ืขืก ืื™ื– ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ Glibc ื•ื•ืึธืก ืึทืœืึทื•ื– ืขืžืขืฆืขืจ ืึทื ื“ืขืจืฉ ืก ืคึผืจืึธืฆืขืก ืฆื• ืงืจืึทืš

ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2021-38604) ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ Glibc, ื•ื•ืึธืก ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื“ืขื ืงืจืึทืš ืคื•ืŸ ืคึผืจืึทืกืขืกืึทื– ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื ื“ื•ืจืš ืฉื™ืงืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ืึธื ื–ืึธื’ ื“ื•ืจืš ื“ื™ POSIX ืึธื ื–ืึธื’ ืงื™ื•ื– ืึทืคึผื™. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื ืึธืš ื ื™ืฉื˜ ืืจื•ื™ืก ืื™ืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–, ื•ื•ื™ื™ึทืœ ืขืก ืื™ื– ืคืึธืจืฉื˜ืขืœืŸ ื‘ืœื•ื™ื– ืื™ืŸ ืžืขืœื“ื•ื ื’ 2.34, ืืจื•ื™ืก ืžื™ื˜ ืฆื•ื•ื™ื™ ื•ื•ืึธื›ืŸ ืฆื•ืจื™ืง.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ื”ืึทื ื“ืœื™ื ื’ ืคื•ืŸ NOTIFY_REMOVED ื“ืึทื˜ืŸ ืื™ืŸ ื“ื™ mq_notify.c ืงืึธื“, ื•ื•ืึธืก ืคื™ืจืŸ ืฆื• NULL ื˜ื™ื™ึทื˜ืœ ื“ืขืจืคืขืจืึทื ืก ืื•ืŸ ืคึผืจืึธืฆืขืก ืงืจืึทืš. ื™ื ื˜ืขืจืขืกื˜ื™ื ื’ืœื™, ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืึท ืงืึทื ืกืึทืงื•ื•ืึทื ืก ืคื•ืŸ ืึท ืคืœืึธ ืื™ืŸ ืคื™ืงืกื™ืจ ืืŸ ืื ื“ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2021-33574), ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ Glibc 2.34 ืžืขืœื“ื•ื ื’. ื“ืขืจืฆื•, ืื•ื™ื‘ ื“ืขืจ ืขืจืฉื˜ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืึทื ืฅ ืฉื•ื•ืขืจ ืฆื• ื’ื•ื•ื•ืจืข ืื•ืŸ ืคืืจืœืื ื’ื˜ ืึท ืงืึธืžื‘ื™ื ืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื–ื™ื›ืขืจ ืฆื•ืฉื˜ืื ื“ืŸ, ืขืก ืื™ื– ืคื™ืœ ื’ืจื™ื ื’ืขืจ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืึท ื‘ืึทืคืึทืœืŸ ืžื™ื˜ ื“ื™ ืจื’ืข ืคึผืจืึธื‘ืœืขื.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’