{"id":77058,"date":"2020-05-04T14:46:54","date_gmt":"2020-05-04T06:46:54","guid":{"rendered":"http:\/\/4563.org\/?p=77058"},"modified":"2020-05-04T14:46:54","modified_gmt":"2020-05-04T06:46:54","slug":"%e6%9f%90vps%e5%95%86%e6%af%8d%e9%b8%a1%e8%a2%ab%e9%bb%91%e4%ba%86","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=77058","title":{"rendered":"\u67d0VPS\u5546\u6bcd\u9e21\u88ab\u9ed1\u4e86"},"content":{"rendered":"\n<p>  \t\t\t\t\t<strong>789456123741<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3>\u67d0VPS\u5546\u6bcd\u9e21\u88ab\u9ed1\u4e86<\/h3>\n<p>  \t\tAt approximately 20:34 eastern (GMT -4) on May 2, recently published SaltStack vulnerabilities (CVE-2020-11651, CVE-2020-11652) were used to launch cryptocurrency miners on our SolusVM host nodes. The attack disrupted various services in order to allocate as much CPU as possible to the miners. SSH and QEMU processes were killed on some of our CentOS 6 KVM hosts, causing extended downtime in certain cases.\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>tir<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\t\u7687\u5bb6\u7ffb\u8bd1<\/p>\n<p>  5\u67082\u65e520\u65f634\u5206\u5de6\u53f3\uff08GMT-4\uff09\uff0c\u6700\u8fd1\u516c\u5e03\u7684SaltStack\u6f0f\u6d1e\uff08CVE-2020-11651\uff0cCVE-2020-11652\uff09\u88ab\u7528\u6765\u5728\u6211\u4eec\u7684SolusVM\u4e3b\u673a\u8282\u70b9\u4e0a\u542f\u52a8\u52a0\u5bc6\u8d27\u5e01\u77ff\u5de5\u3002\u4e3a\u4e86\u7ed9\u77ff\u5de5\u5206\u914d\u5c3d\u53ef\u80fd\u591a\u7684CPU\uff0c\u8fd9\u6b21\u653b\u51fb\u4e2d\u65ad\u4e86\u5404\u79cd\u670d\u52a1\u3002SSH\u548cQEMU\u8fdb\u7a0b\u5728\u6211\u4eec\u7684\u4e00\u4e9bCentOS 6 KVM\u4e3b\u673a\u4e0a\u88ab\u7ec8\u6b62\uff0c\u5728\u67d0\u4e9b\u60c5\u51b5\u4e0b\u4f1a\u5bfc\u81f4\u66f4\u957f\u7684\u505c\u673a\u65f6\u95f4\u3002\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>\u5c0f\u65ed<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\t\u725b\u903c\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>walsh<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\t\u54ea\u5bb6\u554a \u4e0d\u8bf4\u771f\u6ca1\u52b2\t\t\t\t<\/p>\n<p>  \t\t\t\t\t<strong>ccf<\/strong>  \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n<h3><\/h3>\n<p>  \t\twalsh \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-5-4 14:53<br \/>  \u54ea\u5bb6\u554a \u4e0d\u8bf4\u771f\u6ca1\u52b2<\/p>\n<p> RamNode \u4f46\u4eba\u5bb6\u8bf4\u6728\u6709\u4fe1\u606f\u6cc4\u9732 :lol\t\t\t  <\/p>\n","protected":false},"excerpt":{"rendered":"<p>789456123741 \u5927\u4f6c\u6709\u8bdd&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/77058"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=77058"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/77058\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=77058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=77058"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=77058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}