{"id":3774,"date":"2024-05-03T19:33:50","date_gmt":"2024-05-03T19:33:50","guid":{"rendered":"https:\/\/chuyendoiso.haiphong.gov.vn\/?p=3774"},"modified":"2025-04-17T08:34:53","modified_gmt":"2025-04-17T08:34:53","slug":"lo-hong-bentoml-diem-98-cho-phep-thuc-thi-ma-tuy-y-tren-he-thong-ai","status":"publish","type":"post","link":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/2024\/05\/03\/lo-hong-bentoml-diem-98-cho-phep-thuc-thi-ma-tuy-y-tren-he-thong-ai\/","title":{"rendered":"L\u1ed7 h\u1ed5ng BentoML \u0111i\u1ec3m 9,8 cho ph\u00e9p th\u1ef1c thi m\u00e3 tu\u1ef3 \u00fd tr\u00ean h\u1ec7 th\u1ed1ng AI"},"content":{"rendered":"

M\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng c\u00f3 m\u00e3 l\u00e0 CVE-2024-2912 (\u0111i\u1ec3m CVSS 9,8) \u0111\u00e3 \u0111\u01b0\u1ee3c ti\u1ebft l\u1ed9 trong BentoML, m\u1ed9t framework d\u1ef1a tr\u00ean Python \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng ph\u1ed5 bi\u1ebfn \u0111\u1ec3 x\u00e2y d\u1ef1ng v\u00e0 tri\u1ec3n khai c\u00e1c \u1ee9ng d\u1ee5ng AI<\/b>.<\/h4>\n
\n
\"92c3523de61d06eebdc515f2babb64b9_L.jpg\"<\/div>\n<\/div>\n

L\u1ed7 h\u1ed5ng n\u00e0y n\u1eb1m ngay \u1edf ph\u1ea7n m\u1ec1m x\u1eed l\u00fd d\u1eef li\u1ec7u, c\u00f3 kh\u1ea3 n\u0103ng cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng th\u1ef1c thi m\u00e3 t\u00f9y \u00fd tr\u00ean c\u00e1c m\u00e1y ch\u1ee7 ch\u1ea1y BentoML.<\/p>\n

BentoML \u0111\u01b0\u1ee3c \u01b0a chu\u1ed9ng v\u00ec hi\u1ec7u su\u1ea5t v\u00e0 t\u00ednh d\u1ec5 s\u1eed d\u1ee5ng trong vi\u1ec7c \u0111\u01b0a c\u00e1c m\u00f4 h\u00ecnh AI v\u00e0o m\u00f4i tr\u01b0\u1eddng s\u1ea3n ph\u1ea9m. Do \u0111\u00f3, l\u1ed7 h\u1ed5ng n\u00e0y ph\u1ed5 bi\u1ebfn r\u1ed9ng r\u00e3i, khi\u1ebfn b\u1ea5t k\u1ef3 t\u1ed5 ch\u1ee9c n\u00e0o d\u1ef1a v\u00e0o c\u00e1c phi\u00ean b\u1ea3n BentoML ch\u01b0a \u0111\u01b0\u1ee3c v\u00e1 l\u1ed7i \u0111\u1ec1u g\u1eb7p r\u1ee7i ro.<\/p>\n

L\u1ee3i d\u1ee5ng c\u00e1c BentoML x\u1eed l\u00fd d\u1eef li\u1ec7u, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 khai th\u00e1c deserialization c\u1ee7a framework b\u1eb1ng c\u00e1ch g\u1eedi c\u00e1c y\u00eau c\u1ea7u POST \u0111\u01b0\u1ee3c t\u1ea1o gi\u00fap ch\u00fang c\u00f3 th\u1ec3:<\/p>\n

    \n
  • Th\u1ef1c thi m\u00e3 \u0111\u1ed9c h\u1ea1i: Ch\u1ea1y c\u00e1c l\u1ec7nh c\u00f3 c\u00f9ng \u0111\u1eb7c quy\u1ec1n nh\u01b0 ch\u00ednh \u1ee9ng d\u1ee5ng BentoML, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng t\u1ed3n t\u1ea1i tr\u00ean m\u00e1y ch\u1ee7.<\/li>\n
  • \u0110\u00e1nh c\u1eafp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m: T\u00f9y thu\u1ed9c v\u00e0o c\u1ea5u h\u00ecnh c\u1ee7a h\u1ec7 th\u1ed1ng, quy\u1ec1n truy c\u1eadp v\u00e0o d\u1eef li\u1ec7u m\u00f4 h\u00ecnh, c\u01a1 s\u1edf d\u1eef li\u1ec7u b\u00ed m\u1eadt v\u00e0 c\u00e1c t\u00e0i s\u1ea3n kh\u00e1c c\u00f3 th\u1ec3 b\u1ecb x\u00e2m ph\u1ea1m.<\/li>\n
  • Kh\u1edfi \u0111\u1ed9ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ti\u1ebfp theo: M\u00e1y ch\u1ee7 b\u1ecb x\u00e2m nh\u1eadp c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh m\u1ed9t ph\u1ea7n c\u1ee7a m\u1ea1ng botnet ho\u1eb7c b\u1ec7 ph\u00f3ng cho c\u00e1c ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c kh\u00e1c tr\u00ean m\u1ea1ng n\u1ed9i b\u1ed9.<\/li>\n<\/ul>\n

    Hi\u1ec7n t\u1ea1i \u0111\u00e3 c\u00f3\u00a0PoC\u00a0v\u1ec1 l\u1ed7 h\u1ed5ng n\u00e0y. Ng\u01b0\u1eddi d\u00f9ng n\u00ean c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 c\u00e0ng s\u1edbm c\u00e0ng t\u1ed1t v\u00e0 gi\u00e1m s\u00e1t c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd tr\u00ean m\u00e1y t\u00ednh b\u1eb1ng c\u00e1ch ghi l\u1ea1i c\u00e1c s\u1ef1 ki\u1ec7n h\u1ec7 th\u1ed1ng v\u00e0 l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp m\u1ea1ng b\u1ea5t th\u01b0\u1eddng cho m\u1ecdi phi\u00ean b\u1ea3n BentoML.<\/p>\n

    Ngu\u1ed3n tin: https:\/\/whitehat.vn\/<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

    M\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng c\u00f3 m\u00e3 l\u00e0 CVE-2024-2912 (\u0111i\u1ec3m CVSS 9,8) \u0111\u00e3 \u0111\u01b0\u1ee3c ti\u1ebft l\u1ed9 trong BentoML, m\u1ed9t framework d\u1ef1a tr\u00ean Python \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng ph\u1ed5 bi\u1ebfn \u0111\u1ec3 x\u00e2y d\u1ef1ng v\u00e0 tri\u1ec3n khai c\u00e1c \u1ee9ng d\u1ee5ng AI. L\u1ed7 h\u1ed5ng n\u00e0y n\u1eb1m ngay \u1edf ph\u1ea7n m\u1ec1m x\u1eed l\u00fd d\u1eef li\u1ec7u, c\u00f3 kh\u1ea3 n\u0103ng cho ph\u00e9p […]<\/p>\n","protected":false},"author":6,"featured_media":3775,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[13],"tags":[],"class_list":{"0":"post-3774","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-tin-tuc"},"_links":{"self":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/3774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/comments?post=3774"}],"version-history":[{"count":2,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/3774\/revisions"}],"predecessor-version":[{"id":3777,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/3774\/revisions\/3777"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media\/3775"}],"wp:attachment":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media?parent=3774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/categories?post=3774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/tags?post=3774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}