{"id":93183,"date":"2020-09-04T07:42:02","date_gmt":"2020-09-04T05:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-realizaczii-soketov-af_packet-yadra-linux"},"modified":"2020-09-04T07:42:02","modified_gmt":"2020-09-04T05:42:02","slug":"uyazvimost-v-realizaczii-soketov-af_packet-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-realizaczii-soketov-af_packet-yadra-linux","title":{"rendered":"Vulnerabilitet n\u00eb implementimin e soketeve AF_PACKET t\u00eb b\u00ebrtham\u00ebs Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pas tre vjet\u00ebsh nga vala e vulnerabilitetit (1<\/a><\/noindex>, 2<\/a><\/noindex>, 3<\/a><\/noindex>, 4<\/a><\/noindex>, 5<\/a><\/noindex>) n\u00eb n\u00ebn-sistemin AF_PACKET t\u00eb kernelit Linux u zbulua<\/a><\/noindex> nj\u00eb problem tjet\u00ebr (CVE-2020-14386<\/a><\/noindex>), q\u00eb lejon nj\u00eb p\u00ebrdorues t\u00eb pap\u00ebrjashtuar lokal t\u00eb ekzekutoj\u00eb kod me privilegje root ose t\u00eb dal\u00eb nga kontejner\u00ebt e izoluara, n\u00ebse ka qasje root brenda tyre.<\/p>\n

P\u00ebr t\u00eb krijuar nj\u00eb socket AF_PACKET dhe p\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetin k\u00ebrkohet t\u00eb ket\u00eb kompetenca CAP_NET_RAW. Megjithat\u00eb, kjo kompetenc\u00eb mund t\u00eb merret nga nj\u00eb p\u00ebrdorues i pap\u00ebrjashtuar n\u00eb kontejner\u00ebt q\u00eb krijohen n\u00eb sisteme me mb\u00ebshtetje t\u00eb aktivizuar p\u00ebr hap\u00ebsirat e identifikimit t\u00eb p\u00ebrdoruesve (user namespaces). P\u00ebr shembull, hap\u00ebsirat e identifikimit t\u00eb p\u00ebrdoruesve jan\u00eb aktivizuar si\u00e7 \u00ebsht\u00eb n\u00eb Ubuntu dhe Fedora, por nuk jan\u00eb aktivizuar n\u00eb Debian dhe RHEL. N\u00eb Android, procesi mediaserver ka t\u00eb drejt\u00ebn t\u00eb krijoj\u00eb socket AF_PACKET, p\u00ebrmes t\u00eb cilit mund t\u00eb shfryt\u00ebzohet vulnerabiliteti.<\/p>\n

Vonesa ndodhet n\u00eb funksionin tpacket_rcv dhe shkaktohet nga nj\u00eb gabim n\u00eb llogaritjen e variablit netoff. Nj\u00eb sulmues mund t\u00eb krijoj\u00eb kushte, n\u00eb t\u00eb cilat variabli netoff merr nj\u00eb vler\u00eb m\u00eb t\u00eb vog\u00ebl se variabli maclen, gj\u00eb q\u00eb do t\u00eb shkaktoj\u00eb mbip\u00ebrshkimin gjat\u00eb llogaritjes \"macoff = netoff - maclen\" dhe vendosjen e gabuar t\u00eb treguesit p\u00ebr kufirin e t\u00eb dh\u00ebnave t\u00eb pranuara. Si rezultat, sulmuesit mund t\u00eb nisin nj\u00eb shkruarje nga 1 deri n\u00eb 10 byte n\u00eb nj\u00eb zon\u00eb jasht\u00eb buferit t\u00eb ndar\u00eb. Raportohet se \u00ebsht\u00eb duke u zhvilluar nj\u00eb eksploit q\u00eb lejon marrjen e privilegjeve root n\u00eb sistem. <\/p>\n

Problemi \u00ebsht\u00eb prezent n\u00eb kernel q\u00eb nga korriku 2008, dmth. shfaqet n\u00eb t\u00eb gjitha kernelat aktual\u00eb. Nj\u00eb riparim \u00ebsht\u00eb n\u00eb dispozitio n\u00eb form\u00ebn e patch-it<\/a><\/noindex>. Mund t\u00eb ndjek\u00ebsh paraqitjen e p\u00ebrdit\u00ebsimeve t\u00eb pakove n\u00eb distribucione n\u00eb k\u00ebto faqe: Ubuntu<\/a><\/noindex>, Fedora<\/a><\/noindex>, SUSE<\/a><\/noindex>, Debian<\/a><\/noindex>, RHEL<\/a><\/noindex>, Arch<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043f\u0443\u0441\u0442\u044f \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u043e\u043b\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (1, 2, 3, 4, 5) \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 AF_PACKET \u044f\u0434\u0440\u0430 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 (CVE-2020-14386), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438\u043b\u0438 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432 \u043d\u0438\u0445 root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0414\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u043e\u043a\u0435\u0442\u0430 AF_PACKET \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 CAP_NET_RAW. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-93183","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet n\u00eb implementimin e socket-ave AF_PACKET t\u00eb kernelit Linux | ProHoster","description":"Pas tre vjet\u00ebsh nga vala e vulnerabilitetit (1,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-realizaczii-soketov-af_packet-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043e\u043a\u0435\u0442\u043e\u0432 AF_PACKET \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0421\u043f\u0443\u0441\u0442\u044f \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u043e\u043b\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (1,","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-realizaczii-soketov-af_packet-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-04T05:42:02+00:00","article:modified_time":"2020-09-04T05:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93183","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:52:32","updated":"2022-09-28 05:10:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/93183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=93183"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/93183\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=93183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=93183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=93183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}