{"id":53889,"date":"2019-12-12T00:00:00","date_gmt":"2019-12-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-v-ld-so-openbsd"},"modified":"2020-02-18T14:01:50","modified_gmt":"2020-02-18T11:01:50","slug":"uyazvimost-v-ld-so-openbsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ld-so-openbsd","title":{"rendered":"Dob\u00ebsia n\u00eb ld.so p\u00ebr OpenBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ngarkues i dinamik\u00eb ld.so<\/a><\/noindex>, i p\u00ebrfshir\u00eb n\u00eb OpenBSD, n\u00ebn disa kushte mund t\u00eb SUID\/SGID<\/a><\/noindex>-aplikacioneve t\u00eb l\u00ebshojn\u00eb ndryshoren e mjedisit LD_LIBRARY_PATH dhe k\u00ebshtu t\u00eb lejojn\u00eb ngarkimin e kodit t\u00eb tret\u00eb n\u00eb kontekstin e procesit q\u00eb ekzekutohet me privilegje t\u00eb rritura. Patch-et p\u00ebr q\u00ebndrim t\u00eb dob\u00ebsis\u00eb jan\u00eb n\u00eb dispozicion p\u00ebr l\u00ebshimet 6.5<\/a><\/noindex> dhe 6.6<\/a><\/noindex>. Patch-et binar\u00eb (syspatch<\/a><\/noindex>) p\u00ebr platformat amd64, i386 dhe arm64 tashm\u00eb jan\u00eb lan\u00e7uar n\u00eb prodhim dhe duhet t\u00eb jen\u00eb n\u00eb dispozicion p\u00ebr ngarkim n\u00eb momentin e publikimit t\u00eb k\u00ebsaj lajm\u00ebrimi.<\/p>\n

Pika e problemit: gjat\u00eb funksionimit, ld.so fillimisht nxjerr nga ambienti vler\u00ebn e variables LD_LIBRARY_PATH, duke e shnd\u00ebrruar at\u00eb n\u00eb nj\u00eb array strings - rrug\u00eb p\u00ebr katalog\u00ebt me funksionin _dl_split_path(). N\u00ebse m\u00eb von\u00eb p\u00ebrcaktohet se procesi aktual \u00ebsht\u00eb aktivizuar si nj\u00eb aplikacion SUID\/SGID, at\u00ebher\u00eb array q\u00eb \u00ebsht\u00eb krijuar dhe vet\u00eb variabla LD_LIBRARY_PATH pastrohen. N\u00eb k\u00ebt\u00eb rast, n\u00ebse gjat\u00eb funksionimit _dl_split_path() has n\u00eb munges\u00eb memorie (e cila \u00ebsht\u00eb e v\u00ebshtir\u00eb p\u00ebr shkak t\u00eb kufizimit t\u00eb qart\u00eb t\u00eb madh\u00ebsis\u00eb s\u00eb variablave t\u00eb ambientit 256 kilobajt, por teori \u00ebsht\u00eb e mundur), at\u00ebher\u00eb variabla _dl_libpath do t\u00eb marr\u00eb vler\u00ebn NULL, dhe verifikimi i m\u00ebvonsh\u00ebm i k\u00ebsaj variab\u00ebl do t\u00eb b\u00ebj\u00eb q\u00eb thirrja e _dl_unsetenv('LD_LIBRARY_PATH') t\u00eb anashkalohet.<\/p>\n

Dob\u00ebsia \u00ebsht\u00eb zbuluar nga specialist\u00ebt Qualys<\/a><\/noindex>, po ashtu si dhe disa probleme t\u00eb zbuluara m\u00eb her\u00ebt.<\/a><\/noindex> Hulumtuesit e siguris\u00eb q\u00eb zbuluan dob\u00ebsin\u00eb theksuan shpejt\u00ebsin\u00eb e zgjidhjes s\u00eb problemit: patch-i u p\u00ebrgatit, dhe p\u00ebrdit\u00ebsimet u publikuan brenda tre or\u00ebve pas marrjes s\u00eb njoftimit nga projekti OpenBSD.<\/p>\n

Shtes\u00eb: Problemit i \u00ebsht\u00eb caktuar numri CVE-2019-19726<\/a><\/noindex>. N\u00eb list\u00ebn e post\u00ebs oss-security \u00ebsht\u00eb b\u00ebr\u00eb n\u00eb nj\u00eb njoftim t\u00eb zyrtarizuar<\/a><\/noindex>, duke p\u00ebrfshir\u00eb nj\u00eb prototip eksploitimi q\u00eb funksionon n\u00eb OpenBSD 6.6, 6.5, 6.2 dhe 6.1 n\u00eb arkitektur\u00ebn
\namd64 dhe i386 (eksploitimi mund t\u00eb adaptohet edhe p\u00ebr arkitektura t\u00eb tjera).
\n Problemi \u00ebsht\u00eb i shfryt\u00ebzuesh\u00ebm n\u00eb instalimin e parazgjedhur dhe lejon nj\u00eb p\u00ebrdorues lokal jo-privilegjuar t\u00eb ekzekutoj\u00eb kod me t\u00eb drejta root p\u00ebrmes n\u00ebnvendosjes s\u00eb bibliotek\u00ebs gjat\u00eb ekzekutimit t\u00eb mjeteve suid chpass ose passwd. P\u00ebr t\u00eb krijuar kushtet e nevojshme p\u00ebr shfryt\u00ebzim t\u00eb munges\u00ebs s\u00eb memorjes p\u00ebrdoret vendosja e kufizimit RLIMIT_DATA p\u00ebrmes setrlimit.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a ld.so, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 OpenBSD, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u0434\u043b\u044f SUID\/SGID-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f LD_LIBRARY_PATH \u0438 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u041f\u0430\u0442\u0447\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u043b\u0438\u0437\u043e\u0432 6.5 \u0438 6.6. \u0411\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 (syspatch) \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c amd64, i386 \u0438 arm64 \u0443\u0436\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53889","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb ld.so OpenBSD | ProHoster","description":"Loader-i dinamik ld.so, q\u00eb \u00ebsht\u00eb pjes\u00eb e OpenBSD, n\u00eb disa kushte mund t\u00eb p\u00ebr","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ld-so-openbsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ld.so OpenBSD | ProHoster","og:description":"\u0414\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a ld.so, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 OpenBSD, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u0434\u043b\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ld-so-openbsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-11T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53889","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 09:10:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:16:27","updated":"2026-01-24 09:10:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53889"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53889\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}