{"id":32892,"date":"2019-10-31T21:49:35","date_gmt":"2019-10-31T18:49:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa\/"},"modified":"2019-10-31T21:49:35","modified_gmt":"2019-10-31T18:49:35","slug":"uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","title":{"rendered":"Nj\u00eb vulnerabilitet n\u00eb b\u00ebrtham\u00ebn Linux, q\u00eb lejon thyerjen p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb pakete UDP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb kernelin Linux u identifikua<\/a><\/noindex> vulneraibiliteti (CVE-2019-11683<\/a><\/noindex>), e cila lejon t\u00eb shkaktoj\u00eb ndalim t\u00eb sh\u00ebrbimit p\u00ebrmes d\u00ebrgimit t\u00eb paketimeve UDP t\u00eb ve\u00e7anta (packet-of-death). Problemi \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim n\u00eb p\u00ebrpunuesin udp_gro_receive_segment (net\/ipv4\/udp_offload.c) me implementimin e teknologjis\u00eb GRO (Generic Receive Offload) dhe mund t\u00eb shkaktoj\u00eb d\u00ebmtim t\u00eb p\u00ebrmbajtjes s\u00eb hap\u00ebsirave t\u00eb memories s\u00eb kernelit gjat\u00eb p\u00ebrpunimit t\u00eb paketimeve UDP me mbushje t\u00eb zero (payload bosh).<\/p>\n

Problemi prek vet\u00ebm kernelin 5.0<\/a><\/noindex>, pasi mb\u00ebshtetja GRO p\u00ebr sokete UDP ishte \u00ebsht\u00eb realizuar<\/a><\/noindex> n\u00eb n\u00ebntor t\u00eb vitit t\u00eb kaluar dhe ka arritur t\u00eb p\u00ebrfshihet vet\u00ebm n\u00eb l\u00ebshimin e fundit stabil t\u00eb kernelit. Teknologjia GRO lejon t\u00eb p\u00ebrshpejtoj\u00eb p\u00ebrpunimin e nj\u00eb numri t\u00eb madh paketesh hyr\u00ebse, p\u00ebr shkak t\u00eb agregimit t\u00eb disa paketimeve n\u00eb blloqe m\u00eb t\u00eb m\u00ebdha, q\u00eb nuk k\u00ebrkojn\u00eb p\u00ebrpunim t\u00eb ve\u00e7ant\u00eb p\u00ebr \u00e7do paket\u00eb.
\nP\u00ebr TCP, problemi nuk shfaqet, pasi p\u00ebr k\u00ebt\u00eb protokoll nuk mb\u00ebshtetet agregimi i paketimeve pa payload.<\/p>\n

Vulnerabiliteti \u00ebsht\u00eb rregulluar deri tani vet\u00ebm n\u00eb form\u00ebn e patch<\/a><\/noindex>, riparimi akoma nuk \u00ebsht\u00eb publikuar (n\u00eb p\u00ebrdit\u00ebsimin e djesh\u00ebm 5.0.11 riparimi nuk u p\u00ebrfshi<\/a><\/noindex>). Nga distribucioni kernel, 5.0 ka arritur t\u00eb p\u00ebrfshihet n\u00eb Fedora 30<\/a><\/noindex>, Ubuntu 19.04<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, Gentoo<\/a><\/noindex> dhe distribucionet e tjera q\u00eb p\u00ebrdit\u00ebsohen vazhdimisht. Debian<\/a><\/noindex>, Ubuntu 18.10 dhe m\u00eb t\u00eb ul\u00ebt<\/a><\/noindex>, RHEL\/CentOS<\/a><\/noindex> dhe SUSE\/openSUSE<\/a><\/noindex> problemi nuk e prek.<\/p>\n

Problemi u gjet si rezultat i p\u00ebrdorimit<\/a><\/noindex> t\u00eb sistemit t\u00eb automatizuar t\u00eb testimit fuzzing t\u00eb krijuar nga Google syzbot<\/a><\/noindex> dhe analizuesit KASAN<\/a><\/noindex> (KernelAddressSanitizer), i orientuar n\u00eb identifikimin e gabimeve n\u00eb menaxhimin e memories dhe rasteve t\u00eb qasjes jokorrekte n\u00eb memory, si\u00e7 jan\u00eb qasjet n\u00eb hap\u00ebsirat e memories t\u00eb \u00e7liruara dhe vendosja e kodit n\u00eb hap\u00ebsira memorie q\u00eb nuk jan\u00eb t\u00eb destinuara p\u00ebr manovrime t\u00eb tilla. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11683), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 (packet-of-death). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 udp_gro_receive_segment (net\/ipv4\/udp_offload.c) \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 GRO (Generic Receive \u041effload) \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c (\u043f\u0443\u0441\u0442\u043e\u0439 payload). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u044f\u0434\u0440\u043e 5.0, \u0442\u0430\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32892","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb kernelin Linux, i cili lejon t\u00eb shkaktoj\u00eb rr\u00ebzim p\u00ebrmes d\u00ebrgimit t\u00eb paketes UDP | ProHoster","description":"N\u00eb kernelin Linux \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2019-11683), i cili lejon t\u00eb shkaktoj\u00eb ndalim t\u00eb sh\u00ebrbimit p\u00ebrmes d\u00ebrgimit t\u00eb paketimeve UDP t\u00eb ve\u00e7anta (packet-of-death). Problemi \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim n\u00eb p\u00ebrpunuesin udp_gro_receive_segment (net\/ipv4\/udp_offload.c) me implementimin e teknologjis\u00eb GRO (Generic Receive Offload) dhe mund t\u00eb shkaktoj\u00eb d\u00ebmtim t\u00eb p\u00ebrmbajtjes s\u00eb hap\u00ebsirave t\u00eb memories s\u00eb kernelit gjat\u00eb p\u00ebrpunimit t\u00eb paketimeve UDP me mbushje t\u00eb zero (payload bosh). Problemi prek vet\u00ebm kernelin 5.0, ashtu","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 UDP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11683), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 (packet-of-death). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 udp_gro_receive_segment (net\/ipv4\/udp_offload.c) \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 GRO (Generic Receive \u041effload) \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c (\u043f\u0443\u0441\u0442\u043e\u0439 payload). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u044f\u0434\u0440\u043e 5.0, \u0442\u0430\u043a","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:49:35+00:00","article:modified_time":"2019-10-31T18:49:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 13:01:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:50:25","updated":"2026-01-21 13:01:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/32892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=32892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/32892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=32892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=32892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=32892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}