{"id":85612,"date":"2020-06-17T19:42:36","date_gmt":"2020-06-17T17:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck"},"modified":"2020-06-17T19:42:36","modified_gmt":"2020-06-17T17:42:36","slug":"19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","title":{"rendered":"19 kaugjuhtimisega haavatavust TCP\/IP-steigis Treck","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Patenteeritud TCP\/IP- stackis Treck<\/a><\/noindex> 35 haavatavust, mille alusel on v\u00e4lja t\u00f6\u00f6tatud mitmeid r\u00fcnnakustsenaariume, mis v\u00f5imaldavad AES-v\u00f5tmete v\u00e4ljav\u00f5tmist enclavest v\u00f5i koodi k\u00e4ivitamist, luues tingimusi m\u00e4lu sisu rikkumiseks.<\/a><\/noindex> 19 haavatavust<\/a><\/noindex>, mida ekspluateeritakse spetsiaalselt kujundatud paketide saatmise kaudu. Haavatustele on antud koodnimi Ripple20<\/a><\/noindex>. M\u00f5ned haavatavused ilmnevad ka Zuken Elmic'i (Elmic Systems) TCP\/IP-stakis KASAGO, millel on \u00fchised juured Treckiga. Treck'i stacki kasutatakse paljudes t\u00f6\u00f6stuslikes, meditsiinilistes, kommunikatsiooniliste, integreeritud ja tarbija seadmetes (alates nutikad lambid kuni printerid ja katkematut toidet pakkuvad seadmed), samuti energia-, transport-, lennundus-, kaubandus- ja naftatootmisvarades. <\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Tarekaupaimakohal, kus kasutatakse Treck'i TCP\/IP-staki r\u00fcnnakute sihtm\u00e4rkidena, v\u00f5ib mainida HP v\u00f5rguprintereid ja Intel'i kiipe. Sealhulgas olid Treck'i TCP\/IP-stakis esinevad probleemid hiljuti p\u00f5hjustanud kaug-haavatavusi<\/a><\/noindex> Intel AMT ja ISM alams\u00fcsteemides, mida ekspluateeritakse v\u00f5rgu pakettide saatmise kaudu. Haavatavuste olemasolu on kinnitanud tootjad Intel, HP, Hewlett Packard Enterprise, Baxter, Caterpillar, Digi, Rockwell Automation ja Schneider Electric. Veel
\n66 tootjat<\/a><\/noindex>, kelle toodetes kasutatakse Treck'i TCP\/IP-stakki, ei ole probleemidele veel reageerinud. 5 tootjat, sealhulgas AMD, on kuulutanud, et nende tooted ei ole probleemide suhtes haavatavad.<\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Probleemid on leitud protokollide IPv4, IPv6, UDP, DNS, DHCP, TCP, ICMPv4 ja ARP rakenduses ning need on p\u00f5hjustatud vale suuruse parameetrite t\u00f6\u00f6tlemisest (suuruse v\u00e4lja kasutamine ilma tegeliku andme suuruse kontrollita), sisendi kontrollimise vigadest, m\u00e4lu kaks korda vabastamisest, andmev\u00e4ljast lugemisest, tervete arvu \u00fclevooludest, vale juurdep\u00e4\u00e4su kontrollist ja probleemidest null-eralduri k\u00e4sitlemisel. <\/p>\n

Kaks k\u00f5ige ohtlikumat probleemi (CVE-2020-11896, CVE-2020-11897), millele on antud CVSS 10 tase, v\u00f5imaldavad seadmes oma koodi k\u00e4itada, saates m\u00e4\u00e4ratud viisil vormindatud IPv4\/UDP v\u00f5i IPv6 pakette. Esimene kriitiline probleem ilmneb seadmetes, mis toetavad IPv4 tunnelit, ja teine \u200b\u200bv\u00e4lja antud enne 04.06.2009 versioonides, mis toetavad IPv6. Veel \u00fcks kriitiline haavatavus (CVSS 9) on olemas DNS-resolveris (CVE-2020-11901) ja v\u00f5imaldab koodi k\u00e4itada spetsiaalselt vormindatud DNS-p\u00e4ringu saatmise kaudu (probleemi on kasutatud Schneider Electric APC UPSi h\u00e4kkimise demonstreerimiseks ja see ilmneb seadmetes, mis toetavad DNS-i).<\/p>\n

Teised haavatavused CVE-2020-11898, CVE-2020-11899, CVE-2020-11902, CVE-2020-11903, CVE-2020-11905 v\u00f5imaldavad IPv4\/ICMPv4, IPv6OverIPv4, DHCP, DHCPv6 kaudu spetsiaalselt koostatud paketide saatmise teel s\u00fcsteemi m\u00e4lu alade sisu tuvastada. \u00dclej\u00e4\u00e4nud probleemid v\u00f5ivad viia teenuse katkestamiseni v\u00f5i s\u00fcsteemi puhvritest j\u00e4\u00e4kandmete lekeni.<\/p>\n

Enamik haavatavusi on k\u00f5rvaldatud Treck 6.0.1.67 v\u00e4ljaandes (probleem CVE-2020-11897 on k\u00f5rvaldatud versioonis 5.0.1.35, CVE-2020-11900 versioonis 6.0.1.41, CVE-2020-11903 versioonis 6.0.1.28, CVE-2020-11908 versioonis 4.7.1.27). Kuna seadmete jaoks kindlate p\u00fcsivara uuenduste ettevalmistamine v\u00f5ib viibida v\u00f5i olla v\u00f5imatu (Trecki tehnoloogia on olemas juba \u00fcle 20 aasta, palju seadmeid on j\u00e4\u00e4nud toetamata v\u00f5i neid on keeruline uuendada), soovitatakse administraatoritel isoleerida probleemsed seadmed ja seadistada pakettide kontrollimise s\u00fcsteemides, tulem\u00fc\u00fcrides v\u00f5i ruuterites fraktsioonitud pakettide normaliseerimine v\u00f5i blokeerimine, keelata IP-tunnelid (IPv6-in-IPv4 ja IP-in-IP), keelata \u201esource routing\u201c, aktiveerida vigaste valikute kontrolleerimine TCP-pakettides, blokeerida kasutamata ICMP juhtelemendid (MTU uuendus ja aadressi mask), keelata IPv6 multicast ja suunata DNS-p\u00e4ringud kaitstud rekurssiivsele DNS-serverile.<\/p>\n


\n
\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719 kaugelt v\u00e4ljajuuritavat haavatavust Treck TCP\/IP stegis | ProHoster","description":"Trecki omases TCP\/IP stegis on tuvastatud","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 Treck | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-17T17:42:36+00:00","article:modified_time":"2020-06-17T17:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:55:50","updated":"2022-09-28 01:40:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/85612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=85612"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/85612\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/85613"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=85612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=85612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=85612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}