{"id":98911,"date":"2021-01-21T14:42:14","date_gmt":"2021-01-21T12:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq"},"modified":"2021-01-21T14:42:14","modified_gmt":"2021-01-21T12:42:14","slug":"dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","title":{"rendered":"DNSpooq - syv nye s\u00e5rbarheder i dnsmasq","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Specialister fra JSOF research labs har rapporteret om syv nye s\u00e5rbarheder i DNS\/DHCP serveren dnsmasq. Serveren dnsmasq er meget popul\u00e6r og bruges som standard i mange Linux-distribueringer samt i netv\u00e6rksudstyr fra Cisco, Ubiquiti og andre. S\u00e5rbarhederne i Dnspooq inkluderer DNS-cache forgiftning samt fjernudf\u00f8relse af kode. S\u00e5rbarhederne er blevet rettet i dnsmasq 2.83.<\/p>\n

I 2008 opdagede og afsl\u00f8rede den kendte sikkerhedsforsker Dan Kaminsky en fundamental mangel i mekanismen for DNS i internettet. Kaminsky viste, at angribere kan \u00e6ndre adresser dom\u00e6ner<\/a> og og stj\u00e6le data. Siden da er det blevet kendt som \u00abKaminsky Angrebet\u00bb.<\/p>\n

DNS er blevet betragtet som et usikkert protokol i \u00e5rtier, selvom det formodes at garantere et vist niveau af integritet. Det er netop derfor, at man stadig i h\u00f8j grad stoler p\u00e5 det. Samtidig er der blevet udviklet mekanismer til at forbedre sikkerheden af den oprindelige DNS-protokol. Disse mekanismer inkluderer HTTPS, HSTS, DNSSEC og andre initiativer. Ikke desto mindre, selv med alle disse mekanismer, er DNS-interception stadig en farlig angrebsteknik i 2021. Den st\u00f8rste del af internettet er stadig afh\u00e6ngig af DNS ligesom i 2008, og er udsat for angreb af samme type.<\/p>\n

S\u00e5rbarheder ved DNS-cache forgiftning fra DNSpooq:
\nCVE-2020-25686, CVE-2020-25684, CVE-2020-25685. Disse s\u00e5rbarheder ligner SAD DNS angreb, som for nylig er blevet rapporteret af forskere fra Californiske Universitet og Tsinghua Universitet. S\u00e5rbarhederne SAD DNS og DNSpooq kan ogs\u00e5 kombineres for at lette angrebene yderligere. Yderligere angreb med uklare konsekvenser er ogs\u00e5 blevet rapporteret gennem samarbejde mellem universiteter (Poison Over Troubled Forwarders m.fl.).
\nS\u00e5rbarhederne udnytter en reduktion i entropi. P\u00e5 grund af brugen af en svag hash til identifikation af DNS-anmodninger og un\u00f8jagtig matchning af foresp\u00f8rgsler til svar, kan entropien reduceres betydeligt, hvilket kr\u00e6ver at man kun skal g\u00e6tte ca. 19 bits, hvilket g\u00f8r det muligt at forgifte cachen. Den m\u00e5de, hvorp\u00e5 dnsmasq behandler CNAME-poster, tillader forfalskning af k\u00e6den af CNAME-poster og effektivt forgiftning af op til 9 DNS-poster samtidigt.<\/p>\n

Buffer-overl\u00f8bsanfald: CVE-2020-25687, CVE-2020-25683, CVE-2020-25682, CVE-2020-25681. Alle de markerede 4 s\u00e5rbarheder findes i koden til implementeringen af DNSSEC og manifesterer sig kun, n\u00e5r DNSSEC kontrollen aktiveres i indstillingerne.<\/p>\n

Kilde: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq. \u0421\u0435\u0440\u0432\u0435\u0440 dnsmasq \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 linux, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Cisco, Ubiquiti \u0438 \u043f\u0440\u043e\u0447\u0438\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Dnspooq \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u043a\u044d\u0448\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 dnsmasq 2.83. \u0412 2008 \u0433\u043e\u0434\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98911","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNSpooq \u2014 syv nye s\u00e5rbarheder i dnsmasq | ProHoster","description":"Specialister fra JSOF research labs har rapporteret om syv nye s\u00e5rbarheder i DNS\/DHCP serveren dnsmasq.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DNSpooq \u2014 \u0441\u0435\u043c\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 dnsmasq | ProHoster","og:description":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-21T12:42:14+00:00","article:modified_time":"2021-01-21T12:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:26","updated":"2026-02-11 11:12:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/98911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=98911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/98911\/revisions"}],"predecessor-version":[{"id":160551,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/98911\/revisions\/160551"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=98911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=98911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=98911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}