¡¾Îó²îͨ¸æ¡¿Gentoo Soko SQL×¢ÈëÎó²î£¨CVE-2023-28424£©

Ðû²¼Ê±¼ä 2023-06-29

Ò»¡¢Îó²î¸ÅÊö

CVE   ID

CVE-2023-28424

·¢Ã÷ʱ¼ä

2023-06-29

Àà    ÐÍ

SQL×¢Èë

µÈ    ¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

¹¥»÷ÖØÆ¯ºó

µÍ

Óû§½»»¥

ÎÞ

PoC/EXP


ÔÚҰʹÓÃ

δ·¢Ã÷

 

Soko ÊÇÒ»¸öΪpackages.gentoo.orgÌṩ֧³ÖµÄGoÈí¼þÄ£¿£¿£¿£¿£¿£¿£¿é£¬£¬£¬£¬ÎªÓû§ÌṩÁËÒ»ÖÖ¼òÆÓµÄÒªÁìÀ´ËÑË÷¿ÉÓÃÓÚGentoo Linux ¿¯ÐаæµÄ²î±ðPortageÈí¼þ°ü¡£¡£¡£¡£¡£¡£

6ÔÂ29ÈÕ£¬£¬£¬£¬¼øºÚµ£±£ÍøVSRC¼à²âµ½ SokoÖÐÐÞ¸´Á˶à¸öSQL×¢ÈëÎó²î£¨Í³³ÆÎªCVE-2023-28424£©£¬£¬£¬£¬ÆäCVSSv3ÆÀ·ÖΪ9.1£¬£¬£¬£¬ÏêÇéÈçÏ£º

Gentoo Soko SQL×¢ÈëÎó²î

Soko°æ±¾1.0.2 ֮ǰ£¬£¬£¬£¬ÔÚpkg/app/handler/packages/search.goÖÐʵÏÖµÄÁ½¸ö°üËÑË÷´¦Öóͷ£³ÌÐòsearchºÍSearchFeedÈÝÒ×Êܵ½Í¨¹ýq²ÎÊýÖ´ÐеÄSQL×¢Èë¹¥»÷£¬£¬£¬£¬¿ÉÄܵ¼ÖÂδ¾­Éí·ÝÑéÖ¤µÄÍþвÕßÔÚhttps://packages.gentoo.org/ÉÏÖ´ÐÐí§Òâ SQL ÅÌÎÊ£¬£¬£¬£¬ÀÖ³ÉʹÓøÃÎó²î¿ÉÄܵ¼ÖÂÃô¸ÐÐÅϢй¶»òÔÚPostgreSQL ÈÝÆ÷µÄÉÏÏÂÎÄÖÐÖ´ÐдúÂë¡£¡£¡£¡£¡£¡£

GraphiQLÆÊÎöÆ÷ PackageSearch SQL ×¢ÈëÎó²î

Soko°æ±¾1.0.3֮ǰ£¬£¬£¬£¬ÔÚpkg/api/graphql/resolvers/resolver.goÖÐʵÏÖµÄGraphiQLÆÊÎöÆ÷PackageSearchÈÝÒ×Êܵ½Í¨¹ýsearchTerm²ÎÊýÖ´ÐеÄSQL×¢Èë¹¥»÷£¬£¬£¬£¬¿ÉÄܵ¼ÖÂδ¾­Éí·ÝÑéÖ¤µÄÍþвÕßÔÚhttps://packages.gentoo.org/ÉÏÖ´ÐÐí§Òâ SQL ÅÌÎÊ£¬£¬£¬£¬ÀÖ³ÉʹÓøÃÎó²î¿ÉÄܵ¼ÖÂÃô¸ÐÐÅϢй¶»òÔÚPostgreSQL ÈÝÆ÷µÄÉÏÏÂÎÄÖÐÖ´ÐдúÂë¡£¡£¡£¡£¡£¡£

  

¶þ¡¢Ó°Ïì¹æÄ£

Gentoo Soko°æ±¾£º< 1.0.3

 

Èý¡¢Çå¾²²½·¥

3.1 Éý¼¶°æ±¾

ÏÖÔÚÕâЩÎó²îÒѾ­ÐÞ¸´£¬£¬£¬£¬ÊÜÓ°ÏìSokoÓû§¿ÉÉý¼¶µ½Soko°æ±¾£º>=1.0.3¡£¡£¡£¡£¡£¡£

ÏÂÔØÁ´½Ó£º

https://github.com/gentoo/soko/tags

3.2 ÔÝʱ²½·¥

ÔÝÎÞ¡£¡£¡£¡£¡£¡£

3.3 ͨÓý¨Òé

l  °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬ïÔ̭ϵͳÎó²î£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£¡£¡£

l  ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£¡£¡£¡£

l  ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£¡£¡£¡£

l  ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£¡£¡£¡£

l  ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£¡£¡£¡£

3.4 ²Î¿¼Á´½Ó

https://github.com/gentoo/soko/security/advisories/GHSA-gc2x-86p3-mxg2

https://github.com/gentoo/soko/security/advisories/GHSA-45jr-w89p-c843

https://www.sonarsource.com/blog/why-orms-and-prepared-statements-cant-always-win/

 

ËÄ¡¢°æ±¾ÐÅÏ¢

°æ±¾

ÈÕÆÚ

±¸×¢

V1.0

2023-06-29

Ê×´ÎÐû²¼

  

Îå¡¢¸½Â¼

5.1 ¼øºÚµ£±£Íø¼ò½é

¼øºÚµ£±£Íø½¨ÉèÓÚ1996Ä꣬£¬£¬£¬ÊÇÓÉÁôÃÀ²©Ê¿ÑÏÍû¼ÑŮʿ½¨ÉèµÄ¡¢ÓµÓÐÍêÈ«×ÔÖ÷֪ʶ²úȨµÄÐÅÏ¢Çå¾²¸ß¿Æ¼¼ÆóÒµ¡£¡£¡£¡£¡£¡£ÊǺ£ÄÚ×î¾ßʵÁ¦µÄÐÅÏ¢Çå¾²²úÆ·¡¢Ç徲ЧÀͽâ¾ö¼Æ»®µÄÁ캽ÆóÒµÖ®Ò»¡£¡£¡£¡£¡£¡£

¹«Ë¾×ܲ¿Î»ÓÚ±±¾©ÊÐÖйشåÈí¼þÔ°¼øºÚµ£±£Íø´óÏ㬣¬£¬£¬¹«Ë¾Ô±¹¤6000ÓàÈË£¬£¬£¬£¬Ñз¢ÍŶÓ1200ÓàÈË, ÊÖÒÕЧÀÍÍŶÓ1300ÓàÈË¡£¡£¡£¡£¡£¡£ÔÚÌìϸ÷Ê¡¡¢ÊС¢×ÔÖÎÇøÉèÁ¢·ÖÖ§»ú¹¹ÁùÊ®¶à¸ö£¬£¬£¬£¬ÓµÓÐÁýÕÖÌìϵÄÏúÊÛϵͳ¡¢ÇþµÀϵͳºÍÊÖÒÕÖ§³Öϵͳ¡£¡£¡£¡£¡£¡£¹«Ë¾ÓÚ2010Äê6ÔÂ23ÈÕÔÚÉîÛÚÖÐС°å¹ÒÅÆÉÏÊС£¡£¡£¡£¡£¡££¨¹ÉƱ´úÂ룺002439£©

¶àÄêÀ´£¬£¬£¬£¬¼øºÚµ£±£ÍøÖÂÁ¦ÓÚÌṩ¾ßÓйú¼Ê¾ºÕùÁ¦µÄ×ÔÖ÷Á¢ÒìµÄÇå¾²²úÆ·ºÍ×î¼Ñʵ¼ùЧÀÍ£¬£¬£¬£¬×ÊÖú¿Í»§ÖÜÈ«ÌáÉýÆäIT»ù´¡ÉèÊ©µÄÇå¾²ÐÔºÍÉú²úЧÄÜ£¬£¬£¬£¬Îª´òÔìºÍÌáÉý¹ú¼Ê»¯µÄÃñ×åÐÅÏ¢Çå¾²¹¤ÒµÁì¾üÆ·ÅÆ¶ø²»Ð¸Æð¾¢¡£¡£¡£¡£¡£¡£

5.2 ¹ØÓÚ¼øºÚµ£±£Íø

¼øºÚµ£±£ÍøÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄÒÑÐû²¼1000¶à¸öÎó²îͨ¸æºÍΣº¦Ô¤¾¯£¬£¬£¬£¬ÎÒÃǽ«Ò»Á¬¸ú×ÙÈ«Çò×îеÄÍøÂçÇå¾²ÊÂÎñºÍÎó²î£¬£¬£¬£¬ÎªÆóÒµµÄÐÅÏ¢Çå¾²±£¼Ý»¤º½¡£¡£¡£¡£¡£¡£

¹Ø×¢ÎÒÃÇ£º

image.png