ื ืืืึทืื ืขืจืึทืืืืืื (CVE-2022-37706) ืืื ืืืืขื ืึทืคืืื ืืื ืื ืืฉืืื ืืึทื ืืฆืขืจ ืกืืืืืืข ืืืึธืก ืึทืืึทืื ืึทื ืึทื ืคึผืจืืืืืืึทืืืฉื ืืืืข ืืึทื ืืฆืขืจ ืฆื ืืืกืคืืจื ืงืึธื ืืื ืืืึธืจืฆื ืจืขืื. ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ื ืึธื ื ืืฉื ืคืึทืจืคืขืกืืืงื (0-ืืึธื), ืึธืืขืจ ืขืก ืืื ืฉืืื ืึทื ืขืงืกืคึผืืืื ืื ืืืฆื ืืื ืืขื ืฆืืืืจ ืคืขืื, ืืขืกืืขื ืืื Ubuntu 22.04.
ืืขืจ ืคึผืจืึธืืืขื ืืื ืืื ืื Enlightenment_sys ืขืงืกืขืงืืืึทืืืข, ืืืึธืก ืฉืืคึผืก ืืื ืื ืกืืื ืืืึธืจืฆื ืคืึธื ืืื ืคึผืขืจืคืึธืจืื ืืืืขืจ ืืขืจืืืืื ืงืึทืืึทื ืื, ืึทืืึท ืืื ืืึทืื ืืื ื ืื ืคืึธืจ ืืื ืื ืืืจื ื ืืฆื, ืืืจื ืึท ืจืืคื ืฆื ืกืืกืืขื (). ืจืขืื ืฆื ืืขืจ ืคืึทืืฉ ืึธืคึผืขืจืึทืฆืืข ืคืื โโโโืื ืคึฟืื ืงืฆืืข ืืืึธืก ืืืฉืขื ืขืจืืืฅ ืื ืฉืืจืืงื ืืืจืืืขืืื ืืขื ืฆื ืื ืกืืกืืขื () ืจืืคื, ืงืืืึธืืขืก ืืขื ืขื ืฉื ืืึทืื ืคืื ืื ืึทืจืืืืขื ืื ืคืื ืื ืืึทืคึฟืขืื ืืึธื ืืฉื, ืืืึธืก ืงืขื ืขื ืืืื ืืขืืืืื ื ืฆื ืืืืคื ืืืื ืืืืืขื ืข ืงืึธื. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืืขื ืคืืืกื ืืืง mkdir -p /tmp/net mkdir -p "/tmp/;/tmp/exploit" echo "/bin/sh"> /tmp/exploit chmod a+x /tmp/exploit enlightenment_sys /bin/mount - o noexec,nosuid,utf8,nodev,iocharset=utf8,utf8=0,utf8=1,uid=$(id -u), โ/dev/../tmp/;/tmp/exploitโ /tmp// / ื ืขืฅ
ืจืขืื ืฆื ืืขืจ ืืึทืืืึทืืืงืื ื ืคืื ืืึธืคึผื ืงืืืึธืืขืก, ืึทื ืฉืืึธื ืคืื ืื ืกืคึผืขืกืืคืืขื ืืึทืคึฟืขื '/bin/mount ... "/dev/../tmp/;/tmp/exploit" /tmp///net' ืึท ืฉืืจืืงื ืึธื ืืึธืคึผื ืงืืืึธืืขืก ืืืขื ืืืื ืืืจืืืขืืื ืืขื ืฆื ืื ืกืืกืืขื () ืคึฟืื ืงืฆืืข ' /bin/mount โฆ /dev/../tmp/;/tmp/exploit /tmp///net', ืืืึธืก ืืืขื ืคืึทืจืฉืึทืคื ืื ืืึทืคึฟืขื '/tmp/exploit /tmp///net ' ืฆื ืืืื ืขืงืกืึทืงืืืืึทื ืกืขืคึผืขืจืึทืืื ืึทื ืฉืืึธื ืคืื ืคึผืจืึทืกืขืกื ืืื ืึท ืืืื ืคืื ืื ืืืขื ืฆื ืืืื. ืื ืฉืืจืืช "/dev/../tmp/" ืืื "/tmp///net" ืืขื ืขื ืืืืกืืขืจืืืืืื ืฆื ืืืืคึผืึทืก ืึทืจืืืืขื ื ืงืึธื ืืจืึธืืืจืื ื ืคึฟืึทืจ ืื ืืืจื ืืึทืคึฟืขื ืืื enlightenment_sys (ืื ืืืจื ืืืื ืืืื ืึธื ืืืืื ืืื /dev/ ืืื ืคืื ื ืฆื ืึท ืืืืืกืืื ื ืืขืงืข, ืืื ืื ืืจืื "/" ืืืชืืืช ืืื ืื ืืืจื ืคืื ื ืืขื ืขื ืกืคึผืขืกืืคืืขื ืฆื ืืขืจืืจืืืื ืื ืคืืจืืื ืื ืืืขื ืืจืืืก).
ืืงืืจ: opennet.ru