{"id":181665,"date":"2026-05-22T18:24:54","date_gmt":"2026-05-22T16:24:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost"},"modified":"2026-05-22T18:24:54","modified_gmt":"2026-05-22T16:24:54","slug":"vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vo-freebsd-ustraneno-4-uyazvimosti-pozvolyayushhie-podnyat-privilegii-i-odna-udalyonnaya-root-uyazvimost","title":{"rendered":"N\u00eb FreeBSD jan\u00eb eliminuar 4 vulnerabilitete q\u00eb lejojn\u00eb rritjen e privilegjeve dhe nj\u00eb vulnerabilitet t\u00eb larg\u00ebt root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb FreeBSD jan\u00eb eliminuar 7 vulnerabilitete, nga t\u00eb cilat nj\u00eb lejon ekzekutimin e kodit n\u00eb distanc\u00eb me p\u00ebrcaktime root, dhe kat\u00ebr mund\u00ebsojn\u00eb rritjen e privilegjeve n\u00eb sistem. Vulnerabilitetet jan\u00eb korrigjuar n\u00eb p\u00ebrdit\u00ebsimet FreeBSD 15.0-RELEASE-p9, 14.4-RELEASE-p5 dhe 14.3-RELEASE-p14. <\/p>\n
\n
CVE-2026-45255 — n\u00eb instaluesin bsdinstall dhe konfiguruesin bsdconfig mungonte shp\u00ebrthimi i karaktereve speciale n\u00eb skriptin shell, i cili tregon p\u00ebrdoruesit nj\u00eb list\u00eb t\u00eb rrjeteve t\u00eb disponueshme p\u00ebr t'u lidhur, t\u00eb p\u00ebrcaktuara si rezultat i skanimit. Nj\u00eb sulmues mund t\u00eb krijoj\u00eb nj\u00eb pik\u00eb qasje false dhe t\u00eb p\u00ebrcaktoj\u00eb nj\u00eb identifikues rrjeti (SSID) t\u00eb ve\u00e7anta, q\u00eb p\u00ebrmban komanda ekzekutiv n\u00eb shell (p.sh., «test`id`»). Kur p\u00ebrdoruesi aktivizon funksionin p\u00ebr t\u00eb k\u00ebrkuar rrjete wireless, komandat e shell t\u00eb vendosura nga sulmuesi do t\u00eb ekzekutohen n\u00eb sistemin e p\u00ebrdoruesit me t\u00eb drejtat root (zgjedhja ose lidhja me rrjetin e sulmuesit nuk \u00ebsht\u00eb e nevojshme, mjafton t\u00eb inicioni skanimin e rrjeteve).\n
CVE-2026-45250 \u2014 mbushja e stack-ut n\u00eb thirrjen e sistemit setcred, duke lejuar p\u00ebrdoruesin lokal pa privilegje t\u00eb arrij\u00eb ekzekutimin e kodit t\u00eb tij n\u00eb nivelin e b\u00ebrtham\u00ebs. Problemi shkaktohet nga kontrolli i gabuar i madh\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave q\u00eb vendosen n\u00eb buffer \u2014 n\u00eb vend t\u00eb 'sizeof(gid_t)' ishte caktuar 'sizeof(*groups)'. P\u00ebr t\u00eb thirrur thirrjen e sistemit setcred nevojiten privilegje t\u00eb ngritura, por vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm n\u00eb kodin e kopjimit fillestar n\u00eb nj\u00eb buffer t\u00eb ve\u00e7ant\u00eb t\u00eb list\u00ebs s\u00eb grupeve t\u00eb d\u00ebrguara nga p\u00ebrdoruesi, q\u00eb ekzekutohet para kontrollit t\u00eb privilegjeve.\n
CVE-2026-45251 \u2014 referimi n\u00eb memorie tashm\u00eb t\u00eb \u00e7liruar (use-after-free) n\u00eb thirrjet sistemore select dhe poll, q\u00eb ndodh n\u00eb rastin e mbylljes s\u00eb deskriptorit t\u00eb dosjes t\u00eb d\u00ebrguar p\u00ebrpara \u00e7lirimit t\u00eb nj\u00eb teli q\u00eb pret deskriptor\u00ebt e dosjeve nga thirrjet sistemore select dhe poll. Shfryt\u00ebzimi i suksessh\u00ebm i lejon nj\u00eb p\u00ebrdoruesi pa privilegje t\u00eb ekzekutoj\u00eb kod n\u00eb nivelin e b\u00ebrtham\u00ebs.\n
CVE-2026-45253 \u2014 mungesa e verifikimit t\u00eb duhur t\u00eb parametrave t\u00eb d\u00ebrguar n\u00eb thirrjen sistemore ptrace gjat\u00eb kryerjes s\u00eb operacionit PT_SC_REMOTE. Kjo dob\u00ebsi lejon nj\u00eb p\u00ebrdorues t\u00eb pap\u00ebrgjegjsh\u00ebm t\u00eb organizoj\u00eb ekzekutimin e kodit t\u00eb rast\u00ebsish\u00ebm n\u00eb b\u00ebrtham\u00eb, edhe n\u00ebse procesi i targetuar n\u00eb debug nuk ka privilegje t\u00eb ve\u00e7anta.\n
CVE-2026-39461 \u2014 mbushja e stack-ut n\u00eb bibliotek\u00ebn libcasper, e cila ofron aplikacioneve t\u00eb izoluar p\u00ebrmes mekanizmit Capsicum qasje n\u00eb nd\u00ebrfaqet sistemore. Nd\u00ebrsa bashk\u00ebvepron me procesorin p\u00ebrmes soketeve UNIX, biblioteka p\u00ebrdor thirrjen sistemore select p\u00ebr t\u00eb pritur t\u00eb dh\u00ebna, por nuk verifikon p\u00ebrputhshm\u00ebrin\u00eb e deshkriptorit t\u00eb soketit me limitin e vlefshm\u00ebris\u00eb n\u00eb select, FD_SETSIZE (1024). Nj\u00eb sulmues mund t\u00eb inicoj\u00eb alokimin e deshkriptor\u00ebve t\u00eb m\u00ebdhenj t\u00eb skedar\u00ebve n\u00eb nj\u00eb aplikacion t\u00eb bazuar n\u00eb libcasper dhe t\u00eb shkaktoj\u00eb mbushjen e stack-ut. Me manipulime t\u00eb till\u00eb me programet setuid root, mund t\u00eb arrihet ekzekutimi i kodit me t\u00eb drejta root.\n
CVE-2026-45254 \u2014 mund\u00ebsia p\u00ebr t\u00eb anashkaluar limitet cap_net n\u00eb nj\u00eb aplikacion p\u00ebr shkak se nj\u00eb \u00e7el\u00ebs q\u00eb mungon perceptohet si 'lejo \u00e7do' n\u00eb vend t\u00eb bllokimit.\n
CVE-2026-45252 \u2014 nj\u00eb mbushje buffer-i n\u00eb modulin fusefs gjat\u00eb p\u00ebrpunimit t\u00eb mesazheve FUSE_LISTXATTR, e cila lejon t\u00eb lexoni deri n\u00eb 253 byte nga zona e memories s\u00eb b\u00ebrtham\u00ebs jasht\u00eb buffer-it ose t\u00eb shkruani deri n\u00eb 250 byte n\u00eb nj\u00eb zon\u00eb t\u00eb pap\u00ebrdorur t\u00eb heap-it.\n<\/ul>\n