ืึทืœืคึผื™ื™ืŸ ื“ืึธืงืงืขืจ ื‘ื™ืœื“ืขืจ ืฉื™ืคึผื˜ ืžื™ื˜ ืœื™ื™ื“ื™ืง ื•ื•ืึธืจืฆืœ ืคึผืึทืจืึธืœ

ืกื™ืกืงืึธ ืกืขืงื•ืจื™ื˜ื™ ืจื™ืกืขืจื˜ืฉืขืจื– ืึทื ื˜ื“ืขืงื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข (CVE-2019-5021) ืื™ืŸ ืึทืกืขืžื‘ืœื™ื– ืึทืœืคึผื™ื™ืŸ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืคึฟืึทืจ ื“ื™ ื“ืึธืงืงืขืจ ืงืึทื ื˜ื™ื™ื ืขืจ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜ ืกื™ืกื˜ืขื. ื“ื™ ืขืกืึทื ืก ืคื•ืŸ ื“ื™ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืคึผืจืึธื‘ืœืขื ืื™ื– ืึทื– ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืคึผืึทืจืึธืœ ืคึฟืึทืจ ื“ืขืจ ื•ื•ืึธืจืฆืœ ื‘ืึทื ื™ืฆืขืจ ืื™ื– ื’ืขื•ื•ืขืŸ ื‘ืึทืฉื˜ื™ืžื˜ ืฆื• ืึท ืœื™ื™ื“ื™ืง ืคึผืึทืจืึธืœ ืึธืŸ ื‘ืœืึทืงื™ื ื’ ื“ื™ืจืขืงื˜ ืœืึธื’ื™ืŸ ื•ื•ื™ ื•ื•ืึธืจืฆืœ. ืœืึธืžื™ืจ ื’ืขื“ืขื ืงืขืŸ ืึทื– ืึทืœืคึผื™ื™ืŸ ืื™ื– ื’ืขื ื™ืฆื˜ ืฆื• ื“ื–ืฉืขื ืขืจื™ื™ื˜ ื‘ืึทืึทืžื˜ืขืจ ื‘ื™ืœื“ืขืจ ืคึฟื•ืŸ ื“ื™ ื“ืึธืงืงืขืจ ืคึผืจื•ื™ืขืงื˜ (ืคืจื™ืขืจ ื‘ืึทืึทืžื˜ืขืจ ื‘ื™ืœื“ืขืจ ื–ืขื ืขืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื•ื‘ื•ื ื˜ื•, ืึธื‘ืขืจ ื“ืขืžืึธืœื˜ ืขืก ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ื‘ืขืจื’ืขื–ืขืฆื˜ ืื•ื™ืฃ ืึทืœืคึผื™ื™ืŸ).

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ื–ื™ื ื˜ ื“ื™ ืึทืœืคึผื™ื™ืŸ ื“ืึธืงืงืขืจ 3.3 ื‘ื•ื™ืขืŸ ืื•ืŸ ืื™ื– ื’ืขื•ื•ืขืŸ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ืจืึทื’ืจืขืฉืึทืŸ ืขื ื“ืขืจื•ื ื’ ืฆื•ื’ืขื’ืขื‘ืŸ ืื™ืŸ 2015 (ืื™ื™ื“ืขืจ ื•ื•ืขืจืกื™ืข 3.3, /etc/shadow ื’ืขื•ื•ื™ื™ื ื˜ ื“ื™ ืฉื•ืจื” "root:!::0 :::::", ืื•ืŸ ื ืึธืš ื“ื™ ื“ื™ืคึผืจื™ืฉื™ื™ื™ืฉืึทืŸ ืคื•ืŸ ืคืึธืŸ "-ื“" ื“ื™ ืฉื•ืจื” "ืฉื•ืจืฉ:::0 :::::" ืื ื’ืขื”ื•ื™ื‘ืŸ ืฆื• ื–ื™ื™ืŸ ืฆื•ื’ืขื’ืขื‘ืŸ. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ื˜ื›ื™ืœืขืก ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื•ืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื ืื•ื•ืขืžื‘ืขืจ 2015, ืึธื‘ืขืจ ืื™ืŸ ื“ืขืฆืขืžื‘ืขืจ ื“ื•ืจืš ื˜ืขื•ืช ื•ื•ื™ื“ืขืจ ืกืขืจืคื™ืกื˜ ืื™ืŸ ื“ื™ ื‘ื•ื™ืขืŸ ื˜ืขืงืขืก ืคื•ืŸ ื“ื™ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ืฆื•ื•ื™ื™ึทื’, ืื•ืŸ ื“ืขืžืึธืœื˜ ืื™ื– ื˜ืจืึทื ืกืคืขืจื“ ืฆื• ืกื˜ืึทื‘ื™ืœ ื‘ื•ื™ืขืŸ.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ืื’ื˜ ืึทื– ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืื•ื™ืš ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืฆื•ื•ื™ื™ึทื’ ืคื•ืŸ ืึทืœืคึผื™ื™ืŸ ื“ืึธืงืงืขืจ 3.9. ืึทืœืคึผื™ื™ืŸ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืื™ืŸ ืžืึทืจืฅ ื‘ืืคืจื™ื™ื˜ ืœืึทื˜ืข ืื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื˜ื•ื˜ ื ื™ืฉื˜ ื“ืขืจืฉื™ื™ึทื ืขืŸ ืกื˜ืึทืจื˜ื™ื ื’ ืžื™ื˜ ื‘ื•ื™ืขืŸ 3.9.2, 3.8.4, 3.7.3 ืื•ืŸ 3.6.5, ืึธื‘ืขืจ ื‘ืœื™ื™ื‘ื˜ ืื™ืŸ ื“ื™ ืึทืœื˜ ืฆื•ื•ื™ื™ื’ืŸ 3.4.ืงืก ืื•ืŸ 3.5.ืงืก, ื•ื•ืึธืก ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื’ืขื•ื•ืขืŸ ื“ื™ืกืงืึทื ื˜ื™ื ื™ื•ื“. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืคืึธื“ืขืจืŸ ืึทื– ื“ื™ ื‘ืึทืคืึทืœืŸ ื•ื•ืขืงื˜ืึธืจ ืื™ื– ื–ื™ื™ืขืจ ืœื™ืžื™ื˜ืขื“ ืื•ืŸ ืจื™ืงื•ื•ื™ื™ืขืจื– ื“ื™ ืึทื˜ืึทืงืขืจ ืฆื• ื”ืึธื‘ืŸ ืึทืงืกืขืก ืฆื• ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื™ื ืคืจืึทืกื˜ืจืึทืงื˜ืฉืขืจ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’