebrgatitur nj\u00eb eksploit, i cili p\u00ebrfshin dy dob\u00ebsi n\u00eb kodin e simulimit t\u00eb pajisjes CXL (Compute Express Link). <\/p>\n
T\u00eb dyja vulnerabilitetet jan\u00eb t\u00eb pranishme n\u00eb kodin cxl-mailbox-utils.c. Vulnerabiliteti i par\u00eb shfaqet q\u00eb nga publikimi i QEMU 7.1.0 dhe \u00e7on n\u00eb leximin e memories jasht\u00eb bufin t\u00eb alokuar, p\u00ebr shkak se funksioni cmd_logs_get_log() e interpreton gabimisht offset-in e k\u00ebrkuar t\u00eb log CEL si indeks n\u00eb nj\u00eb array, nd\u00ebrsa ai \u00ebsht\u00eb p\u00ebrcaktuar n\u00eb byte. Vulnerabiliteti i dyt\u00eb shfaqet q\u00eb nga QEMU 11.0.0 dhe shkakton mbingarkes\u00eb t\u00eb buffers n\u00eb funksionin cmd_features_set_feature() p\u00ebr shkak t\u00eb p\u00ebrpunimit t\u00eb offset-it mbi struktura gjat\u00eb shkrimit t\u00eb atributeve pa verifikuar se vlera e llogaritur \"offset + bytes_to_copy\" bllokohet brenda madh\u00ebsis\u00eb s\u00eb struktur\u00ebs s\u00eb zgjedhur. <\/p>\n
N\u00eb fakt, sulmi \u00ebsht\u00eb i mundur vet\u00ebm n\u00eb deg\u00ebn e fundit QEMU 11.0.0. Asgj\u00eb nuk \u00ebsht\u00eb raportuar p\u00ebr korrigjimin, \u00ebsht\u00eb th\u00ebn\u00eb vet\u00ebm se p\u00ebrpara shp\u00ebrthimit t\u00eb dob\u00ebsis\u00eb, informacioni p\u00ebr t\u00eb ishte d\u00ebrguar zhvilluesve t\u00eb QEMU, t\u00eb cil\u00ebt p\u00ebrgjigj\u00ebn se mb\u00ebshtetje p\u00ebr pajisjen CXL n\u00eb QEMU \u00ebsht\u00eb implementuar jo p\u00ebr t'u p\u00ebrdorur n\u00eb virtualizim. <\/p>\n
Eksploit \u00ebsht\u00eb verifikuar me baz\u00ebn e kodit QEMU nga 11 maji me komitin e fundit 5e61afe. Funksionimi i eksploitit \u00ebsht\u00eb i lidhur me organizimin e strukturave n\u00eb memories e \u00e7do nd\u00ebrtese specifike t\u00eb QEMU dhe libc sistemike, por sipas hulumtuesve, duke shfryt\u00ebzuar dob\u00ebsin\u00eb p\u00ebr skanimin e memories q\u00eb \u00e7on n\u00eb leximin nga krahu i jasht\u00ebm t\u00eb bufferit, \u00ebsht\u00eb e mundur t\u00eb krijohet nj\u00eb eksploit universial, i cili funksionon me versione t\u00eb ndryshme t\u00eb QEMU. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"