{"id":3464,"date":"2023-04-11T14:56:15","date_gmt":"2023-04-11T10:26:15","guid":{"rendered":"https:\/\/soroosheamniyat.ir\/?p=3464"},"modified":"2023-04-11T14:56:15","modified_gmt":"2023-04-11T10:26:15","slug":"%da%a9%d8%b4%d9%81-%d9%86%d9%82%d8%b5-%d8%a7%d8%ac%d8%b1%d8%a7%db%8c-%da%a9%d8%af-%d8%a7%d8%b2-%d8%b1%d8%a7%d9%87-%d8%af%d9%88%d8%b1-%d8%ad%db%8c%d8%a7%d8%aa%db%8c-%d8%af%d8%b1-%da%a9%d8%aa%d8%a7","status":"publish","type":"post","link":"https:\/\/soroosheamniyat.ir\/?p=3464","title":{"rendered":"\u06a9\u0634\u0641 \u0646\u0642\u0635 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062d\u06cc\u0627\u062a\u06cc \u062f\u0631 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 Sandbox vm2 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646"},"content":{"rendered":"

???????? ????? ???? ????? ???? ??????? Sandbox vm2 ?? ???? ???? ??? ?? ??? ??? ????? ???????? ?? ???????? ???? ???? ??? ?? ?????? ?????? ? ????? ?? ????? ?????? ???? ?????????? ???? ????.<\/p>\n

??? ??? ?? ??? ??????? ?????? ? ??? ?? ?????? ?? ??? ????? ???? ??????? ???? ?????? ????????? KAIST WSP ????? ?? ??? ?????[?]<\/a>\u00a0?? ? ????? ???? ????? ??[?]<\/a>\u00a0? vm2 ?? ????? ??? ?? ?? ???? ?? ???? ?????? ?? ?? ??? ???? ????? ???[?]<\/a>.<\/p>\n

vm2 ?? ?????? ??? ???[?]<\/a>: \u00ab?? ???? ????? ???????? ????????? sandbox ?? ??? ???? ?? ???? ????? ?? ?? ??? ??? ?? ?? ??????? ?? sandbox ?? ???? ??????? ?? ??? ????\u00bb.<\/p>\n

?? ??? ?????????? ?? CVE-2023-29017 ?????? ????? ???[?]<\/a>\u00a0? ?? ????? ????????? CVSS ????? ?????? ??? ???. ???? ?? ??? ?????? ???? ?????? ?? ??????? ?? ?? ?? ????? ????????? ?? ??????? ???????? ?????? ???????.<\/p>\n

vm2 ?? ???????? ?????[?]<\/a>\u00a0??? ?? ???? ????? ????? ?????????????? ?? ?? ???? ?????? ?? Node.js ??????? ??????. ????? ?? ???? ?????? ?????? ?? ???? ???? ? ?? ??? ????[?]<\/a>\u00a0??????? ??????.<\/p>\n

Seongil Wi? ???? ?????? KAIST? ?????? ?? ??? ????? ?? ?? ??????????[?]<\/a>\u00a0????? ???? (PoC) ?? ???? CVE-2023-29017 ?? ????? ???? ???? ??? ?? ?????????? ???? ????? ?? ??? ?????? ? ????? ????? ?? ???? ???? ?? ??? \u00ab????\u00bb ?? ?? ?????? ??????.<\/p>\n

??? ??????? ??????? ?? ??? ?? ?? ??? ????? ????? ????? (CVE-2022-36067? ????? ?????? ?? ?? ????? CVSS) ???? vm2 ???? ???????[?]<\/a>\u00a0?? ????????? ???? ????? ??????? ?????? ??? ????? ???? ??????????? ???? ????.<\/a><\/p>\n

\n

?????<\/strong><\/p>\n

\n

[?]<\/a><\/a><\/a>\u00a0https:\/\/wsp-lab.github.io\/<\/a><\/p>\n

[?]<\/a><\/a><\/a>\u00a0https:\/\/github.com\/patriksimek\/vm2\/issues\/515<\/a><\/p>\n

[?]<\/a><\/a><\/a>\u00a0https:\/\/github.com\/patriksimek\/vm2\/releases\/tag\/3.9.15<\/a><\/p>\n

[?]<\/a><\/a><\/a>\u00a0https:\/\/github.com\/advisories\/GHSA-7jxr-cg7f-gpgv<\/a><\/p>\n

[?]<\/a><\/a><\/a>\u00a0https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-29017<\/a><\/p>\n

[?]<\/a><\/a><\/a><\/a>\u00a0https:\/\/www.npmjs.com\/package\/vm2<\/a><\/p>\n

[?]<\/a><\/a><\/a><\/a>\u00a0https:\/\/www.npmjs.com\/package\/vm2?activeTab=dependents<\/a><\/p>\n

[?]<\/a><\/a><\/a><\/a><\/a>\u00a0https:\/\/gist.github.com\/seongil-wi\/2a44e082001b959bfe304b62121fb76d<\/a><\/p>\n

[?]<\/a><\/a><\/a><\/a><\/a>\u00a0https:\/\/thehackernews.com\/2022\/10\/researchers-detail-critical-rce-flaw.html<\/a><\/p>\n

<\/a><\/p>\n

[??]\u00a0https:\/\/thehackernews.com\/2023\/04\/researchers-discover-critical-remote.html<\/a><\/p>\n

\n

???????<\/p>\n

\n

???? ??????<\/p>\n

\n

????<\/p>\n

???? ?????????? ????????<\/a><\/p>\n

\n