ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ FreeBSD ื•ื•ืึธืก ืœืึธื–ืŸ ืื™ืจ ืฆื• ื‘ื™ื™ืคึผืึทืก ื˜ื•ืจืžืข ืจื™ืกื˜ืจื™ืงืฉืึทื ื–

ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ ื˜ื•ืจืžืข ืกื™ืกื˜ืขื ืคื•ืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš ื“ื™ FreeBSD ืคึผืจื•ื™ืขืงื˜:

  • CVE-2020-25582 ืื™ื– ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื“ื–ืฉืึทil_attach ืกื™ืกื˜ืขื ืจื•ืคืŸ, ื“ื™ื–ื™ื™ื ื“ ืฆื• ืฆื•ื˜ืฉืขืคึผืขืŸ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืคึผืจืึทืกืขืกืึทื– ืฆื• ื™ื’ื–ื™ืกื˜ื™ื ื’ ื˜ื•ืจืžืข ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืึทืงืขืจื– ื•ื•ืขืŸ ืื™ืจ ืจื•ืคืŸ jail_attach ื ื™ืฆืŸ ื“ื™ ื“ื–ืฉืขืงืกืขืง ืึธื“ืขืจ ืงื™ืœืœืœืœ ืงืึทืžืึทื ื“ื–, ืื•ืŸ ืึทืœืึทื•ื– ืึท ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืคึผืจืึธืฆืขืก ืืคื’ืขื–ื•ื ื“ืขืจื˜ ืื™ืŸ ื“ื™ ื˜ื•ืจืžืข ืฆื• ื˜ื•ื™ืฉืŸ ื–ื™ื™ืŸ ื•ื•ืึธืจืฆืœ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ืคื•ืœ ืึทืงืกืขืก ืฆื• ืึทืœืข ื˜ืขืงืขืก ืื•ืŸ ื“ื™ื™ืจืขืงื˜ืขืจื™ื– ืื•ื™ืฃ ื“ื™ ืกื™ืกื˜ืขื.
  • CVE-2020-25581 - ืึท ืจืึทืกืข ืฆื•ืฉื˜ืึทื ื“ ื•ื•ืขืŸ ืจื™ืžื•ื•ื•ื™ื ื’ ืคึผืจืึทืกืขืกืึทื– ื ื™ืฆืŸ ื“ื™ ื“ื–ืฉืึทื™ืœ_ืจืขืžืึธื•ื•ืข ืกื™ืกื˜ืขื ืจื•ืคืŸ ืึทืœืึทื•ื– ืึท ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืคึผืจืึธืฆืขืก ืคืœื™ืกื ื“ื™ืง ืื™ืŸ ืึท ื˜ื•ืจืžืข ืฆื• ื•ื™ืกืžื™ื™ื“ืŸ ื‘ืึทื–ื™ื™ึทื˜ื™ืงื•ื ื’ ื•ื•ืขืŸ ื“ื™ ื˜ื•ืจืžืข ืื™ื– ืคืึทืจืžืึทื›ืŸ ืึทืจืึธืคึผ ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ืคื•ืœ ืึทืงืกืขืก ืฆื• ื“ื™ ืกื™ืกื˜ืขื ื“ื•ืจืš ื“ืขื•ื•ืคืก ื•ื•ืขืŸ ื“ื™ ื˜ื•ืจืžืข ืื™ื– ื“ืขืจื ืึธืš ืกื˜ืึทืจื˜ืขื“ ืžื™ื˜ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื•ื•ืึธืจืฆืœ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ, ืžื™ื˜ ื“ืขื ืžืึธืžืขื ื˜ ื•ื•ืขืŸ ื“ืขื•ื•ืคืก ืื™ื– ืฉื•ื™ืŸ ืžืึธื•ื ื˜ืขื“ ืคึฟืึทืจ ื˜ื•ืจืžืข, ืึธื‘ืขืจ ื“ื™ ืจืขื’ื•ืœื™ืจืŸ ืคื•ืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜ ื–ืขื ืขืŸ ื ืึธืš ื ื™ืฉื˜ ื’ืขื•ื•ืขื ื“ื˜.

ืึทื“ื™ืฉื ืึทืœื™, ืื™ืจ ืงืขื ืขืŸ ื˜ืึธืŸ ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2020-25580) ืื™ืŸ ื“ื™ PAM ืžืึธื“ื•ืœืข pam_login_access, ื•ื•ืึธืก ืื™ื– ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’ ื“ื™ ืœืึธื’ื™ืŸ_ืึทืงืกืขืก ื˜ืขืงืข, ื•ื•ืึธืก ื“ื™ืคื™ื™ื ื– ื“ื™ ืึทืงืกืขืก ื›ึผืœืœื™ื ืคึฟืึทืจ ื™ื•ื–ืขืจื– ืื•ืŸ ื’ืจื•ืคึผืขืก ื’ืขื•ื•ืขื ื“ื˜ ื•ื•ืขืŸ ืœืึธื’ื™ื ื’ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื (ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ืœืึธื’ื™ืŸ ื“ื•ืจืš ื“ื™ ืงืึทื ืกืึธื•ืœ, sshd ืื•ืŸ telnetd ืื™ื– ืขืจืœื•ื™ื‘ื˜). ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ื™ื™ืคึผืึทืก ืœืึธื’ื™ืŸ_ืึทืงืกืขืก ืจื™ืกื˜ืจื™ืงืฉืึทื ื– ืื•ืŸ ืงืœืึธืฅ ืื™ืŸ ื˜ืจืึธืฅ ื“ืขื ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ืคืึทืจื•ื•ืขืจืŸ ื›ึผืœืœื™ื.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ 13.0-STABLE, 12.2-STABLE ืื•ืŸ 11.4-STABLE ืฆื•ื•ื™ื™ื’ืŸ, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืื™ืŸ ื“ื™ FreeBSD 12.2-RELEASE-p4 ืื•ืŸ 11.4-RELEASE-p8 ืงืขืจืขืงื˜ื™ื•ื• ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ.

ืžืงื•ืจ: opennet.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster