[B! Dirty COW] kazu_levis501ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kazu_levis501 id:kazu_levis501

Dirty COWã«é–¢ã™ã‚‹kazu_levis501ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Linuxã‚«ãƒ¼ãƒãƒ«ã®è„†å¼±æ€§ã€ŒDirty COWã€ã‚’ä¿®æ£ã™ã‚‹ãƒ‘ãƒƒãƒã€Androidå‘ã‘ã«ã‚‚é…ä¿¡ - ITmedia ãƒ‹ãƒ¥ãƒ¼ã‚¹
10æœˆã«ç™ºè¦šã—ãŸã€ŒDirty COWã€ã¨å‘¼ã°ã‚Œã‚‹Linuxã‚«ãƒ¼ãƒãƒ«ã®è„†å¼±æ€§ã‚’ä¿®æ£ã™ã‚‹ãƒ‘ãƒƒãƒãŒã€Androidç«¯æœ«ãƒ¡ãƒ¼ã‚«ãƒ¼ãªã©ã®ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ã‚„ã€Googleã®ç«¯æœ«å‘ã‘ã«é…ä¿¡ã•ã‚ŒãŸã€‚ ç±³Googleã¯ç±³å›½æ™‚é–“ã®12æœˆ5æ—¥ã«å…¬é–‹ã—ãŸAndroidã®æœˆä¾‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã§ã€ã€ŒDirty COWã€ã¨å‘¼ã°ã‚Œã‚‹Linuxã‚«ãƒ¼ãƒãƒ«ã®è„†å¼±æ€§ï¼ˆCVE-2016-5195ï¼‰ã‚’ä¿®æ£ã™ã‚‹ãƒ‘ãƒƒãƒã‚’ç«¯æœ«ãƒ¡ãƒ¼ã‚«ãƒ¼ãªã©ã®ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ã‚„Googleã®ç«¯æœ«å‘ã‘ã«é…ä¿¡ã—ãŸã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ ä»Šå›žã¯2ç¨®é¡žã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒƒãƒãƒ¬ãƒ™ãƒ«ãŒå…¬é–‹ã•ã‚ŒãŸã€‚ã“ã®ã†ã¡Dirty COWã®è„†å¼±æ€§ä¿®æ£ãƒ‘ãƒƒãƒã¯ã€Œ2016-12-05ã€ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒƒãƒãƒ¬ãƒ™ãƒ«ã«å«ã¾ã‚Œã‚‹ã€‚ Dirty COWã®è„†å¼±æ€§ã¯Linuxã‚«ãƒ¼ãƒãƒ«ã«10å¹´ä»¥ä¸Šå‰ã‹ã‚‰å˜åœ¨ã—ã¦ã„ãŸã¨ã•ã‚Œã€2016å¹´10æœˆã«ç™ºè¦šã—ãŸLinuxã‚«ãƒ¼ãƒãƒ«ã®ãƒ‘ãƒƒãƒãŒ10æœˆ20æ—¥ä»˜ã§å…¬é–‹ã•ã‚ŒãŸã€‚æ‚ªç”¨ã•ã‚Œã‚Œã°roo
kazu_levis501 2016/12/07
Linuxã‚«ãƒ¼ãƒãƒ«

è„†å¼±æ€§

Dirty COW

ä¿®æ£ã™ã‚‹ãƒãƒƒãƒ

Androidå‘ã‘

é…ä¿¡
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€ã€ŒDirty COWã€è„†å¼±æ€§ã®ä¿®æ£ã¯12æœˆã®Androidãƒ‘ãƒƒãƒã¾ã§æŒã¡è¶Šã—
Googleã®11æœˆã®ã€ŒAndroid Security Bulletinã€ã§ã¯ã€æ•°å¤šãã®é‡å¤§ãªè„†å¼±æ€§ãŒä¿®æ£ã•ã‚ŒãŸã€‚ã ãŒã€æœ€è¿‘é–‹ç¤ºã•ã‚ŒãŸã€ŒLinuxã€ã®ã‚³ãƒ”ãƒ¼ã‚ªãƒ³ãƒ©ã‚¤ãƒˆï¼ˆCoWï¼‰ã«é–¢ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã€ŒDirty COWã€ã®ä¿®æ£ã¯ã€ã“ã“ã«ã¯å«ã¾ã‚Œã¦ã„ãªã„ã€‚ CVE-2016-5195ã¨ã—ã¦ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹ã“ã®Dirty COWã¯ã€Linuxã‚·ã‚¹ãƒ†ãƒ ã«å½±éŸ¿ã‚’åŠã¼ã™å¤ã„ãƒã‚°ã®ã²ã¨ã¤ã§ã€ã€ŒAndroidã€ãƒ‡ãƒã‚¤ã‚¹ã®ãƒ«ãƒ¼ãƒˆã‚¢ã‚¯ã‚»ã‚¹ã‚’ç²å¾—ã™ã‚‹ãŸã‚ã«ã‚‚åˆ©ç”¨ã§ãã‚‹ã€‚æ³¨ç›®ã™ã¹ãã¯ã€10æœˆã«é–‹ç¤ºã•ã‚ŒãŸæ™‚ç‚¹ã§ã€ã™ã§ã«ã“ã‚Œã®è„†å¼±æ€§ã‚’çªããƒ„ãƒ¼ãƒ«ãŒå‡ºå›žã£ã¦ã„ãŸã“ã¨ã ã€‚ã•ã‚‰ã«Ars TechnicaãŒå ±ã˜ãŸã‚ˆã†ã«ã€ã“ã‚Œã¯Androidã®è¤‡æ•°ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å¯¾å¿œã™ã‚‹ãƒ«ãƒ¼ãƒˆæ¨©é™å¥ªå–ãƒ„ãƒ¼ãƒ«ã¨ã—ã¦é€²åŒ–ã—ã¦ãŠã‚Šã€ä¸æ£ãªç›®çš„ã§åˆ©ç”¨ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã€‚ è¿‘æ—¥ä¸ã«è¡Œã‚ã‚Œã‚‹ã€ŒNexusã€ã¨ã€ŒPixelã€ã®ä¸¡ãƒ‡ãƒã‚¤ã‚¹å‘ã‘ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã¯ã€A
kazu_levis501 2016/11/14
Google

Dirty COW

è„†å¼±æ€§ã®ä¿®æ£

12æœˆ

Androidãƒ‘ãƒƒãƒ

æŒã¡è¶Šã—
ãƒªãƒ³ã‚¯
Googleã€Androidã®æœˆä¾‹ãƒ‘ãƒƒãƒã‚’å…¬é–‹ã€€ã€ŒDirty COWã€ã®è„†å¼±æ€§ã«ã‚‚å¯¾å‡¦
ç±³Googleã¯11æœˆ7æ—¥ã€Androidã®æœˆä¾‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚’å…¬é–‹ã—ãŸã€‚ç«¯æœ«ãƒ¡ãƒ¼ã‚«ãƒ¼ãªã©ã®ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ã«ã¯2016å¹´10æœˆ20æ—¥ã¾ã§ã«å‘ŠçŸ¥ã—ã€Pixelã‚„Nexusãªã©Googleã®ç«¯æœ«å‘ã‘ã«ã¯OTAï¼ˆç„¡ç·šçµŒç”±ï¼‰ã§ãƒ‘ãƒƒãƒã‚’é…ä¿¡ã€‚2016å¹´11æœˆ6æ—¥ä»¥é™ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒƒãƒãƒ¬ãƒ™ãƒ«ã§å…¨ã¦ã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚Œã‚‹ã€‚ ä»Šå›žã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒƒãƒãƒ¬ãƒ™ãƒ«ã¯3ç¨®é¡žã«åˆ†ã‘ã¦å…¬é–‹ã•ã‚ŒãŸã€‚ã“ã®ã†ã¡ã€Œ2016-11-01ã€ã§ã¯è¨ˆ28ä»¶ã®è„†å¼±æ€§ã‚’ä¿®æ£ã€‚ä¸ã§ã‚‚ã€ŒMediaserverã«ãŠã‘ã‚‹ãƒªãƒ¢ãƒ¼ãƒˆã‚³ãƒ¼ãƒ‰å®Ÿè¡Œã®è„†å¼±æ€§ã€ã¨ã€Œlibzipfileã«ãŠã‘ã‚‹æ¨©é™æ˜‡æ ¼ã®è„†å¼±æ€§ã€ã®2ä»¶ã¯ã€å±é™ºåº¦ãŒGoogleã®4æ®µéšŽè©•ä¾¡ã§æœ€ã‚‚é«˜ã„ã€ŒCriticalã€ã«åˆ†é¡žã•ã‚Œã¦ã„ã‚‹ã€‚ Mediaserverãªã©ã®è„†å¼±æ€§ã¯ã€æ‚ªç”¨ã•ã‚Œã‚Œã°ãƒ¡ãƒ¼ãƒ«ã‚„Webã€MMSãªã©ã‚’ä½¿ã£ã¦ãƒ¡ãƒ‡ã‚£ã‚¢ãƒ•ã‚¡ã‚¤ãƒ«ã‚’å‡¦ç†ã•ã›ã‚‹æ‰‹å£ã§ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã€ç‰¹ã«
kazu_levis501 2016/11/08
Google

Android

æœˆä¾‹ãƒãƒƒãƒ

å…¬é–‹

Dirty COW

è„†å¼±æ€§

å¯¾å‡¦
ãƒªãƒ³ã‚¯
Linuxã‚«ãƒ¼ãƒãƒ«ã«è„†å¼±æ€§ã€ŒDirty COWã€ç™ºè¦šã€ç®¡ç†è€…æ¨©é™ã‚’å–å¾—ã•ã‚Œã‚‹æã‚Œ
Linuxã‚«ãƒ¼ãƒãƒ«ã«10å¹´ä»¥ä¸Šå‰ã‹ã‚‰å˜åœ¨ã—ã¦ã„ãŸè„†å¼±æ€§ã«é–¢ã™ã‚‹æƒ…å ±ãŒå…¬é–‹ã•ã‚Œã€æ‚ªç”¨ã‚’ç‹™ã†æ”»æ’ƒã®ç™ºç”ŸãŒå ±å‘Šã•ã‚Œã¦ã„ã‚‹ã€‚Linuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³å„ç¤¾ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚’å…¬é–‹ã—ã€ç±³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿé–¢US-CERTã‚‚10æœˆ21æ—¥ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚„ç®¡ç†è€…ã«å¯¾å¿œã‚’ä¿ƒã—ãŸã€‚ è„†å¼±æ€§ã¯ã€Linuxã‚«ãƒ¼ãƒãƒ«ã®ãƒ¡ãƒ¢ãƒªã‚µãƒ–ã‚·ã‚¹ãƒ†ãƒ ã§copy-on-writeï¼ˆCOWï¼‰ã‚’å‡¦ç†ã™ã‚‹æ–¹æ³•ã«èµ·å› ã—ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.6.22ä»¥é™ãŒå½±éŸ¿ã‚’å—ã‘ã‚‹ã€‚Linuxã‚«ãƒ¼ãƒãƒ«ã®ãƒ‘ãƒƒãƒã¯10æœˆ20æ—¥ã«å…¬é–‹ã•ã‚Œã¦ãŠã‚Šã€ãƒªãƒ¼ãƒŠã‚¹ãƒ»ãƒˆãƒ¼ãƒãƒ«ã‚ºæ°ã¯ã“ã®å•é¡Œã«ã¤ã„ã¦ã€ã€Œ11å¹´å‰ã«ä¿®æ£ã‚’è©¦ã¿ãŸãŒã†ã¾ãã„ã‹ãªã‹ã£ãŸã€ã¨æ˜Žã‹ã—ã¦ã„ã‚‹ã€‚ COWã«å•é¡ŒãŒå˜åœ¨ã™ã‚‹ã“ã¨ã‹ã‚‰ã€ŒDirty COWã€ã¨å‘½åã•ã‚Œã€å°‚ç”¨æƒ…å ±ã‚µã‚¤ãƒˆãŒå…¬é–‹ã•ã‚ŒãŸã€‚åŒã‚µã‚¤ãƒˆã‚„ç±³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿé–¢CERT/CCã«ã‚ˆã‚Œã°ã€ã“ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€ç‰¹æ¨©ã‚’æŒãŸãªã„ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚ˆã‚‹ãƒªãƒ¼ãƒ‰ã‚ªãƒ³ãƒªãƒ¼
kazu_levis501 2016/10/24
Linuxã‚«ãƒ¼ãƒãƒ«

è„†å¼±æ€§

Dirty COW

ç™ºè¦š

ç®¡ç†è€…æ¨©é™

æ‰€å¾—

æã‚Œ
ãƒªãƒ³ã‚¯
1