æåã«æã£ã¦ããã¨ä»åã¯ä¸äººåãã®è¨äºã§ã¯ãªãã§ããé¢ç½ãã£ãã®ã§èªåãå¿ããªãããã«ã¾ã¨ãã¦ããã ãã§ãã æ¬è¨äºã®ä½ç½®ä»ã ã¯ããã« çºè¦çµç·¯ CRCã®ã¨ã©ã¼ HTTPã¢ã¯ã»ã¹ãã° å£ããgzipã®trailerãè¦ã¦ã¿ã å£ãããã¡ã¤ã«ã®æ³åæ§ æ次ãã°ãã¡ã¤ã«ã®çæ Linuxã«ã¼ãã«ã®ãã°ã®å¯è½æ§ ãã°æ··å ¥ã®æ´å² ãã°ç ´æã®åå 8ãã¤ãã®è¬ PoCã®å¶ç´ ã¾ã¨ã æ¬è¨äºã®ä½ç½®ä»ã Dirty Pipeï¼CVE-2022-0847ï¼ä¸é¨ä½ã®æå¾ã§ãããã¼ã¯ãã¤ãä¸é¨ä½ã§è¨ãã¨ãã¼ã¯ãã¤ã ã©ã¤ã¸ã³ã°ã«ãããã¾ãããã¼ãã£ã¨ãã¼ã¯ã£ã¦ä¼¼ã¦ã¾ãããã spliceã使ã£ã¦é«éã»çã¡ã¢ãªã§GzipããZIPãä½ã 20åã§åããDirty Pipeï¼CVE-2022-0847ï¼ Dirty Pipeï¼CVE-2022-0847ï¼ã®çºè¦çµç·¯ãé¢ç½ãã£ãï¼æ¬è¨äºï¼ ä¸ã®1, 2ãåæç¥èã¨
{{#tags}}- {{label}}
{{/tags}}