ProHoster > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > ืœื™ื ื•ืงืก ืงืขืจื ืขืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืึทืœืึทื•ื– ื‘ื™ื™ืคึผืึทืกื™ื ื’ ืงืจืึธื•ื ื–ืึทืžื“ืงืึทืกื˜ืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜

ืœื™ื ื•ืงืก ืงืขืจื ืขืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืึทืœืึทื•ื– ื‘ื™ื™ืคึผืึทืกื™ื ื’ ืงืจืึธื•ื ื–ืึทืžื“ืงืึทืกื˜ืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜

ื–ื™ื›ืขืจื”ื™ื™ื˜ืก-ืคืืจืฉืขืจ ืคื•ืŸ ื’ื•ื’ืœ ื”ืื‘ืŸ ืื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจื˜ ื ืฉื•ื•ืื›ืงื™ื™ื˜ (CVE-2025-38236) ืื™ืŸ ื“ืขื ืœื™ื ื•ืงืก ืงืขืจื ืขืœ ื•ื•ืืก ืขืจืžืขื’ืœื™ื›ื˜ ืคืจื™ื•ื•ื™ืœืขื’ื™ืข ืขืกืงืืœืืฆื™ืข. ืฆื•ื•ื™ืฉืŸ ืื ื“ืขืจืข ื–ืื›ืŸ, ืขืจืžืขื’ืœื™ื›ื˜ ื“ื™ ืฉื•ื•ืื›ืงื™ื™ื˜ ืฆื• ื‘ื™ื™ืคึผืึทืกืŸ ื“ืขื ื–ืึทืžื“ืงืึทืกื˜ืŸ ืื™ื–ืึธืœืึทืฆื™ืข ืžืขืงืึทื ื™ื–ื ื’ืขื ื™ืฆื˜ ืื™ืŸ ื’ื•ื’ืœ ืงืจืึธื•ื ืื•ืŸ ื“ืขืจื’ืจื™ื™ื›ืŸ ืงืขืจื ืขืœ-ืœืขื•ื•ืขืœ ืงืึธื“ ืื•ื™ืกืคื™ืจื•ื ื’ ื•ื•ืขืŸ ืื•ื™ืกืคื™ืจื ื“ื™ืง ืงืึธื“ ืื™ืŸ ื“ืขื ืงืึธื ื˜ืขืงืกื˜ ืคื•ืŸ ืึทืŸ ืื™ื–ืึธืœื™ืจื˜ืŸ ืงืจืึธื•ื ืจืขื ื“ืขืจื™ื ื’ ืคึผืจืึธืฆืขืก (ืœืžืฉืœ, ื•ื•ืขืŸ ืžืขืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ืจื˜ ืึทืŸ ืึทื ื“ืขืจ ืฉื•ื•ืื›ืงื™ื™ื˜ ืื™ืŸ ืงืจืึธื•ื). ื“ื™ ืคึผืจืึธื‘ืœืขื ื“ืขืจืฉื™ื™ื ื˜ ืึธื ื”ื™ื™ื‘ื ื“ื™ืง ืžื™ื˜ืŸ ืœื™ื ื•ืงืก ืงืขืจื ืขืœ 6.9 ืื•ืŸ ืื™ื– ื’ืขื•ื•ืึธืจืŸ ืคืึทืจืจื™ื›ื˜ ืื™ืŸ ืœื™ื ื•ืงืก ืงืขืจื ืขืœ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ 6.1.143, 6.6.96, 6.12.36, ืื•ืŸ 6.15.5. ื ืคึผืจืึธื˜ืึธื˜ื™ืคึผ ืคื•ืŸ ื“ืขื ืขืงืกืคึผืœื•ื™ื˜ ืื™ื– ืคืึทืจืึทืŸ ืฆื• ื“ืึทื•ื ืœืึธื•ื“ืŸ.

ื“ื™ ืฉื•ื•ืึทื›ืงื™ื™ื˜ ื•ื•ืขืจื˜ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึทืŸ ืื™ืžืคึผืœืขืžืขื ื˜ืึทืฆื™ืข ื˜ืขื•ืช ืื™ืŸ ื“ืขื MSG_OOB ืคืึธืŸ, ื•ื•ืึธืก ืงืขืŸ ื’ืขืฉื˜ืขืœื˜ ื•ื•ืขืจืŸ ืคึฟืึทืจ AF_UNIX ืกืึธืงืขื˜ืก. ื“ืขืจ MSG_OOB ("out-of-band") ืคืึธืŸ ืขืจืœื•ื™ื‘ื˜ ืึทืŸ ื ืึธืš ื‘ื™ื™ื˜ ืฆื• ื–ื™ื™ืŸ ืึทื˜ืึทื˜ืฉื˜ ืฆื• ื“ื™ ื“ืึทื˜ืŸ ื•ื•ืึธืก ื•ื•ืขืจืŸ ื’ืขืฉื™ืงื˜, ื•ื•ืึธืก ื“ืขืจ ื•ืคื ืขืžืขืจ ืงืขืŸ ืœื™ื™ืขื ืขืŸ ืื™ื™ื“ืขืจ ื“ื™ ืจืขืฉื˜ ืคื•ืŸ ื“ื™ ื“ืึทื˜ืŸ ื•ื•ืขืจืŸ ื‘ืึทืงื•ืžืขืŸ. ื“ืขืจ ืคืึธืŸ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ื’ืขื•ื•ืึธืจืŸ ืื™ืŸ ื“ืขื ืœื™ื ื•ืงืก 5.15 ืงืขืจื ืขืœ ืื•ื™ืฃ ื“ืขืจ ื‘ืงืฉื” ืคื•ืŸ ืึธืจืึทืงืœ ืื•ืŸ ืื™ื– ืคืืจื’ืขืฉืœืึธื’ืŸ ื’ืขื•ื•ืึธืจืŸ ืคึฟืึทืจ ื“ืขืคึผืจืขืงืึทืฆื™ืข ืœืขืฆื˜ืŸ ื™ืึธืจ ื•ื•ื™ื™ืœ ืขืก ืื™ื– ื ื™ืฉื˜ ื‘ืจื™ื™ื˜ ื’ืขื ื™ืฆื˜ ื’ืขื•ื•ืึธืจืŸ.

ืงืจืึธื•ื'ืก ื–ืึทืžื“ืงืึทืกื˜ืŸ ืื™ืžืคึผืœืขืžืขื ื˜ืึทืฆื™ืข ื”ืึธื˜ ืขืจืœื•ื™ื‘ื˜ UNIX ืกืึธืงืขื˜ ืึธืคึผืขืจืึทืฆื™ืขืก ืื•ืŸ send()/recv() ืกื™ืกื˜ืขื ืจื•ืคืŸ, ื•ื•ืื• ื“ืขืจ MSG_OOB ืคืึธืŸ ืื™ื– ืขืจืœื•ื™ื‘ื˜ ื’ืขื•ื•ืึธืจืŸ ืฆื•ื–ืึทืžืขืŸ ืžื™ื˜ ืึทื ื“ืขืจืข ืึธืคึผืฆื™ืขืก ืื•ืŸ ืื™ื– ื ื™ืฉื˜ ื‘ืึทื–ื•ื ื“ืขืจ ื’ืขืคื™ืœื˜ืขืจื˜ ื’ืขื•ื•ืึธืจืŸ. ื ื‘ืึทื’ ืื™ืŸ ื“ืขืจ MSG_OOB ืื™ืžืคึผืœืขืžืขื ื˜ืึทืฆื™ืข ื”ืึธื˜ ืขืจืœื•ื™ื‘ื˜ ืึท "use-after-free" ื‘ืึทื“ื™ื ื’ื•ื ื’ ืฆื• ืคึผืึทืกื™ืจืŸ ื ืึธืš ื“ื•ืจื›ืคื™ืจืŸ ืึท ื’ืขื•ื•ื™ืกืข ืกื™ืงื•ื•ืึทื ืก ืคื•ืŸ ืกื™ืกื˜ืขื ืจื•ืคืŸ: char dummy; int socks[2]; socketpair(AF_UNIX, SOCK_STREAM, 0, socks); send(socks[1], "A", 1, MSG_OOB); recv(socks[0], &dummy, 1, MSG_OOB); send(socks[1], "A", 1, MSG_OOB); recv(socks[0], &dummy, 1, MSG_OOB); send(socks[1], "A", 1, MSG_OOB); recv(socks[0], "A", 1, MSG_OOB); recv(socks[0], &dummy, 0, 1); ืจืขืงืฐ(ื–ืืงืŸ[XNUMX], &ื“ืึทืžื™, XNUMX, MSG_OOB);

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’