{"id":82556,"date":"2020-05-22T19:41:55","date_gmt":"2020-05-22T17:41:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc"},"modified":"2020-05-22T19:41:55","modified_gmt":"2020-05-22T17:41:55","slug":"kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","title":{"rendered":"Vulnerabiliteti kritik n\u00eb implementimin e funksionit memcpy p\u00ebr ARMv7 nga Glibc","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Studimet e siguris\u00eb nga kompania Cisco zbuluan<\/a><\/noindex> detajet dob\u00ebsin\u00eb<\/a><\/noindex> (CVE-2020-6096<\/a><\/noindex>) n\u00eb implementimin e funksionit memcpy() t\u00eb ofruar nga Glibc p\u00ebr platform\u00ebn 32-bit ARMv7. Problemi shkaktohet nga trajtimi i gabuar i vlerave negative t\u00eb parametrave q\u00eb p\u00ebrcaktojn\u00eb madh\u00ebsin\u00eb e zon\u00ebs s\u00eb kopjimit, p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb optimizimeve n\u00eb assembler q\u00eb manipulojn\u00eb me numrat e plot\u00eb 32-bit me shenj\u00eb. Thirrja memcpy() n\u00eb sistemet ARMv7 me madh\u00ebsi negative shkakton krahasime t\u00eb gabuara t\u00eb vlerave dhe shkrim n\u00eb zona jasht\u00eb kufijve t\u00eb tamponit t\u00eb caktuar.<\/p>\n

Nj\u00eb dob\u00ebsi mund t\u00eb shfryt\u00ebzohet p\u00ebr ekzekutimin e kodit n\u00eb nj\u00eb situat\u00eb kur sulmuesi mund t\u00eb organizoj\u00eb formimin e nj\u00eb vler\u00eb negative t\u00eb nj\u00eb variabli, p\u00ebrmes t\u00eb cilit kalon madh\u00ebsia e t\u00eb dh\u00ebnave q\u00eb kopjohen (p.sh., nj\u00eb kalim n\u00eb negativ do t\u00eb ndodhte n\u00ebse d\u00ebrgohen m\u00eb shum\u00eb se 2 GB t\u00eb dh\u00ebna, por n\u00eb procesin e sulmit p\u00ebr t\u00eb dal\u00eb jasht\u00eb kufijve t\u00eb tamponit, duhet t\u00eb d\u00ebrgohet t\u00eb pakt\u00ebn 4 GB). Funkcioni memcpy() p\u00ebrdoret gjer\u00ebsisht n\u00eb aplikacione, dhe procesor\u00ebt ARMv7 jan\u00eb t\u00eb p\u00ebrhapur n\u00eb sistemet automobilistike, pajisjet mobile, industriale, konsumator\u00ebve, komunikimit dhe pajisjeve t\u00eb integruara, t\u00eb cilat potencialisht mund t\u00eb b\u00ebhen objekt sulmesh duke p\u00ebrdorur Bluetooth, HD Radio\/DAB, USB, CAN bus, Wi-Fi dhe burime t\u00eb tjera t\u00eb dh\u00ebnash nga jasht\u00eb (p.sh., mund t\u00eb sulmohen sh\u00ebrbimet dhe aplikacionet e qasshme p\u00ebrmes rrjetit q\u00eb pranojn\u00eb t\u00eb dh\u00ebna pa kufizime t\u00eb madh\u00ebsis\u00eb).<\/p>\n

Si shembull, jepet krijimi i nj\u00eb eksploiti funksional p\u00ebr nj\u00eb sulm ndaj serverit http t\u00eb integruar n\u00eb sistemet informative t\u00eb automjeteve, i qassh\u00ebm p\u00ebrmes rrjetit Wi-Fi t\u00eb makin\u00ebs. Nj\u00eb sulmues i jasht\u00ebm mund t\u00eb shfryt\u00ebzoj\u00eb nj\u00eb dob\u00ebsi n\u00eb memcpy n\u00eb k\u00ebt\u00eb server duke d\u00ebrguar nj\u00eb k\u00ebrkes\u00eb GET shum\u00eb t\u00eb madhe dhe t\u00eb fitoj\u00eb akses root n\u00eb sistem.<\/p>\n

\"Vulnerabiliteti<\/a><\/noindex><\/center><\/p>\n

N\u00eb sistemet 32-bit x86, problemi nuk shfaqet, sepse implementimi i memcpy p\u00ebr k\u00ebt\u00eb arkitektur\u00eb e interpretan sakt\u00ebsisht variabl\u00ebn me madh\u00ebsi si nj\u00eb vler\u00eb t\u00eb padiskutueshme me tipin size_t (n\u00eb asamble) realizimit<\/a><\/noindex> p\u00ebr ARMv7, n\u00eb vend t\u00eb size_t, p\u00ebrpunohet si integer me shenj\u00eb). Zgjidhja aktualisht \u00ebsht\u00eb n\u00eb dispozicion si patch<\/a><\/noindex>, e cila do t\u00eb p\u00ebrfshihet n\u00eb p\u00ebrdit\u00ebsimin e gushtit t\u00eb Glibc 2.32.
\nZgjidhja p\u00ebrfshin z\u00ebvend\u00ebsimin e p\u00ebrdorimit t\u00eb instrukcioneve t\u00eb asambles\u00eb q\u00eb operojn\u00eb me operand\u00eb me shenj\u00eb (bge dhe blt) me analoge t\u00eb padiskutueshme (blo dhe bhs). <\/p>\n

Problemi ende nuk \u00ebsht\u00eb zgjidhur n\u00eb Debian 9 dhe 10<\/a><\/noindex> (n\u00eb Debian 8 nuk shfaqet), Fedora<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, OpenEmbedded, Tizen (p\u00ebrdor glibc). RHEL<\/a><\/noindex> dhe SUSE<\/a><\/noindex> problemi nuk prek, pasi ata nuk mb\u00ebshtesin sistemet 32-bit ARMv7. Android nuk \u00ebsht\u00eb i ekspozuar ndaj vulnerabilitetit, pasi p\u00ebrdor implementimin e tij libc (Bionic). N\u00eb OpenWRT<\/a><\/noindex> penges\u00eb n\u00eb shumic\u00ebn e nd\u00ebrtimeve p\u00ebrdoret Musl, por n\u00eb depo ka edhe glibc.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-6096) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432 Glibc \u0444\u0443\u043d\u043a\u0446\u0438\u0438 memcpy() \u0434\u043b\u044f 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ARMv7. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438, \u0438\u0437-\u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0441\u0441\u0435\u043c\u0431\u043b\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0439, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u043c\u0438 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u043c\u0438 \u0447\u0438\u0441\u043b\u0430\u043c\u0438. \u0412\u044b\u0437\u043e\u0432 memcpy() \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 ARMv7 \u0441 \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u043c\u0443 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":82557,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82556","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet kritik n\u00eb implementimin e funksionit memcpy p\u00ebr ARMv7 nga Glibc | ProHoster","description":"K\u00ebrkuesit e siguris\u00eb nga kompania Cisco zbuluan detajet mbi vulnerabilitetin (CVE-2020-6096) n\u00eb implementimin e funksionit memcpy() t\u00eb ofruar n\u00eb Glibc p\u00ebr platform\u00ebn 32-bit ARMv7. Problemi shkaktohet nga trajtimi i gabuar i vlerave negative t\u00eb parametrave q\u00eb p\u00ebrcaktojn\u00eb madh\u00ebsin\u00eb e zon\u00ebs s\u00eb kopjimit, p\u00ebr shkak t\u00eb optimizimeve n\u00eb assemblim q\u00eb manipulojn\u00eb numrat e plot\u00eb 32-bit me n\u00ebnshkrim. Thirrja memcpy() n\u00eb sistemet ARMv7 me madh\u00ebsi negative \u00e7on n\u00eb krahasimin e gabuar t\u00eb vlerave dhe shkrimin","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 memcpy \u0434\u043b\u044f ARMv7 \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 Glibc | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-6096) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432 Glibc \u0444\u0443\u043d\u043a\u0446\u0438\u0438 memcpy() \u0434\u043b\u044f 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b ARMv7. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438, \u0438\u0437-\u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0441\u0441\u0435\u043c\u0431\u043b\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0439, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u043c\u0438 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044b\u043c\u0438 \u0447\u0438\u0441\u043b\u0430\u043c\u0438. \u0412\u044b\u0437\u043e\u0432 memcpy() \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 ARMv7 \u0441 \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u043c\u0443 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0438 \u0437\u0430\u043f\u0438\u0441\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskaya-uyazvimost-v-realizaczii-funkczii-memcpy-dlya-armv7-iz-sostava-glibc","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-22T17:41:55+00:00","article:modified_time":"2020-05-22T17:41:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82556","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:35:23","updated":"2022-09-28 08:25:32"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82556","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=82556"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82556\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/82557"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=82556"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=82556"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=82556"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}