Rashin lahani mai nisa a cikin ɗakin karatu na GNU adns

A cikin ɗakin karatu wanda aikin GNU ya haɓaka don yin tambayoyin DNS adns bayyana Lalacewar 7, wanda hudu daga cikinsu matsaloli ne (CVE-2017-9103, CVE-2017-9104, CVE-2017-9105, CVE-2017-9109) ana iya amfani da shi don aiwatar da harin kisa mai nisa akan tsarin. Sauran lahani guda uku suna haifar da ƙin sabis ta hanyar haifar da aikace-aikacen ta amfani da adns don yin karo.

Kunshin adns ya haɗa da ɗakin karatu na C da saitin abubuwan amfani don aiwatar da tambayoyin DNS ba tare da ɓata lokaci ba ko amfani da samfurin da aka kora. Matsalolin da aka gyara a cikin fitarwa 1.5.2 da 1.6.0. Rashin lahani yana ba da damar aikace-aikacen da ke kiran ayyukan adns su kai hari ta hanyar uwar garken DNS mai maimaitawa suna mayar da martani na musamman ko filayen SOA/RP.

source: budenet.ru