{"id":85612,"date":"2020-06-17T19:42:36","date_gmt":"2020-06-17T17:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck"},"modified":"2020-06-17T19:42:36","modified_gmt":"2020-06-17T17:42:36","slug":"19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","title":{"rendered":"19 kaugelt kasutatavat haavatavust TCP\/IP Trecki kiibistikus.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Proprieet\u00e4rse TCP\/IP stackis Treck<\/a><\/noindex> tuvastatud<\/a><\/noindex> 19 haavatavust<\/a><\/noindex>, mida kasutatakse spetsiaalselt kujundatud pakettide saatmise kaudu. Haavatustele on antud koodnimi Ripple20<\/a><\/noindex>. M\u00f5ned haavatavused ilmnevad ka KASAGO TCP\/IP stackis, mille tootjaks on Zuken Elmic (Elmic Systems), millel on Treckiga \u00fchised juured. Trecki stacki kasutatakse paljudes t\u00f6\u00f6stuslikes, meditsiinilistes, side-, sisseehitatud ja tarbimisseadmetes (alates nutikest lampidest kuni printerite ja katkematu toiteallikani), samuti energiatootmise, transporti, lennunduse, kaubanduse ja nafta tootmise seadmetes. <\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Silmapaistvate r\u00fcnnakuobjektide seas, kus kasutatakse Trecki TCP\/IP stacki, on HP v\u00f5rguprinterid ja Intel'i kiibid. Sealhulgas on Trecki TCP\/IP stacki probleemid p\u00f5hjustanud hiljutisi eemaldatud haavatavusi<\/a><\/noindex> Intel AMT ja ISM alams\u00fcsteemides, mis said t\u00e4htsate v\u00f5rgu pakettide saatmise kaudu. Haavatavuste olemasolu on kinnitanud tootjad Intel, HP, Hewlett Packard Enterprise, Baxter, Caterpillar, Digi, Rockwell Automation ja Schneider Electric. Veel
\n66 tootjat<\/a><\/noindex>, mille toodetes, mis kasutavad TCP\/IP-protokolli Treck, pole seni probleemidele reageeritud. 5 tootjat, sealhulgas AMD, on kinnitanud, et nende tooted ei ole probleemide suhtes vastuv\u00f5tlikud.<\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Probleemid on tuvastatud protokollide IPv4, IPv6, UDP, DNS, DHCP, TCP, ICMPv4 ja ARP rakendustes, mis on p\u00f5hjustatud andmepakettide suuruse parameetrite eba\u00f5igest t\u00f6\u00f6tlemisest (suuruse v\u00e4lja kasutamine ilma tegeliku andmesuuruse kontrollita), sisendi valideerimise vigadest, m\u00e4luhalduste topeltvabastamisest, lugemisest v\u00e4ljaspool puhverserverit, t\u00e4isarvude \u00fclet\u00e4itumisest, vale juurdep\u00e4\u00e4su kontrollist ja probleemidest nullajalutajaga stringide t\u00f6\u00f6tlemisel. <\/p>\n

Kaks k\u00f5ige ohtlikumat probleemi (CVE-2020-11896, CVE-2020-11897), millele on omistatud CVSS tase 10, v\u00f5imaldavad seadmes koodi t\u00e4itmist, saatmata teatud viisil vormindatud pakette IPv4\/UDP v\u00f5i IPv6. Esimene kriitiline probleem esineb IPv4-tunneli toetavate seadmete puhul, teine aga seadmetes, mis on v\u00e4lja antud enne 04.06.2009 ja toetavad IPv6. Veel \u00fcks kriitiline haavatavus (CVSS 9) on DNS-resolvriseerijas (CVE-2020-11901) ja v\u00f5imaldab koodi t\u00e4itmist, saatmaks spetsiaalselt vormindatud DNS-p\u00e4ring. (Probleemi on kasutatud Schneider Electric APC UPS-i h\u00e4kkimise demonstreerimiseks ja see ilmneb seadmetes, mis toetavad DNS).<\/p>\n

Teised haavatavused CVE-2020-11898, CVE-2020-11899, CVE-2020-11902, CVE-2020-11903, CVE-2020-11905 v\u00f5imaldavad spetsiaalselt vormindatud IPv4\/ICMPv4, IPv6OverIPv4, DHCP, DHCPv6 pakettide saatmisega teadmiseks v\u00f5tta s\u00fcsteemi m\u00e4lu sisu. \u00dclej\u00e4\u00e4nud probleemid v\u00f5ivad viia teenuse katkestamiseni v\u00f5i s\u00fcsteemibufri j\u00e4\u00e4kandmete lekkimiseni.<\/p>\n

Enamik haavatavustest on k\u00f5rvaldatud versioonis Treck 6.0.1.67 (probleem CVE-2020-11897 lahendatud 5.0.1.35, CVE-2020-11900 6.0.1.41, CVE-2020-11903 6.0.1.28, CVE-2020-11908 4.7.1.27). Kuna seadmete jaoks kindlate firmware'ide uuendamine v\u00f5ib v\u00f5tta aega v\u00f5i olla v\u00f5imatu (Treck on turule toodud \u00fcle 20 aasta tagasi, paljud seadmed on j\u00e4\u00e4nud katmata v\u00f5i nende uuendamine on keeruline), soovitatakse administraatoritel isoleerida probleemsed seadmed ja seadistada paketianal\u00fc\u00fcsi s\u00fcsteemides, tulem\u00fc\u00fcrides v\u00f5i ruuterites fragmenteeritud paketid normaliseerima v\u00f5i blokeerima, blokeerida IP-tunnelid (IPv6-in-IPv4 ja IP-in-IP), blokeerida \u201esource routing\u201d, aktiveerida vale TCP-pakettide valikute j\u00e4lgimine, blokeerida kasutamata ICMP juhtsignaalid (MTU uuendamine ja aadressi mask), keelduda IPv6 multicastist ja suunata DNS-p\u00e4ringud kaitstud rekurentsesse DNS-serverisse.<\/p>\n


\n
\r\n \"Vaata\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719 kaugelt kasutatavat haavatavust TCP\/IP virnas Treck | ProHoster","description":"Treck'i patenteeritud TCP\/IP virnas avastati 19 haavatavust, mida saab \u00e4ra kasutada spetsiaalselt kujundatud pakettide saatmise kaudu. Haavatavustele on antud koodnimi Ripple20. M\u00f5ned haavatavused ilmnevad ka Zuken Elmic (Elmic Systems) TCP\/IP virnas KASAGO, millel on Treck'iga \u00fchised juured. Treck'i virnat kasutatakse paljudes t\u00f6\u00f6stuslikes, meditsiinilistes, kommunikatsioonilistes, sisseehitatud ja tarbijaseadmetes (alates nutilampidest kuni printeriteni ja","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 Treck | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-17T17:42:36+00:00","article:modified_time":"2020-06-17T17:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:55:50","updated":"2022-09-28 01:40:49"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/85612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=85612"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/85612\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/85613"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=85612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=85612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=85612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}