{"id":85612,"date":"2020-06-17T19:42:36","date_gmt":"2020-06-17T17:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck"},"modified":"2020-06-17T19:42:36","modified_gmt":"2020-06-17T17:42:36","slug":"19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","title":{"rendered":"19 fjernudnyttelige s\u00e5rbarheder i TCP\/IP-stakken Treck","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I den propriet\u00e6re TCP\/IP-stak Treck<\/a><\/noindex> opdaget<\/a><\/noindex> 19 s\u00e5rbarheder<\/a><\/noindex>, der kan udnyttes ved at sende specielt formaterede pakker. S\u00e5rbarhederne har f\u00e5et kodebetegnelsen Ripple20<\/a><\/noindex>. Nogle s\u00e5rbarheder ses ogs\u00e5 i KASAGO TCP\/IP-stakken fra Zuken Elmic (Elmic Systems), som deler f\u00e6lles r\u00f8dder med Treck. Treck-stakken anvendes i mange industrielle, medicinske, kommunikations-, indlejrede og forbruger-enheder (fra smarte p\u00e6rer til printere og UPS-enheder), samt i energisektoren, transport, luftfart, handel og olieproduktionsudstyr. <\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Blandt de mest markante angrebsm\u00e5l, der anvender Treck TCP\/IP-stakken, findes netv\u00e6rksprintere fra HP og Intel-chips. Inklusive problemer i Treck TCP\/IP-stakken viste sig at v\u00e6re \u00e5rsagen til de seneste fjernede s\u00e5rbarheder<\/a><\/noindex> i Intel AMT- og ISM-undersystemer, der kan udnyttes ved at sende et netv\u00e6rkspakke. S\u00e5rbarhederne er blevet bekr\u00e6ftet af producenterne Intel, HP, Hewlett Packard Enterprise, Baxter, Caterpillar, Digi, Rockwell Automation og Schneider Electric. Yderligere
\n66 producenter<\/a><\/noindex>, hvis produkter anvender Treck TCP\/IP-stakken, har endnu ikke reageret p\u00e5 problemerne. 5 producenter, herunder AMD, har erkl\u00e6ret, at deres produkter ikke er ber\u00f8rt af disse problemer.<\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Problemerne er fundet i implementeringen af protokoller IPv4, IPv6, UDP, DNS, DHCP, TCP, ICMPv4 og ARP, og skyldes forkert behandling af parametre med datast\u00f8rrelse (brugen af et felt med st\u00f8rrelse uden kontrol af den faktiske datast\u00f8rrelse), fejl i inputvalidering, dobbelt frigivelse af hukommelse, l\u00e6sning uden for bufferomr\u00e5det, heltals-overl\u00f8b, forkert adgangskontrol og problemer med at h\u00e5ndtere strenge med nul-separator. <\/p>\n

De to mest alvorlige problemer (CVE-2020-11896, CVE-2020-11897), der har f\u00e5et et CVSS-niveau p\u00e5 10, tillader eksekvering af egen kode p\u00e5 enheden ved at sende specifikt formaterede IPv4\/UDP- eller IPv6-pakker. Det f\u00f8rste kritiske problem viser sig p\u00e5 enheder, der underst\u00f8tter IPv4-tunneller, mens det andet er til stede i versioner med IPv6, der er udgivet f\u00f8r den 04.06.2009. Endnu en kritisk s\u00e5rbarhed (CVSS 9) findes i DNS-resolveren (CVE-2020-11901) og tillader udf\u00f8relse af kode ved at sende en specielt udformet DNS-anmodning (problemet blev brugt til at demonstrere et brud p\u00e5 Schneider Electric APC UPS og manifesterer sig p\u00e5 enheder, der underst\u00f8tter DNS).<\/p>\n

Andre s\u00e5rbarheder CVE-2020-11898, CVE-2020-11899, CVE-2020-11902, CVE-2020-11903, CVE-2020-11905 g\u00f8r det muligt at udtr\u00e6kke indholdet af systemets hukommelsesomr\u00e5der gennem afsendelse af s\u00e6rligt formaterede IPv4\/ICMPv4, IPv6OverIPv4, DHCP, DHCPv6 pakker. De \u00f8vrige problemer kan f\u00f8re til nedetid eller l\u00e6kage af resterende data fra systembufferne.<\/p>\n

De fleste s\u00e5rbarheder er blevet rettet i Treck 6.0.1.67 (problemet CVE-2020-11897 er rettet i 5.0.1.35, CVE-2020-11900 i 6.0.1.41, CVE-2020-11903 i 6.0.1.28, CVE-2020-11908 i 4.7.1.27). Da forberedelsen af firmwareopdateringer til specifikke enheder kan tage tid eller v\u00e6re umulig (Treck-stakken har v\u00e6ret p\u00e5 markedet i over 20 \u00e5r, mange enheder har ikke l\u00e6ngere support, eller det er problematisk at opdatere dem), anbefales det, at administratorer isolerer de problematiske enheder og konfigurerer systemer til pakkeinspektion, firewalls eller routere til normalisering eller blokering af fragmenterede pakker, blokere IP-tunneler (IPv6-in-IPv4 og IP-in-IP), blokere \"source routing\", aktivere inspektion af forkerte optioner i TCP-pakker, blokere un\u00f8dvendige kontrol ICMP-meddelelser (MTU Update og Address Mask), forbyde IPv6 multicast og omdirigere DNS-foresp\u00f8rgsler til en sikker rekursiv DNS-server.<\/p>\n


\n
\r\n \"Afspil\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719 fjernudnyttelige s\u00e5rbarheder i TCP\/IP-stakken Treck | ProHoster","description":"I den propriet\u00e6re TCP\/IP-stak Treck er der identificeret","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 Treck | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-17T17:42:36+00:00","article:modified_time":"2020-06-17T17:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:55:50","updated":"2022-09-28 01:40:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/85612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=85612"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/85612\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/85613"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=85612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=85612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=85612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}