Ò»¡¢·ì϶¸ÅÊö
·ìϼûû³Æ | glibc¾²Ì¬setuid·¨Ê½dlopen´úÂëÖ´Ðзì϶ |
CVE ID | CVE-2025-4802 |
·ì϶ÀàÐÍ | ´úÂëÖ´ÐÐ | ·¢ÏÖ¹¦·ò | 2025-05-20 |
·ì϶ÆÀ·Ö | 9.8 | ·ì϶µÈ¼¶ | ÑϳÁ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ÎÞ |
ÀûÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»±ØÒª |
PoC/EXP | δ¹«¿ª | ÔÚÒ°ÀûÓà | δ·¢ÏÖ |
setuid¶þ½øÔìÎļþÊÇÓµÓÐÌØÊâȨÏ޵ķ¨Ê½£¬£¬£¬£¬£¬£¬£¬£¬Äܹ»ÒÔÎļþÕ¼ÓÐÕßµÄÉí·ÝÖ´ÐÓ×£¡£¡£¡£¡£¡£dlopenÊÇÒ»¸ö¶¯Ì¬¼ÓÔØ¿âµÄº¯Êý£¬£¬£¬£¬£¬£¬£¬£¬Í¨³£ÓÃÓÚÔÚÔËÐÐʱ¼ÓÔع²Ïí¿â¡£¡£¡£¡£¡£¡£
2025Äê5ÔÂ20ÈÕ£¬£¬£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯Íż¯ÍÅVSRC¼à²âµ½glibc¾²Ì¬setuid·¨Ê½dlopen´úÂëÖ´Ðзì϶CVE-2025-4802¡£¡£¡£¡£¡£¡£¸Ã·ì϶´æÔÚÓÚGNU C¿â£¨glibc£©ÖУ¬£¬£¬£¬£¬£¬£¬£¬Ó°Ï쾲̬Á´½ÓµÄsetuid¶þ½øÔìÎļþ¡£¡£¡£¡£¡£¡£·ì϶ԴÓÚ¾²Ì¬setuid·¨Ê½ÔÚŲÓÃdlopenʱÃýÎóµØʹÓÃLD_LIBRARY_PATH»·¾³±äÁ¿²éÕÒ¹²Ïí¿â£¬£¬£¬£¬£¬£¬£¬£¬¿ÉÄܵ¼Ö¼ÓÔضñÒâ¿â²¢Ö´Ðй¥»÷Õß½ÚÔìµÄ´úÂë¡£¡£¡£¡£¡£¡£¸Ã·ì϶µÄ¿ÉÀûÓÃÐԽϵͣ¬£¬£¬£¬£¬£¬£¬£¬ËüÒªÇó·¨Ê½Îª¾²Ì¬Á´½ÓµÄsetuid·¨Ê½£¬£¬£¬£¬£¬£¬£¬£¬²¢ÇÒŲÓÃdlopen¡£¡£¡£¡£¡£¡£·ì϶¼¶±ðÑϳÁ£¬£¬£¬£¬£¬£¬£¬£¬·ì϶ÆÀ·Ö9.8·Ö¡£¡£¡£¡£¡£¡£
¶þ¡¢Ó°ÏìÁìÓò
ÔËÐÐglibc°æ±¾Îª2.27ÖÁ2.38µÄLinuxϵͳ£¨ÈçRocky Linux¡¢Debian¡¢UbuntuµÈ£©¿ÉÄÜÊܵ½Ó°Ï죬£¬£¬£¬£¬£¬£¬£¬³ö¸ñÊÇʹÓþ²Ì¬setuid¶þ½øÔìÎļþµÄϵͳ¡£¡£¡£¡£¡£¡£
Èý¡¢°²È«´ëÊ©
3.1 Éý¼¶°æ±¾
¹Ù·½ÒÑ°ä²¼°²È«¸üУ¬£¬£¬£¬£¬£¬£¬£¬½¨ÒéÊÜÓ°ÏìÓû§¾¡¿ìÉý¼¶µ½glibc 2.39»ò¸ü¸ß°æ±¾¡£¡£¡£¡£¡£¡£ÔÚDebian/UbuntuϵͳÖУºsudo apt update && sudo apt upgrade libc6ÔÚRocky Linux/CentOSϵͳÖУºsudo dnf update glibc
3.2 һʱ´ëÊ©
ÔÝÎÞ¡£¡£¡£¡£¡£¡£
3.3 ͨÓý¨Òé
? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¡£¡£¡£¡£¡£¬£¬£¬£¬£¬£¬£¬£¬Ï÷¼õϵͳ·ì϶£¬£¬£¬£¬£¬£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£¡£¡£? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔ죬£¬£¬£¬£¬£¬£¬£¬Åú¸Ä·À»ðǽսÊõ£¬£¬£¬£¬£¬£¬£¬£¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬£¬£¬£¬£¬£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬£¬£¬£¬£¬£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£¡£¡£? ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬£¬£¬£¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£¡£¡£? ¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬£¬£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò£¬£¬£¬£¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£¡£? ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£¡£¡£
3.4 ²Î¿¼Á´½Ó
https://www.openwall.com/lists/oss-security/2025/05/17/2https://sourceware.org/bugzilla/show_bug.cgi?id=32976
¾©¹«Íø°²±¸11010802024551ºÅ