Lalacewar aiwatar da lambar nesa a cikin uwar garken DNS mara iyaka

A cikin Unbound DNS uwar garken gano rauni (CVE-2019-18934), wanda zai iya haifar da aiwatar da lambar maharin lokacin karɓar amsa na musamman. Matsalar kawai tana shafar tsarin lokacin gina Unbound tare da tsarin ipsec ("-enable-ipsecmod") da kuma kunna ipsemod a cikin saitunan. Rashin lahani yana bayyana yana farawa daga sigar 1.6.4 kuma an daidaita shi a cikin sakin Zazzagewa 1.9.5.

Rashin lahani yana faruwa ta hanyar watsa haruffan da ba a ɓoye ba lokacin kiran umarnin harsashi na ipsecmod-hook lokacin karɓar buƙatun yanki wanda bayanan A/AAAA da IPSECKEY suke. Ana aiwatar da musanya lambar ta hanyar ƙididdige sunan yanki na musamman da aka ƙera a cikin qname da filayen ƙofa masu alaƙa da rikodin IPSECKEY.

source: budenet.ru

Add a comment