ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ื ืขืฅ ืึธื ืœื™ื™ื’ืŸ

ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ ืงืึธื“ ืคื•ืŸ ื“ื™ TCP-ื‘ืื–ื™ืจื˜ RDS ืคึผืจืึธื˜ืึธืงืึธืœ ื”ืึทื ื“ืœืขืจ (Reliable Datagram Socket, net/rds/tcp.c) (CVE-2019-11815), ื•ื•ืึธืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืึทืงืกืขืก ืฆื• ืึท ืฉื•ื™ืŸ ื‘ืืคืจื™ื™ื˜ ื–ื™ืงืึธืจืŸ ื’ืขื’ื ื˜ ืื•ืŸ ืึท ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜ (ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™, ื“ื™ ืžืขื’ืœืขื›ืงื™ื™ื˜ ืคื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ ื“ืขื ืคึผืจืึธื‘ืœืขื ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืื™ื– ื ื™ืฉื˜ ื™ืงืกืงืœื•ื“ื™ื“). ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ืจืึทืกืข ืฆื•ืฉื˜ืึทื ื“ ื•ื•ืึธืก ืงืขืŸ ืคึผืึทืกื™ืจืŸ ื•ื•ืขืŸ ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ื“ื™ rds_tcp_kill_sock ืคื•ื ืงืฆื™ืข ื‘ืฉืขืช ื•ื™ืกืžืขืงืŸ ืกืึทืงืึทืฅ ืคึฟืึทืจ ื“ื™ ื ืขืฅ ื ืึทืžืขืกืคึผื™ื™ืก.

ืกืคึผืขืฆื™ืคื™ืงืึทืฆื™ืข NDV ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืื ื’ืขืฆื™ื™ื›ื ื˜ ื•ื•ื™ ืจื™ืžืึธื•ื˜ืœื™ ืขืงืกืคึผืœื•ื™ื˜ืึทื‘ืึทืœ ืื™ื‘ืขืจ ื“ื™ ื ืขืฅ, ืึธื‘ืขืจ ืื•ื™ื‘ ืžืฉืคื˜ืŸ ืœื•ื™ื˜ ื“ื™ ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’ ืคื™ืงืกื™ื–, ืึธืŸ ืึท ื”ื™ื’ืข ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื ืื•ืŸ ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ ืคื•ืŸ ื ืึธืžืขืŸ ืกืคึผื™ื™ืกืึทื–, ืขืก ื•ื•ืขื˜ ื ื™ื˜ ื–ื™ื™ืŸ ืžืขื’ืœืขืš ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืึท ื‘ืึทืคืึทืœืŸ ืจื™ืžืึธื•ื˜ืœื™. ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ, ืœื•ื™ื˜ ืฆื• ืžื™ื™ื ื•ื ื’ SUSE ื“ืขื•ื•ืขืœืึธืคึผืขืจืก, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื‘ืœื•ื™ื– ืœืึธื•ืงืึทืœื™; ืึธืจื’ืึทื ื™ื™ื–ื™ื ื’ ืึทืŸ ื‘ืึทืคืึทืœืŸ ืื™ื– ื’ืึทื ืฅ ืงืึธืžืคึผืœื™ืฆื™ืจื˜ ืื•ืŸ ืจื™ืงื•ื•ื™ื™ืขืจื– ื ืึธืš ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื. ืื•ื™ื‘ ืื™ืŸ NVD ื“ื™ ื’ืขืคืึทืจ ืžื“ืจื’ื” ืื™ื– ืึทืกืกืขืกืกืขื“ ื‘ื™ื™ 9.3 (CVSS v2) ืื•ืŸ 8.1 (CVSS v2) ืคื•ื ืงื˜ืŸ, ืœื•ื™ื˜ ื“ื™ SUSE ืจืึทื ื’, ื“ื™ ื’ืขืคืึทืจ ืื™ื– ืึทืกืกืขืกืกืขื“ ืžื™ื˜ 6.4 ืคื•ืŸ 10 ืคื•ื ืงื˜ืŸ.

Ubuntu ืคืืจืฉื˜ื™ื™ืขืจืก ืื•ื™ืš ืึทืคึผืจื™ืฉื™ื™ื™ื˜ื™ื“ ื“ื™ ื’ืขืคืึทืจ ืคื•ืŸ ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื”ืืœื˜ืŸ ืžืขืกื™ืง. ืื™ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฆื™ื™ื˜, ืื™ืŸ ืœื•ื™ื˜ ืžื™ื˜ ื“ื™ CVSS v3.0 ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’, ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืึทืกื™ื™ื ื“ ืึท ื”ื•ื™ืš ืžื“ืจื’ื” ืคื•ืŸ ื‘ืึทืคืึทืœืŸ ืงืึทืžืคึผืœืขืงืกื™ื˜ื™ ืื•ืŸ ื“ื™ ืขืงืกืคึผืœื•ื™ื˜ืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืึทืกื™ื™ื ื“ ื‘ืœื•ื™ื– 2.2 ืคื•ื ืงื˜ืŸ ืคื•ืŸ 10.

ืื•ื™ื‘ ืžืฉืคื˜ืŸ ืœื•ื™ื˜ ื‘ืึทืจื™ื›ื˜ ืคึฟื•ืŸ ืกื™ืกืงืึธ, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืจื™ืžืึธื•ื˜ืœื™ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื“ื•ืจืš ืฉื™ืงืŸ ื˜ืงืคึผ ืคึผืึทืงื™ืฅ ืฆื• ืืจื‘ืขื˜ืŸ ื ืขืฅ ื‘ืึทื“ื™ื ื•ื ื’ืก ืจื“ืก ืื•ืŸ ืขืก ืื™ื– ืฉื•ื™ืŸ ืึท ืคึผืจืึธื•ื˜ืึทื˜ื™ื™ืคึผ ืคื•ืŸ ื“ื™ ืขืงืกืคึผืœื•ื™ื˜. ื“ื™ ืžืึธืก ื•ื•ืึธืก ื“ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืงืึธืจืึทืกืคึผืึทื ื“ื– ืฆื• ื“ืขืจ ืคืึทืงื˜ ืื™ื– ื ืึธืš ื ื™ืฉื˜ ืงืœืึธืจ; ื˜ืึธืžืขืจ ื“ืขืจ ื‘ืึทืจื™ื›ื˜ ื‘ืœื•ื™ื– ืึทืจื˜ื™ืกื˜ื™ืงืœื™ ืจืึธืžืขืŸ ื“ื™ ืึทืกืึทืžืคึผืฉืึทื ื– ืคื•ืŸ NVD. ื“ื•ืจืš ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื“ื™ VulDB ืขืงืกืคึผืœื•ื™ื˜ ืื™ื– ื ืึธืš ื ื™ืฉื˜ ื‘ืืฉืืคืŸ ืื•ืŸ ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ื‘ืœื•ื™ื– ืœืึธื•ืงืึทืœื™ ืขืงืกืคึผืœื•ื™ื˜ืึทื“.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืืจื•ื™ืก ืื™ืŸ ืงืขืจื ืึทืœื– ืื™ื™ื“ืขืจ 5.0.8 ืื•ืŸ ืื™ื– ืืคื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ืžืึทืจืฅ ืงืขืจืขืงืฉืึทืŸ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ืงืขืจืŸ 5.0.8. ืื™ืŸ ืจื•ื‘ึฟ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื“ื™ ืคึผืจืึธื‘ืœืขื ื‘ืœื™ื™ื‘ื˜ ืึทื ืจื™ื–ืึทืœื•ื•ื“ (ื“ืขื‘ื™ืึทืŸ, rhel, ื•ื‘ื•ื ื˜ื•, sususe). ื“ื™ ืคืึทืจืจื™ื›ื˜ืŸ ืื™ื– ื‘ืืคืจื™ื™ื˜ ืคึฟืึทืจ SLE12 SP3, openSUSE 42.3 ืื•ืŸ ืคืขื“ืึธืจืึท.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’