Tor ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืžื™ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜

ืงืึธืจืจืขืงื˜ื™ื•ื• ืจื™ืœื™ืกื™ื– ืคื•ืŸ ื“ื™ Tor Toolkit (0.3.5.14, 0.4.4.8, 0.4.5.7), ื’ืขื ื™ืฆื˜ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ Tor ืึทื ืึทื ืึทืžืึทืก ื ืขืฅ, ื–ืขื ืขืŸ ื“ืขืจืœืื ื’ื˜. ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืขืก ืขืœื™ืžื™ื ื™ืจืŸ ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ื“ืึธืก ืื ืคืืœืŸ ืื•ื™ืฃ Tor ื ืขืฅ ื ืึธื•ื“ื–:

  • CVE-2021-28089 - ืึท ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืึธื ืžืึทื›ืŸ ืึท ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜ ืฆื• ืงื™ื™ืŸ ื˜ืึธืจ ื ืึธื•ื“ื– ืื•ืŸ ืงืœื™ื™ืึทื ืฅ ื“ื•ืจืš ืงืจื™ื™ื™ื˜ื™ื ื’ ืึท ื’ืจื•ื™ืก ืงืคึผื• ืžืึทืกืข ื•ื•ืึธืก ืึทืงืขืจื– ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ื–ื™ื›ืขืจ ื˜ื™ื™ืคึผืก ืคื•ืŸ ื“ืึทื˜ืŸ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืžืขืจืกื˜ ื’ืขืคืขืจืœืขืš ืคึฟืึทืจ ืจื™ืœื™ื™ื– ืื•ืŸ Directory ืื•ื™ื˜ืึธืจื™ื˜ืขื˜ ืกืขืจื•ื•ืขืจืก, ื•ื•ืึธืก ื–ืขื ืขืŸ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืคื•ื ืงื˜ืŸ ืฆื• ื“ื™ ื ืขืฅ ืื•ืŸ ื–ืขื ืขืŸ ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ื˜ื™ื ื’ ืื•ืŸ ื˜ืจืึทื ืกืžื™ื˜ื™ื ื’ ืฆื• ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืึท ืจืฉื™ืžื” ืคื•ืŸ ื’ื™ื™ื˜ื•ื•ื™ื™ื– ื•ื•ืึธืก ืคึผืจืึธืฆืขืก ืคืึทืจืงืขืจ. Directory ืกืขืจื•ื•ืขืจืก ื–ืขื ืขืŸ ื“ื™ ื™ื–ื™ืึทืกื˜ ืฆื• ื‘ืึทืคืึทืœืŸ ื•ื•ื™ื™ึทืœ ื–ื™ื™ ืœืึธื–ืŸ ื•ื•ืขืจ ืขืก ื™ื– ืฆื• ื•ืคึผืœืึธืึทื“ ื“ืึทื˜ืŸ. ืึท ื‘ืึทืคืึทืœืŸ ืงืขื’ืŸ ืจื™ืœื™ื™ื– ืื•ืŸ ืงืœื™ื™ืึทื ืฅ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืึธืจื’ืึทื ื™ื–ื™ืจื˜ ื“ื•ืจืš ื“ืึทื•ื ืœืึธื•ื“ื™ื ื’ ื“ื™ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืงืึทืฉ.
  • CVE-2021-28090 - ืึท ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืคืึทืจืฉืึทืคืŸ ืึท ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืกืขืจื•ื•ืขืจ ืฆื• ืงืจืึทืš ื“ื•ืจืš ื˜ืจืึทื ืกืžื™ื˜ื™ื ื’ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ื“ื™ื˜ืึทื˜ืฉื˜ ื›ืกื™ืžืข, ื•ื•ืึธืก ืื™ื– ื’ืขื ื™ืฆื˜ ืฆื• ืงืึทื ื•ื•ื™ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ืฉื˜ืึทื˜ ืคื•ืŸ ืงืึธื ืกืขื ืกื•ืก ืื•ื™ืฃ ื“ื™ ื ืขืฅ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’