{"id":520,"date":"2023-07-15T22:20:01","date_gmt":"2023-07-15T14:20:01","guid":{"rendered":"https:\/\/h4ckm310n.com\/?p=520"},"modified":"2023-07-17T22:42:13","modified_gmt":"2023-07-17T14:42:13","slug":"%e8%a1%8d%e7%94%9f%e5%ad%a6%e4%b9%a0%ef%bc%9acve-2019-16884%e4%b8%8ecve-2020-15257%e7%9a%84%e5%88%a9%e7%94%a8combo","status":"publish","type":"post","link":"https:\/\/h4ckm310n.com\/?p=520","title":{"rendered":"\u884d\u751f\u5b66\u4e60\uff1aCVE-2019-16884\u4e0eCVE-2020-15257\u7684\u5229\u7528combo"},"content":{"rendered":"

\u5047\u8bbe\u4e00\u79cd\u60c5\u51b5\uff0c\u5bb9\u5668\u7ba1\u7406\u8005\u4e3a\u5171\u4eab\u7f51\u7edc\u7684\u5bb9\u5668\u8bbe\u7f6e\u4e86AppArmor\uff0c\u4f7f\u5bb9\u5668\u5185\u90e8\u7684\u8fdb\u7a0b\u65e0\u6cd5\u8bbf\u95ee\u62bd\u8c61socket\uff0c\u6b64\u65f6\u5373\u4fbfcontainerd-shim\u7684socket\u66b4\u9732\u5728\u5bb9\u5668\u4e2d\uff0c\u4e5f\u4e0d\u4f1a\u5bf9\u5bbf\u4e3b\u9020\u6210\u5a01\u80c1\u3002\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u5982\u679c\u5b58\u5728CVE-2019-16884\u53ef\u4ee5\u5229\u7528\uff0c\u5c31\u53ef\u4ee5\u7ed5\u8fc7AppArmor\u7684\u9650\u5236\u3002<\/p>\n

\u524d\u7f6e\u9605\u8bfb\uff1a
\nCVE-2020-15257\u5b66\u4e60<\/a>
\nCVE-2019-16884\u5b66\u4e60<\/a><\/p>\n


\n\u590d\u73b0\u7684\u73af\u5883\u8ddf\u4e4b\u524dCVE-2020-15257\u7684\u590d\u73b0\u73af\u5883\u76f8\u540c\uff0c\u4e0d\u8fc7containerd 1.3.7\u81ea\u5e26\u7684runc\u5df2\u7ecf\u4fee\u590d\u4e86CVE-2019-16884\uff0c\u6211\u53c8\u61d2\u5f97\u88c5\u56de\u4ee5\u524d\u76841.2.x\uff0c\u6240\u4ee5\u6211\u76f4\u63a5\u4eceGitHub\u4e0b\u8f7d\u4e86\u4e00\u4e2a1.0.0-rc8\u7248\u672c\u7684runc\u66ff\u6362\u6389\u4e86\u3002<\/p>\n

\u9996\u5148\u521b\u5efa\u4e00\u4e2aAppArmor\u914d\u7f6e\uff0c\u8fd9\u4e2a\u914d\u7f6e\u4f1a\u62d2\u7edd\u6240\u6709\u5bf9\u62bd\u8c61socket\u7684\u8bbf\u95ee\uff1a<\/p>\n

#include <tunables\/global>\r\n\r\nprofile testprofile flags=(attach_disconnected,mediate_deleted) {\r\n    #include <abstractions\/base>\r\n    file,\r\n    network,\r\n    deny unix addr=@**,\r\n}\r\n<\/pre>\n
\u7528\u8fd9\u4e2a\u914d\u7f6e\u521b\u5efa\u4e00\u4e2a\u5171\u4eab\u5bbf\u4e3b\u7f51\u7edc\u7684\u5bb9\u5668\uff0c\u8fd0\u884cexp\u53ef\u4ee5\u53d1\u73b0\u65e0\u6cd5\u8bbf\u95ee\uff1a
\n\"\"<\/p>\n
\u91c7\u7528\u4e4b\u524dCVE-2019-16884\u63d0\u5230\u7684\u6b65\u9aa4\u521b\u5efa\u4e00\u4e2a\u6076\u610f\u955c\u50cf\uff08\u9700\u8981\u63d0\u524d\u628aexp\u548cshell\u653e\u5165root\u76ee\u5f55\u4e2d\u518dbuild\uff09\uff0c\u53ef\u4ee5\u53d1\u73b0exp\u53c8\u80fd\u6b63\u5e38\u8fd0\u884c\u4e86\uff0c\u8bf4\u660e\u6210\u529f\u7ed5\u8fc7\u4e86AppArmor\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5047\u8bbe\u4e00\u79cd\u60c5\u51b5\uff0c\u5bb9\u5668\u7ba1\u7406\u8005\u4e3a\u5171\u4eab\u7f51\u7edc\u7684\u5bb9\u5668\u8bbe\u7f6e\u4e86AppArmor\uff0c\u4f7f\u5bb9\u5668\u5185\u90e8\u7684\u8fdb\u7a0b\u65e0\u6cd5\u8bbf\u95ee\u62bd\u8c61socket\uff0c\u6b64\u65f6 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[16,6],"tags":[],"class_list":["post-520","post","type-post","status-publish","format-standard","hentry","category-16","category-6"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"h4ckm310n","author_link":"https:\/\/h4ckm310n.com\/?author=1"},"uagb_comment_info":0,"uagb_excerpt":"\u5047\u8bbe\u4e00\u79cd\u60c5\u51b5\uff0c\u5bb9\u5668\u7ba1\u7406\u8005\u4e3a\u5171\u4eab\u7f51\u7edc\u7684\u5bb9\u5668\u8bbe\u7f6e\u4e86AppArmor\uff0c\u4f7f\u5bb9\u5668\u5185\u90e8\u7684\u8fdb\u7a0b\u65e0\u6cd5\u8bbf\u95ee\u62bd\u8c61socket\uff0c\u6b64\u65f6…","_links":{"self":[{"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=\/wp\/v2\/posts\/520","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=520"}],"version-history":[{"count":1,"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=\/wp\/v2\/posts\/520\/revisions"}],"predecessor-version":[{"id":522,"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=\/wp\/v2\/posts\/520\/revisions\/522"}],"wp:attachment":[{"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=520"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=520"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/h4ckm310n.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=520"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}