{"id":82655,"date":"2020-05-23T19:42:11","date_gmt":"2020-05-23T17:42:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej"},"modified":"2020-05-23T19:42:11","modified_gmt":"2020-05-23T17:42:11","slug":"checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","title":{"rendered":"Checkpoint ka ofruar nj\u00eb teknik\u00eb mbrojt\u00ebse t\u00eb quajtur Safe-Linking, e cila e b\u00ebn t\u00eb v\u00ebshtir\u00eb shfryt\u00ebzimin e dob\u00ebsive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Kompania Checkpoint <noindex><a rel=\"nofollow\" href=\"https:\/\/research.checkpoint.com\/2020\/safe-linking-eliminating-a-20-year-old-malloc-exploit-primitive\/\">paraqiti<\/a><\/noindex> mechanizmi i mbrojtjes Safe-Linking, q\u00eb e v\u00ebshtir\u00ebson krijimin e eksploit\u00ebve, duke manipuluar n\u00eb p\u00ebrcaktimin ose ndryshimin e treguesve n\u00eb bufra, t\u00eb ndar\u00eb gjat\u00eb thirrjes s\u00eb malloc. Safe-Linking nuk bllokon plot\u00ebsisht mund\u00ebsin\u00eb e shfryt\u00ebzimit t\u00eb dob\u00ebsive, por me shpenzime minimale komplikon n\u00eb m\u00ebnyr\u00eb t\u00eb konsiderueshme krijimin e disa kategorive t\u00eb eksploit\u00ebve, duke pasur parasysh se p\u00ebrve\u00e7 mbushjes s\u00eb bufrit t\u00eb shfryt\u00ebzuar \u00ebsht\u00eb e nevojshme t\u00eb gjendet edhe nj\u00eb dob\u00ebsi tjet\u00ebr, q\u00eb shkakton nj\u00eb rrjedhje informacioni mbi vendndodhjen e kup\u00ebs n\u00eb memorie.<\/p>\n<p>Patch-et me implementimin e Safe-Linking jan\u00eb p\u00ebrgatitur p\u00ebr Glibc (ptmalloc), uClibc-NG (dlmalloc), gperftools (tcmalloc) dhe Google TCMalloc, si dhe jan\u00eb propozuar p\u00ebr p\u00ebrmir\u00ebsimin e mbrojtjes n\u00eb Chromium (n\u00eb<br \/>\nChromium \u00ebsht\u00eb vendosur nj\u00eb teknik mbrojtjeje e fokusuar n\u00eb zgjidhjen e t\u00eb nj\u00ebjt\u00ebs problem MaskPtr q\u00eb nga viti 2012, por zgjidhja nga Checkpoint tregon performanc\u00eb m\u00eb t\u00eb lart\u00eb).<br \/>\nPatch-et e propozuara tashm\u00eb jan\u00eb miratuar p\u00ebr t'u p\u00ebrfshir\u00eb n\u00eb l\u00ebshimin e gushtit <noindex><a rel=\"nofollow\" href=\"https:\/\/sourceware.org\/git\/?p=glibc.git;a=commitdiff;h=a1a486d70ebcc47a686ff5846875eacad0940e41\">Glibc 3.32<\/a><\/noindex> dhe aplikimi i Safe-Linking do t\u00eb p\u00ebrfshihet si default. N\u00eb uClibc-NG mb\u00ebshtetje p\u00ebr Safe-Linking <noindex><a rel=\"nofollow\" href=\"https:\/\/gogs.waldemar-brodkorb.de\/oss\/uclibc-ng\/commit\/886878b22424d6f95bcdeee55ada72049d21547c\">u p\u00ebrfshi<\/a><\/noindex> n\u00eb l\u00ebshimin 1.0.33 dhe \u00ebsht\u00eb p\u00ebrfshir\u00eb si default. N\u00eb gperftools (tcmalloc i vjet\u00ebr) ndryshimet <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/gperftools\/gperftools\/pull\/1161\">jan\u00eb miratuar<\/a><\/noindex>, por do t\u00eb ofrohen n\u00eb nj\u00eb nga l\u00ebshimet e ardhshme si nj\u00eb opsion. <\/p>\n<p>Zhvilluesit <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52364\">TCMalloc<\/a><\/noindex> (tcmalloc i ri) u refuzua <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/google\/tcmalloc\/pull\/19\">ndryshimi<\/a><\/noindex>, duke u referuar nj\u00eb r\u00ebnie t\u00eb fort\u00eb t\u00eb performanc\u00ebs dhe nevoj\u00ebs p\u00ebr t\u00eb shtuar teste t\u00eb avancuara p\u00ebr t\u00eb kontrolluar rregullisht q\u00eb gjith\u00e7ka funksionon si duhet. Testimi nga inxhinier\u00ebt e Checkpoint tregoi se metoda Safe-Linking nuk sjell shpenzime t\u00eb shtuar t\u00eb memories dhe se performanca gjat\u00eb kryerjes s\u00eb operacioneve me grupe mesatarisht bie vet\u00ebm me 0.02%, nd\u00ebrsa n\u00eb rastin m\u00eb t\u00eb keq me 1.5% (p\u00ebr krahasim, shpenzimet e metod\u00ebs q\u00eb p\u00ebrdoret n\u00eb Chromium vler\u00ebsohen si \u201cm\u00eb pak se 2%\u201d). Aktivizimi<br \/>\ni Safe-Linking \u00e7on n\u00eb ekzekutimin e 2-3 instrukcioneve t\u00eb assembler-it n\u00eb \u00e7do thirrje free() dhe 3-4 instrukcioneve gjat\u00eb thirrjes malloc(). Nisi i etapave t\u00eb inicializimit dhe gjenerimit t\u00eb vlerave t\u00eb rast\u00ebsishme nuk \u00ebsht\u00eb e nevojshme.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/research.checkpoint.com\/wp-content\/uploads\/2020\/04\/libc_figure_8.png\"><img decoding=\"async\" alt=\"Checkpoint ka ofruar nj\u00eb teknik\u00eb mbrojt\u00ebse t\u00eb quajtur Safe-Linking, e cila e b\u00ebn t\u00eb v\u00ebshtir\u00eb shfryt\u00ebzimin e dob\u00ebsive\" src=\"\/wp-content\/uploads\/2020\/05\/84d088f47dfd35e6669aa87016865755.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Safe-Linking mund t\u00eb p\u00ebrdoret jo vet\u00ebm p\u00ebr t\u00eb rritur sigurin\u00eb e realizimeve t\u00eb ndryshme t\u00eb tavanit (heap), por gjithashtu p\u00ebr t\u00eb shtuar mjete kontrolli t\u00eb integritetit n\u00eb \u00e7do strukture t\u00eb dh\u00ebnash, ku p\u00ebrdoren lista t\u00eb lidhura me tregues, t\u00eb vendosura pran\u00eb vet\u00eb bufer\u00ebve. Metoda \u00ebsht\u00eb shum\u00eb e thjesht\u00eb p\u00ebr t'u realizuar dhe k\u00ebrkon vet\u00ebm shtimin e nj\u00eb makrosi dhe aplikimin e saj n\u00eb treguesit p\u00ebr bllokun e ardhsh\u00ebm n\u00eb kod (p\u00ebr shembull, p\u00ebr Glibc <noindex><a rel=\"nofollow\" href=\"https:\/\/sourceware.org\/git\/?p=glibc.git;a=commitdiff;h=a1a486d70ebcc47a686ff5846875eacad0940e41\">ndryshohet<\/a><\/noindex> vet\u00ebm disa rreshta n\u00eb kod). Metoda p\u00ebrmbledh k\u00ebto ndryshime:<\/p>\n<p>   +#define PROTECT_PTR(pos, ptr) \\<br \/>\n   +  ((__typeof (ptr)) ((((size_t) pos) &gt;&gt; 12) ^ ((size_t) ptr)))<\/p>\n<p>   +#define REVEAL_PTR(ptr)  PROTECT_PTR (&amp;ptr, ptr)<\/p>\n<p>   \u2014       nextp = p-&gt;fd;<br \/>\n   +       nextp = REVEAL_PTR (p-&gt;fd);<br \/>\n   &#8230;<\/p>\n<p>Thelbi i metod\u00ebs \u00ebsht\u00eb p\u00ebrdorimi i t\u00eb dh\u00ebnave t\u00eb rastit nga mekanizmi i rast\u00ebsis\u00eb s\u00eb adresave ASLR (mmap_base) p\u00ebr t\u00eb mbrojtur listat e lidhura nj\u00ebsh, t\u00eb tilla si Fast-Bins dhe TCache. Para se t\u00eb p\u00ebrdoret vlera e treguesit p\u00ebr elementin e ardhsh\u00ebm n\u00eb list\u00eb, kryhet nj\u00eb transformim sipas mask\u00ebs dhe kontrollohet p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb me kufirin e faqes s\u00eb memories. Treguesi z\u00ebvend\u00ebsohet me rezultatin e operacionit \u201c(L &gt;&gt; PAGE_SHIFT) XOR (P)\u201d, ku P \u00ebsht\u00eb vlera e treguesit dhe L \u00ebsht\u00eb pozita n\u00eb memorie ku ruhet ky tregues.<br \/>\n<center><noindex><a rel=\"nofollow\" href=\"https:\/\/research.checkpoint.com\/wp-content\/uploads\/2020\/04\/libc_figure_6.png\"><img decoding=\"async\" alt=\"Checkpoint ka ofruar nj\u00eb teknik\u00eb mbrojt\u00ebse t\u00eb quajtur Safe-Linking, e cila e b\u00ebn t\u00eb v\u00ebshtir\u00eb shfryt\u00ebzimin e dob\u00ebsive\" src=\"\/wp-content\/uploads\/2020\/05\/22c4269fefca9d21bc7d437af8a739f9.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Kur p\u00ebrdoret n\u00eb sistem <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/ASLR\">ASLR<\/a><\/noindex> (Address Space Layout Randomization) pjesa e bitave L me adres\u00ebn baz\u00eb t\u00eb grumbullit p\u00ebrmban vlera t\u00eb rast\u00ebsishme, t\u00eb cilat p\u00ebrdoren si \u00e7el\u00ebs p\u00ebr kodimin P (shkarkohen nga operacioni i zhvendosjes me 12 bit p\u00ebr faqe t\u00eb 4096 bajt\u00ebve). Nj\u00eb manipulim i till\u00eb zvog\u00eblon rrezikun e kapjes s\u00eb treguesve n\u00eb eksploatime, pasi treguesi nuk ruhet n\u00eb form\u00ebn e tij origjinale dhe p\u00ebr ta z\u00ebvend\u00ebsuar at\u00eb, k\u00ebrkohet t\u00eb dihen informacionet mbi pozicionin e grumbullit. P\u00ebr m\u00eb tep\u00ebr, n\u00eb kodin e patch-it ka nj\u00eb kontroll shtes\u00eb t\u00eb p\u00ebrputhshm\u00ebris\u00eb s\u00eb bllokut, e cila nuk lejon nj\u00eb sulmues t\u00eb z\u00ebvend\u00ebsoj\u00eb treguesin me nj\u00eb vler\u00eb t\u00eb pap\u00ebrputhshme dhe k\u00ebrkon njohjen e numrit t\u00eb bit\u00ebve me t\u00eb cil\u00ebt \u00ebsht\u00eb b\u00ebr\u00eb p\u00ebrputhshm\u00ebria, \u00e7ka n\u00eb sistemet 64-bit shton n\u00eb m\u00ebnyr\u00eb t\u00eb m\u00ebtejshme aft\u00ebsin\u00eb p\u00ebr t\u00eb bllokuar 15 nga 16 p\u00ebrpjekjet e sulmeve q\u00eb nuk marrin parasysh p\u00ebrputhshm\u00ebrin\u00eb.<\/p>\n<p>Metoda \u00ebsht\u00eb efektive p\u00ebr mbrojtjen ndaj sulmeve q\u00eb p\u00ebrdorin ri-p\u00ebrcaktimin e pjessh\u00ebm t\u00eb treguesve (ndryshimi i bajt\u00ebve m\u00eb t\u00eb ul\u00ebt), ri-shkrimi i plot\u00eb i treguesve (ridrejtimi n\u00eb kodin e sulmuesit) dhe ndryshimi i pozicionit t\u00eb list\u00ebs n\u00eb nj\u00eb adres\u00eb t\u00eb pap\u00ebrputhshme. Si nj\u00eb shembull, \u00ebsht\u00eb treguar se aplikimi i Safe-Linking n\u00eb malloc do t\u00eb mund\u00ebsonte bllokimin e eksploatimeve t\u00eb sapo <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.checkpoint.com\/2020\/02\/05\/the-dark-side-of-smart-lighting-check-point-research-shows-how-business-and-home-networks-can-be-hacked-from-a-lightbulb\/\">identifikuara<\/a><\/noindex> nga t\u00eb nj\u00ebjtit hulumtues t\u00eb dob\u00ebsive <noindex><a rel=\"nofollow\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-6007\">CVE-2020-6007<\/a><\/noindex> n\u00eb ndri\u00e7imin inteligjent Philips Hue Bridge, shkaktuar nga mbingarkesa e tamponit e cila lejon marrjen e kontrollit mbi pajisjen.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53013\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Checkpoint \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0431\u0443\u0444\u0435\u0440\u044b, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 malloc. Safe-Linking \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u0430\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":82656,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Checkpoint \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0431\u0443\u0444\u0435\u0440\u044b, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 malloc. Safe-Linking \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u0430\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Checkpoint \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0449\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Checkpoint \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0431\u0443\u0444\u0435\u0440\u044b, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 malloc. Safe-Linking \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u0430\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-23T17:42:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-23T17:42:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Checkpoint ofron nj\u00eb teknik\u00eb mbrojtjeje Safe-Linking, e cila e v\u00ebshtir\u00ebson shfryt\u00ebzimin e dob\u00ebsive | ProHoster","description":"Kompania Checkpoint prezantoi mekanizmin e mbrojtjes Safe-Linking, i cili e v\u00ebshtir\u00ebson krijimin e eksploiteve q\u00eb manipulojn\u00eb me p\u00ebrcaktimin ose ndryshimin e treguesve n\u00eb tampon\u00ebt e alokuar gjat\u00eb thirrjes malloc. Safe-Linking nuk e bllokon plot\u00ebsisht mund\u00ebsin\u00eb e shfryt\u00ebzimit t\u00eb dob\u00ebsive, por me shpenzime minimale e komplikon ndjesh\u00ebm krijimin e disa kategorive t\u00eb eksploiteve, pasi p\u00ebrve\u00e7 mbingarkes\u00ebs s\u00eb shfryt\u00ebzuar t\u00eb tamponit \u00ebsht\u00eb e nevojshme t\u00eb gjendet edhe nj\u00eb dob\u00ebsi tjet\u00ebr q\u00eb shkakton shkarkimin e t\u00eb dh\u00ebnave p\u00ebr","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Checkpoint \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0449\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Checkpoint \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0431\u0443\u0444\u0435\u0440\u044b, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 malloc. Safe-Linking \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u0430\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-23T17:42:11+00:00","article:modified_time":"2020-05-23T17:42:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:33:26","updated":"2022-10-01 05:37:05"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=82655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/82656"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=82655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=82655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=82655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}