{"id":53889,"date":"2019-12-12T00:00:00","date_gmt":"2019-12-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-v-ld-so-openbsd"},"modified":"2020-02-18T14:01:50","modified_gmt":"2020-02-18T11:01:50","slug":"uyazvimost-v-ld-so-openbsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ld-so-openbsd","title":{"rendered":"Vulnerabiliteti n\u00eb ld.so OpenBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ngarkuesi dinamik ld.so<\/a><\/noindex>, pjes\u00eb e OpenBSD, mund n\u00ebn kushte t\u00eb caktuara t\u00eb SUID\/SGID<\/a><\/noindex>-aplikacioneve t\u00eb l\u00ebr\u00eb variablin e mjedisit LD_LIBRARY_PATH dhe n\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb t\u00eb lejoj\u00eb ngarkimin e kodit t\u00eb jasht\u00ebm n\u00eb kontekstin e procesit q\u00eb ekzekutohet me privilegje t\u00eb ngritura. Patch-\u00ebt p\u00ebr rregullimin e dob\u00ebsis\u00eb jan\u00eb n\u00eb dispozicion p\u00ebr versionet 6.5<\/a><\/noindex> dhe 6.6<\/a><\/noindex>. Patch-\u00ebt binar\u00eb (syspatch<\/a><\/noindex>) p\u00ebr platformat amd64, i386 dhe arm64 p\u00ebrfundimisht jan\u00eb lan\u00e7uar n\u00eb prodhim dhe duhet t\u00eb jen\u00eb t\u00eb disponuesh\u00ebm p\u00ebr ngarkim n\u00eb momentin e publikimit t\u00eb k\u00ebsaj lajmi.<\/p>\n

The essence of the problem: during its operation, ld.so first retrieves the value of the LD_LIBRARY_PATH variable from the environment, then uses the _dl_split_path() function to convert it into an array of strings \u2014 paths to directories. If it later turns out that the current process is running as a SUID\/SGID application, then the created array and, in fact, the LD_LIBRARY_PATH variable are cleared. Meanwhile, if during the operation of _dl_split_path() it encounters a memory shortage (which is difficult due to the explicit limitation on the size of environment variables to 256 KB, but theoretically possible), the _dl_libpath variable will receive a NULL value, and the subsequent check of this variable's value will cause the _dl_unsetenv(\"LD_LIBRARY_PATH\") call to be skipped.<\/p>\n

Dob\u00ebsia u zbulua nga specialist\u00ebt Qualys<\/a><\/noindex>, ashtu si dhe disa probleme t\u00eb tjera q\u00eb u zbuluan m\u00eb par\u00eb.<\/a><\/noindex> Hulumtuesit e siguris\u00eb q\u00eb zbuluan dob\u00ebsin\u00eb theksuan shpejt\u00ebsin\u00eb e zgjidhjes s\u00eb problemit: patch-\u00ebt u p\u00ebrgatit\u00ebn dhe p\u00ebrdit\u00ebsimet u l\u00ebshuan brenda tre or\u00ebve pas marrjes s\u00eb njoftimit nga projekti OpenBSD.<\/p>\n

Shtes\u00eb: Problemit i \u00ebsht\u00eb caktuar numri CVE-2019-19726<\/a><\/noindex>. Nj\u00eb njoftim zyrtar u b\u00eb n\u00eb list\u00ebn e shp\u00ebrndarjes oss-security , q\u00eb p\u00ebrfshin nj\u00eb prototip exploiti, q\u00eb funksionon n\u00eb OpenBSD 6.6, 6.5, 6.2 dhe 6.1 n\u00eb arkitekturat<\/a><\/noindex>amd64 dhe i386 (exploiti mund t\u00eb adaptohet edhe p\u00ebr arkitektura t\u00eb tjera).
\nProblemi \u00ebsht\u00eb i shfryt\u00ebzuesh\u00ebm n\u00eb instalimin e parazgjedhur dhe lejon nj\u00eb p\u00ebrdorues lokal t\u00eb pakualifikuar t\u00eb ekzekutoj\u00eb kod me t\u00eb drejtat root p\u00ebrmes z\u00ebvend\u00ebsimit t\u00eb bibliotek\u00ebs gjat\u00eb nisjes s\u00eb mjeteve suid chpass ose passwd. P\u00ebr t\u00eb krijuar kushtet e nevojshme p\u00ebr shfryt\u00ebzim, p\u00ebrdorimi i munges\u00ebs s\u00eb memorjes \u00ebsht\u00eb n\u00ebp\u00ebrmjet vendosjes s\u00eb kufizimit RLIMIT_DATA p\u00ebrmes setrlimit.
\n Ngarkuesi dinamik ld.so, pjes\u00eb e OpenBSD, n\u00ebn kushte t\u00eb caktuara mund t\u00eb<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a ld.so, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 OpenBSD, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u0434\u043b\u044f SUID\/SGID-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f LD_LIBRARY_PATH \u0438 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u041f\u0430\u0442\u0447\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u043b\u0438\u0437\u043e\u0432 6.5 \u0438 6.6. \u0411\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 (syspatch) \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c amd64, i386 \u0438 arm64 \u0443\u0436\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53889","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb ld.so OpenBSD | ProHoster","description":"\ud83e\udd47Dob\u00ebsia n\u00eb ld.so OpenBSD | ProHoster","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ld-so-openbsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ld.so OpenBSD | ProHoster","og:description":"\u0414\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a ld.so, \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 OpenBSD, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u0434\u043b\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ld-so-openbsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-11T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53889","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 09:10:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:16:27","updated":"2026-01-24 09:10:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53889"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53889\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}