{"id":82556,"date":"2020-05-22T19:41:55","date_gmt":"2020-05-22T17:41:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc"},"modified":"2020-05-22T19:41:55","modified_gmt":"2020-05-22T17:41:55","slug":"kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","title":{"rendered":"Nj\u00eb cenueshm\u00ebri kritike n\u00eb implementimin e funksionit memcpy p\u00ebr ARMv7 n\u00eb p\u00ebrb\u00ebrjen e Glibc","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00ebna e siguris\u00eb nga Cisco zbuluan<\/a><\/noindex> detajet mang\u00ebsive<\/a><\/noindex> (CVE-2020-6096<\/a><\/noindex>) n\u00eb implementimin e ofruar n\u00eb funksionin memcpy() t\u00eb Glibc p\u00ebr platform\u00ebn 32-bit ARMv7. Problemi shkaktohet nga p\u00ebrpunimi i gabuar i vlerave negative t\u00eb parametrave q\u00eb p\u00ebrcaktojn\u00eb p\u00ebrmas\u00ebn e zon\u00ebs s\u00eb kopjimit, p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb optimizimeve asambleje q\u00eb manipulojn\u00eb numrat e plot\u00eb 32-bit me shenj\u00eb. Thirrja memcpy() n\u00eb sistemet ARMv7 me nj\u00eb madh\u00ebsi negative shkakton krahasim t\u00eb gabuar t\u00eb vlerave dhe shkruan n\u00eb zona jasht\u00eb kufijve t\u00eb tamponit t\u00eb caktuar.<\/p>\n

Vulnerabiliteti mund t\u00eb shfryt\u00ebzohet p\u00ebr t\u00eb ekzekutuar kod n\u00eb situat\u00ebn kur nj\u00eb sulmues mund t\u00eb organizoj\u00eb formimin e nj\u00eb vler\u00eb negative p\u00ebr nj\u00eb variab\u00ebl, p\u00ebrmes s\u00eb cil\u00ebs p\u00ebrcaktohet madh\u00ebsia e t\u00eb dh\u00ebnave t\u00eb kopjuara (p\u00ebr shembull, ndodhi dhe kalimi n\u00eb minus do t\u00eb jet\u00eb kur d\u00ebrgoni m\u00eb shum\u00eb se 2 GB t\u00eb dh\u00ebnash, por gjat\u00eb sulmit, p\u00ebr t\u00eb dal\u00eb jasht\u00eb kufijve t\u00eb tamponit, duhet t\u00eb d\u00ebrgoni t\u00eb pakt\u00ebn 4 GB). Funksioni memcpy() p\u00ebrdoret gjer\u00ebsisht n\u00eb aplikacione dhe procesor\u00ebt ARMv7 jan\u00eb t\u00eb zakonsh\u00ebm n\u00eb sistemet automobilistike, t\u00eb mobiljeve, industriale, konsumator\u00ebve, komunikimit dhe pajisjeve t\u00eb integruara, t\u00eb cilat potencialisht mund t\u00eb b\u00ebhen objekte t\u00eb sulmeve q\u00eb p\u00ebrdorin Bluetooth, HD Radio\/DAB, USB, CAN bus, Wi-Fi dhe burime t\u00eb tjera t\u00eb dh\u00ebnash t\u00eb jashtme (p\u00ebr shembull, sh\u00ebrbimet dhe aplikacionet e aksesueshme p\u00ebrmes rrjetit q\u00eb pranojn\u00eb t\u00eb dh\u00ebna pa kufizime t\u00eb madh\u00ebsis\u00eb mund t\u00eb sulmohen).<\/p>\n

Si nj\u00eb shembull, merret krijimi i nj\u00eb eksploituesi funksional p\u00ebr sulmin ndaj serverit http t\u00eb integruar n\u00eb sistemet informacionit automobilistik, t\u00eb aksesuesh\u00ebm p\u00ebrmes rrjetit Wi-Fi t\u00eb automobilit. Nj\u00eb sulmues i huaj mund t\u00eb shfryt\u00ebzoj\u00eb e met\u00ebn n\u00eb memcpy n\u00eb k\u00ebt\u00eb server duke d\u00ebrguar nj\u00eb k\u00ebrkes\u00eb GET me nj\u00eb madh\u00ebsi shum\u00eb t\u00eb madhe dhe t\u00eb fitoj\u00eb akses root n\u00eb sistem.<\/p>\n

\"Nj\u00eb<\/a><\/noindex><\/center><\/p>\n

N\u00eb sistemet 32-bit x86, problemi nuk manifestohet, pasi implementimi i memcpy p\u00ebr k\u00ebt\u00eb arkitektur\u00eb interpreton si\u00e7 duhet variabl\u00ebn me p\u00ebrmasa si nj\u00eb vler\u00eb t\u00eb plot\u00eb pa shenj\u00eb me tipin size_t (n\u00eb asamblien e shkruar implementation<\/a><\/noindex> p\u00ebr ARMv7, n\u00eb vend t\u00eb size_t ajo p\u00ebrpunsohet si num\u00ebr i plot\u00eb me shenj\u00eb). Nj\u00eb riparim \u00ebsht\u00eb n\u00eb dispozicion p\u00ebr momentin n\u00eb form\u00ebn e patch-it<\/a><\/noindex>, i cili do t\u00eb hyj\u00eb n\u00eb p\u00ebrdit\u00ebsimin e gushtit t\u00eb Glibc 2.32.
\nRiparimi konsiston n\u00eb z\u00ebvend\u00ebsimin e p\u00ebrdorimit t\u00eb instrukcioneve asambleje q\u00eb punojn\u00eb me operand me shenj\u00eb (bge dhe blt) me analoge pa shenj\u00eb (blo dhe bhs). <\/p>\n

Problemi ende nuk \u00ebsht\u00eb zgjidhur n\u00eb Debian 9 dhe 10<\/a><\/noindex> (n\u00eb Debian 8 nuk manifestohet), Fedora<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, OpenEmbedded, Tizen (p\u00ebrdor glibc). RHEL<\/a><\/noindex> dhe SUSE<\/a><\/noindex> problemi nuk e preku, pasi ata nuk mb\u00ebshtesin sistemet 32-bit ARMv7. Android nuk \u00ebsht\u00eb i ndjesh\u00ebm ndaj k\u00ebsaj vulnerabiliteti, pasi p\u00ebrdor nj\u00eb implementim t\u00eb vetin libc (Bionic). N\u00eb OpenWRT<\/a><\/noindex> si parazgjedhje n\u00eb shumic\u00ebn e nd\u00ebrtim\u00ebve p\u00ebrdoret Musl, por n\u00eb depo \u00ebsht\u00eb n\u00eb dispozicion edhe glibc.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-6096) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432 Glibc \u0444\u0443\u043d\u043a\u0446\u0438\u0438 memcpy() \u0434\u043b\u044f 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ARMv7. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438, \u0438\u0437-\u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0441\u0441\u0435\u043c\u0431\u043b\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0439, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u043c\u0438 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u043c\u0438 \u0447\u0438\u0441\u043b\u0430\u043c\u0438. \u0412\u044b\u0437\u043e\u0432 memcpy() \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 ARMv7 \u0441 \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u043c\u0443 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":82557,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82556","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet kritik n\u00eb implementimin e funksionit memcpy p\u00ebr ARMv7 n\u00eb p\u00ebrb\u00ebrjen e Glibc | ProHoster","description":"K\u00ebrkuesit e siguris\u00eb nga kompania Cisco zbuluan detaje","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 memcpy \u0434\u043b\u044f ARMv7 \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 Glibc | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-22T17:41:55+00:00","article:modified_time":"2020-05-22T17:41:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82556","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:35:23","updated":"2022-09-28 08:25:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82556","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=82556"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82556\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/82557"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=82556"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=82556"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=82556"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}