{"id":85612,"date":"2020-06-17T19:42:36","date_gmt":"2020-06-17T17:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck"},"modified":"2020-06-17T19:42:36","modified_gmt":"2020-06-17T17:42:36","slug":"19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","title":{"rendered":"19 t\u00e1voli kihaszn\u00e1lhat\u00f3 sebezhet\u0151s\u00e9g a Treck TCP\/IP veremben","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A z\u00e1rt TCP\/IP veremben Treck<\/a><\/noindex> felfedezve<\/a><\/noindex> 19 sebezhet\u0151s\u00e9g<\/a><\/noindex>, amelyeket k\u00fcl\u00f6nleges form\u00e1tum\u00fa csomagok k\u00fcld\u00e9s\u00e9vel lehet kihaszn\u00e1lni. A sebezhet\u0151s\u00e9geket a k\u00f6vetkez\u0151 k\u00f3dn\u00e9vvel l\u00e1tt\u00e1k el Ripple20<\/a><\/noindex>. N\u00e9h\u00e1ny sebezhet\u0151s\u00e9g a Zuken Elmic (Elmic Systems) \u00e1ltal gy\u00e1rtott KASAGO TCP\/IP veremben is megjelenik, amely k\u00f6z\u00f6s gy\u00f6kerekkel rendelkezik a Treckkel. A Treck verem sz\u00e1mos ipari, orvosi, kommunik\u00e1ci\u00f3s, be\u00e1gyazott \u00e9s fogyaszt\u00f3i eszk\u00f6zben (okos l\u00e1mp\u00e1kt\u00f3l kezdve nyomtat\u00f3kig \u00e9s sz\u00fcnetmentes t\u00e1pegys\u00e9gekig) haszn\u00e1latos, valamint energetikai, k\u00f6zleked\u00e9si, l\u00e9gik\u00f6zleked\u00e9si, kereskedelmi \u00e9s olajtermel\u0151 felszerel\u00e9sekn\u00e9l. <\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

A Treck TCP\/IP verem\u00e9t kihaszn\u00e1l\u00f3 t\u00e1mad\u00e1sok figyelemre m\u00e9lt\u00f3 c\u00e9lpontjai k\u00f6z\u00e9 tartoznak a HP h\u00e1l\u00f3zati nyomtat\u00f3k \u00e9s az Intel chipjei. A Treck TCP\/IP verem\u00e9ben felfedezett probl\u00e9m\u00e1k a k\u00f6zelm\u00faltban t\u00e1voli sebezhet\u0151s\u00e9gek<\/a><\/noindex> az Intel AMT \u00e9s ISM alrendszerekben, amelyeket h\u00e1l\u00f3zati csomag k\u00fcld\u00e9s\u00e9vel lehet kihaszn\u00e1lni. A sebezhet\u0151s\u00e9geket az Intel, HP, Hewlett Packard Enterprise, Baxter, Caterpillar, Digi, Rockwell Automation \u00e9s Schneider Electric gy\u00e1rt\u00f3k meger\u0151s\u00edtett\u00e9k. Ezen k\u00edv\u00fcl
\n66 gy\u00e1rt\u00f3<\/a><\/noindex>, akiknek a term\u00e9keiben a Treck TCP\/IP verem megtal\u00e1lhat\u00f3, eddig m\u00e9g nem reag\u00e1ltak a probl\u00e9m\u00e1kra. 5 gy\u00e1rt\u00f3, k\u00f6z\u00f6tt\u00fck az AMD, jelezte, hogy term\u00e9keik nem \u00e9rintettek a probl\u00e9m\u00e1kban.<\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

A probl\u00e9m\u00e1k az IPv4, IPv6, UDP, DNS, DHCP, TCP, ICMPv4 \u00e9s ARP protokollok megval\u00f3s\u00edt\u00e1s\u00e1ban tal\u00e1lhat\u00f3ak, \u00e9s helytelen adathossz-param\u00e9terek kezel\u00e9se (m\u00e9retmez\u0151 haszn\u00e1lata an\u00e9lk\u00fcl, hogy ellen\u0151rizn\u00e9k a t\u00e9nyleges adathosszt), bemeneti adatok ellen\u0151rz\u00e9si hib\u00e1i, kett\u0151s mem\u00f3riafelszabad\u00edt\u00e1s, buffer-t\u00falfut\u00e1s, eg\u00e9sz sz\u00e1mok t\u00falfut\u00e1sa, helytelen hozz\u00e1f\u00e9r\u00e9s-ellen\u0151rz\u00e9s \u00e9s null-termin\u00e1l\u00fa karakterekkel kapcsolatos probl\u00e9m\u00e1k okozz\u00e1k. <\/p>\n

A legkock\u00e1zatosabb hib\u00e1k (CVE-2020-11896, CVE-2020-11897), amelyek CVSS 10 szintet kaptak, lehet\u0151v\u00e9 teszik a k\u00f3d v\u00e9grehajt\u00e1s\u00e1t az eszk\u00f6z\u00f6n IPv4\/UDP vagy IPv6 csomagok megfelel\u0151 k\u00fcld\u00e9s\u00e9vel. Az els\u0151 kritikus hiba IPv4-alag\u00fattal rendelkez\u0151 eszk\u00f6z\u00f6k\u00f6n jelentkezik, m\u00edg a m\u00e1sodik az 2009.06.04. el\u0151tt kiadott IPv6 t\u00e1mogat\u00e1s\u00fa verzi\u00f3kban. Egy m\u00e1sik kritikus sebezhet\u0151s\u00e9g (CVSS 9) a DNS-lez\u00e1r\u00f3n\u00e1l (CVE-2020-11901) \u00e1ll fenn, \u00e9s lehet\u0151v\u00e9 teszi a k\u00f3d v\u00e9grehajt\u00e1s\u00e1t egy speci\u00e1lisan kialak\u00edtott DNS-k\u00e9r\u00e9s k\u00fcld\u00e9s\u00e9vel (ezt a probl\u00e9m\u00e1t a Schneider Electric APC UPS felt\u00f6r\u00e9s\u00e9nek bemutat\u00e1s\u00e1hoz haszn\u00e1lt\u00e1k, \u00e9s DNS-t\u00e1mogat\u00f3 eszk\u00f6z\u00f6k\u00f6n jelentkezik).<\/p>\n

A t\u00f6bbi CVE-2020-11898, CVE-2020-11899, CVE-2020-11902, CVE-2020-11903, CVE-2020-11905 sebezhet\u0151s\u00e9g lehet\u0151v\u00e9 teszi az IPv4\/ICMPv4, IPv6OverIPv4, DHCP, DHCPv6 form\u00e1zott csomagjainak k\u00fcld\u00e9s\u00e9vel a rendszer mem\u00f3riater\u00fcleteinek tartalm\u00e1nak megismer\u00e9s\u00e9t. A t\u00f6bbi probl\u00e9ma szolg\u00e1ltat\u00e1smegtagad\u00e1st vagy marad\u00e9kadatok kisziv\u00e1rg\u00e1s\u00e1t okozhatja rendszersorokb\u00f3l.<\/p>\n

A legt\u00f6bb sebezhet\u0151s\u00e9get jav\u00edtott\u00e1k a Treck 6.0.1.67 verzi\u00f3j\u00e1ban (a CVE-2020-11897 probl\u00e9m\u00e1t a 5.0.1.35, a CVE-2020-11900-t a 6.0.1.41, a CVE-2020-11903-t a 6.0.1.28, a CVE-2020-11908-t pedig a 4.7.1.27 verzi\u00f3ban orvosolt\u00e1k). Mivel a firmware friss\u00edt\u00e9sek k\u00e9sz\u00edt\u00e9se egyes eszk\u00f6z\u00f6kh\u00f6z id\u0151ig\u00e9nyes lehet, vagy lehet, hogy lehetetlen (a Treck stack t\u00f6bb mint 20 \u00e9ve el\u00e9rhet\u0151, sok eszk\u00f6z m\u00e1r nem kap t\u00e1mogat\u00e1st, vagy nehezen friss\u00edthet\u0151), az adminisztr\u00e1toroknak javasolt, hogy szigetelj\u00e9k el a probl\u00e9m\u00e1s eszk\u00f6z\u00f6ket, \u00e9s \u00e1ll\u00edts\u00e1k be a rendszer\u00fckben a csomagok ellen\u0151rz\u00e9s\u00e9t, t\u0171zfalakon vagy routereken a t\u00f6redezett csomagok normaliz\u00e1l\u00e1s\u00e1ra vagy blokkol\u00e1s\u00e1ra, blokkolj\u00e1k az IP-alagutakat (IPv6-in-IPv4 \u00e9s IP-in-IP), tilts\u00e1k le a \u201eforr\u00e1ssz\u00e1laz\u00e1st\u201d, aktiv\u00e1lj\u00e1k a hib\u00e1s TCP-csomagok opci\u00f3inak ellen\u0151rz\u00e9s\u00e9t, blokkolj\u00e1k a fel nem haszn\u00e1lt ICMP-vez\u00e9rl\u0151 \u00fczeneteket (MTU friss\u00edt\u00e9s \u00e9s c\u00edmmaszk), tilts\u00e1k le az IPv6 multicastot, \u00e9s ir\u00e1ny\u00edts\u00e1k \u00e1t a DNS-lek\u00e9rdez\u00e9seket egy biztons\u00e1gos rekurz\u00edv DNS-szerverhez.<\/p>\n


\n
\r\n \"Vide\u00f3\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719 t\u00e1volr\u00f3l kihaszn\u00e1lhat\u00f3 sebezhet\u0151s\u00e9g a Treck TCP\/IP stackj\u00e9ben | ProHoster","description":"A Treck propriet\u00e1ris TCP\/IP stackj\u00e9ben felt\u00e1rt\u00e1k","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 Treck | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-17T17:42:36+00:00","article:modified_time":"2020-06-17T17:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:55:50","updated":"2022-09-28 01:40:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/85612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=85612"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/85612\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/85613"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=85612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=85612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=85612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}