Ukuba sesichengeni okukuvumela ukuba uphume kwindawo ekwanti ye-QEMU

Ityhiliwe iinkcukacha ezibalulekileyo zobuthathaka (I-CVE-2019-14378) kwisibambi se-SLIRP esingagqibekanga esisetyenziswa kwi-QEMU ukuseka umjelo wonxibelelwano phakathi kweadaptha yenethiwekhi yenyani kwinkqubo yeendwendwe kunye ne-backend yenethiwekhi kwicala le-QEMU. Lo mcimbi ukwachaphazela iinkqubo ze-KVM ezisekwe kwi-virtualization (in Indlela yokusebenzisa) kunye ne-Virtualbox, esebenzisa i-slirp backend esuka kwi-QEMU, kunye nezicelo ezisebenzisa istaki sothungelwano sesithuba somsebenzisi. libSLIRP (TCP/IP emulator).

Ukuba sesichengeni kuvumela ikhowudi ukuba iqhutywe kwicala lenkqubo yenginginya ngamalungelo enkqubo yomphathi we-QEMU xa ipakethi yothungelwano eyilwe ngokukodwa enkulu kakhulu ithunyelwa ukusuka kwinkqubo yeendwendwe, efuna ukwahlulwa. Ngenxa yemposiso kwi ip_reass () umsebenzi, obizwa xa kudityaniswa kwakhona iipakethe ezingenayo, iqhekeza lokuqala lisenokungangeni kwisithinteli esinikiweyo kwaye umsila walo uya kubhalwa kwiindawo zememori ecaleni kwe buffer.

Uvavanyo sele iyafumaneka umboniso osebenzayo wokuxhaphaza, obonelela ngokugqitha kwi-ASLR kunye nokwenza ikhowudi ngokubhala ngaphezulu inkumbulo ye main_loop_tlg uluhlu, ukuquka iQEMTimerList enabaphathi ababizwa sisibali-xesha.
Ubuthathaka sele bulungisiwe Fedora ΠΈ SUSE/openSUSE, kodwa ihlala ingalungiswanga Debian, Arch Linux ΠΈ FreeBSD. Ku Ubuntu ΠΈ RHEL Ingxaki ayibonakali ngenxa yokungasebenzisi i-slirp. Ukuba sesichengeni kuhlala kungalungiswanga kukhupho lwamva nje libslirp 4.0 (ulungiso luyafumaneka ngoku njenge isiqwenga).

umthombo: opennet.ru

Yongeza izimvo