{"id":112308,"date":"2023-12-19T03:10:22","date_gmt":"2023-12-19T01:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya"},"modified":"2023-12-19T03:10:22","modified_gmt":"2023-12-19T01:10:22","slug":"terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","title":{"rendered":"Terrapin \u2014 haavatavus SSH protokollis, mis v\u00f5imaldab v\u00e4hendada \u00fchenduse kaitset.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ruhri \u00fclikooli teadlaste grupp (Saksamaa) tutvustas uut MITM-r\u00fcnnaku tehnikat SSH-le - Terrapin, mis kasutab \u00e4ra protokolli haavatavust (CVE-2023-48795). R\u00fcndaja, kes suudab korraldada MITM-r\u00fcnnaku, on v\u00f5imeline \u00fchenduse loomise protsessis blokeerima s\u00f5numi saatmise protokolli laienduste seadistamisest, et v\u00e4hendada \u00fchenduse kaitsetaset. R\u00fcnnaku teostamiseks m\u00f5eldud protot\u00fc\u00fcp on avaldatud GitHubis. <\/p>\n

OpenSSH kontekstis v\u00f5imaldab haavatavus n\u00e4iteks tagasi p\u00f6\u00f6rduda v\u00e4hem turvaliste autentimistaktikate kasutamisele ja keelata kaitse k\u00fclgkanali r\u00fcnnakute eest, mis taaskasutavad sisendit klahvivajutuste viivituste anal\u00fc\u00fcsi kaudu. Python'i raamatukogus AsyncSSH, koos haavatavusega (CVE-2023-46446) sisemise seisundimasina rakenduses, v\u00f5imaldab Terrapini r\u00fcnnak sisestuda SSH-seanssi. <\/p>\n

Haavatavus m\u00f5jutab k\u00f5iki SSH rakendusi, mis toetavad ChaCha20-Poly1305 v\u00f5i CBC re\u017eiimis \u0161ifreid koos ETM re\u017eiimiga (Encrypt-then-MAC). N\u00e4iteks on sellised v\u00f5imalused olnud OpenSSH-s juba \u00fcle 10 aasta. Haavatavus on blokeeritud t\u00e4nases OpenSSH 9.6 v\u00e4ljaandes, samuti PuTTY 0.80, libssh 0.10.6\/0.9.8 ja AsyncSSH 2.14.2 uuendustes. Dropbear SSH-s on parandused juba koodi lisatud, kuid uut v\u00e4ljalaset pole veel loodud. <\/p>\n

Haavatavus tuleneb sellest, et r\u00fcndaja, kes kontrollib \u00fchenduse liiklust (n\u00e4iteks pahatahtliku traadita juurdep\u00e4\u00e4supunkti omanik), v\u00f5ib kohandada pakettide j\u00e4rjestuse numbreid \u00fchenduse loomise protsessi k\u00e4igus ja saavutada n\u00e4htamatult suvalise arvu SSH-s\u00f5numite eemaldamise, mis on saadetud kliendi poolt v\u00f5i serverilt<\/a>. Muuhulgas v\u00f5ib r\u00fcndaja eemaldada SSH_MSG_EXT_INFO s\u00f5numeid, mida kasutatakse protokolli rakendatavate laienduste seadmiseks. Selleks, et teine pool ei tuvastaks paketi kadumist j\u00e4rjestuse numbrite katkestuse t\u00f5ttu, algatab r\u00fcndaja j\u00e4rjekorranumbri nihutamiseks vale paketi saatmise, millel on sama j\u00e4rjestuse number kui eemaldatud paketil. Vale pakk sisaldab s\u00f5numit SSH_MSG_IGNORE lipuga, mis ignoreeritakse t\u00f6\u00f6tlemisel.

\"Terrapin<\/center> <\/p>\n

R\u00fcnnakut ei saa l\u00e4bi viia voog\u00fclesandeid ja CTR-i kasutades, kuna rikutud terviklikkus tuvastatakse rakenduse tasandil. Praktikas on r\u00fcnnaku all ainult \u0161ifreerimine ChaCha20-Poly1305 (chacha20-poly1305@openssh.com), kus olek j\u00e4lgib ainult s\u00f5numite j\u00e4rjestuse numbreid, ja kombinatsioon kr\u00fcpto re\u017eiimist Encrypt-Then-MAC (*-etm@openssh.com) ja CBC \u0161ifritest. <\/p>\n

OpenSSH 9.6 ja muudes rakendustes on r\u00fcnnaku t\u00f5rjumiseks rakendatud protokolli laiendus \"strict KEX\", mis aktiveeritakse automaatselt, kui see on poolte poolt toetatud. serverilt<\/a> ja kliendipool. Laiendus l\u00f5petab \u00fchenduse, kui saavad mis tahes ebatavalisi v\u00f5i \u00fcleliigseid s\u00f5numeid (n\u00e4iteks SSH_MSG_IGNORE v\u00f5i SSH2_MSG_DEBUG lipuga), mis on saadud \u00fchenduse kokkuleppe ajal, ning nullib MAC (Message Authentication Code) loenduri p\u00e4rast iga v\u00f5tme vahetust.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 SSH — Terrapin, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-48795) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443, \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u041f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 GitHub. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 OpenSSH \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":112309,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112308","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Terrapin \u2014 haavatavus SSH protokollis, mis v\u00f5imaldab v\u00e4hendada \u00fchenduse kaitset | ProHoster","description":"R\u00fcrhi \u00dclikooli uurijate grupp Bochumis (Saksamaa) tutvustas uut MITM r\u00fcnnakutehnikat SSH-l - Terrapin, mis kasutab \u00e4ra haavatavust (CVE-2023-48795) protokollis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Terrapin \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 SSH - Terrapin, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-48795) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-19T01:10:22+00:00","article:modified_time":"2023-12-19T01:10:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112308","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:46:41","updated":"2026-02-22 15:30:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112308","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=112308"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112308\/revisions"}],"predecessor-version":[{"id":162280,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112308\/revisions\/162280"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/112309"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=112308"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=112308"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=112308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}