Kab laum nyob rau hauv BIND 9.16.17 uas ua rau W tus cwj pwm raug mishandled hauv DNS queries

Kev kho kho tshiab tau tshaj tawm rau qhov ruaj khov BIND 9.16.18 ceg thiab hauv kev tsim kho kev sim 9.17.15 ceg, uas kho cov kab mob loj uas tshwm sim hauv BIND 9.16.17 thiab 9.17.14 tshaj tawm lub lim tiam dhau los (hnub tom qab no tso tawm, cov tsim tawm tau ceeb toom txog qhov teeb meem thiab pom zoo kom tsis txhob nruab versions 9.16.17 thiab 9.17.14).

Nyob rau hauv versions 9.16.17 thiab 9.17.14, tus "w" cim tau raug tshem tawm los ntawm cov ntawv me thiab cov ntawv loj (maptoupper thiab maptolower), uas ua rau hloov cov cim "W" thiab "w" hauv cov npe sau nrog. cov kab ke "\000" "thiab xa cov txiaj ntsig tsis raug thaum ua kev thov siv lub npog ntsej muag. Piv txwv li, yog tias thaj tsam DNS muaj cov ntaub ntawv β€œ*.sub.test.local. 1 A 127.0.0.1 "thov rau lub npe UVW.sub.test.local" ua cov lus teb uas rov qab lub npe "uv/000.sub.test.local" es tsis txhob "uvw.sub.test.local".

Tsis tas li ntawd, cov teeb meem tau raug sau tseg nrog kev hloov lub cim "w" nrog "\ 000" thaum lub sijhawm hloov kho thaj chaw dynamic yog tias rooj plaub ntawm "w" tus cwj pwm hauv qhov kev thov txawv ntawm rooj plaub hauv cheeb tsam DNS. Piv txwv li, yog tias qhov hloov tshiab raug xa mus rau "foo.ww.example." thaum muaj cov ntaub ntawv "WW.example." hauv cheeb tsam, nws tau ua tiav li "foo.\000\000.example.". Teeb meem nrog kev hloov tus cwj pwm kuj tuaj yeem tshwm sim thaum ua haujlwm hloov chaw los ntawm thawj mus rau lwm qhov DNS server.

Kev tshaj tawm ntawm kev hloov tshiab 9.16.18 tau ncua vim qhov kev txheeb xyuas ntawm ob qhov yuam kev ntxiv uas tseem tsis tau daws hauv version 9.16.18 thiab 9.17.15. Kev ua yuam kev ua rau muaj kev tsis sib haum xeeb thaum pib thiab tshwm sim hauv kev teeb tsa qhov twg dnssec-txoj cai siv tib thaj chaw tam sim no hauv cov kev xav sib txawv. Cov neeg siv nrog cov chaw zoo li no tau qhia kom downgrade rau BIND version 9.16.16.

Tau qhov twg los: opennet.ru

Ntxiv ib saib