{"id":99712,"date":"2021-04-13T16:22:45","date_gmt":"2021-04-13T14:22:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns"},"modified":"2021-04-13T16:22:45","modified_gmt":"2021-04-13T14:22:45","slug":"uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","title":{"rendered":"Vulnerabilit\u00e0 in FreeBSD, IPnet e Nucleus NET, legate a errori nell'implementazione della compressione in DNS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>I gruppi di ricerca Forescout Research Labs e JSOF Research hanno pubblicato i risultati di uno studio congiunto sulla sicurezza di diverse implementazioni dello schema di compressione utilizzato per imballare nomi ripetitivi nei messaggi DNS, mDNS, DHCP e IPv6 RA (imballaggio di parti duplicate dei domini in messaggi contenenti pi\u00f9 nomi). Nel corso del lavoro svolto sono state rilevate 9 vulnerabilit\u00e0, riassunte con il nome in codice NAME:WRECK.     <\/p>\n<p>I problemi sono stati rilevati in FreeBSD, nonch\u00e9 nei sottosistemi di rete IPnet, Nucleus NET e NetX, diffusi nei sistemi operativi in tempo reale VxWorks, Nucleus e ThreadX, utilizzati in dispositivi di automazione, archiviazione, dispositivi medici, avionica, stampanti ed elettronica di consumo. Si stima che almeno 100 milioni di dispositivi siano vulnerabili.      <\/p>\n<ul>\n<li class=\"l\"> Una vulnerabilit\u00e0 in FreeBSD (CVE-2020-7461) consentiva l'esecuzione di codice maligno tramite l'invio da parte di un attaccante, situato nella stessa rete locale della vittima, di un pacchetto DHCP appositamente formattato, la cui elaborazione da parte del client DHCP vulnerabile poteva portare a un overflow del buffer. La problematica era mitigata dal fatto che il processo dhclient, in cui si trovava la vulnerabilit\u00e0, veniva eseguito con privilegi ridotti in un ambiente isolato Capsicum, dal quale era necessario identificare un'altra vulnerabilit\u00e0 per uscire.\n<p>La natura dell'errore risiede in un controllo errato dei parametri, nel pacchetto restituito dal server DHCP con l'opzione 119 DHCP, che consente di trasmettere l'elenco \"domain search\" per il resolver. Calcolo errato della dimensione del buffer necessario per contenere le informazioni decompresse. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/domain\/\"   title=\"nomi di dominio\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"908\">nomi di dominio<\/a>, portava alla scrittura di informazioni controllabili dall'attaccante al di fuori del buffer allocato. In FreeBSD il problema \u00e8 stato risolto gi\u00e0 nel settembre dello scorso anno. La vulnerabilit\u00e0 pu\u00f2 essere sfruttata solo in presenza di accesso alla rete locale.          <\/p>\n<li class=\"l\"> Una vulnerabilit\u00e0 nello stack di rete integrato IPnet, utilizzato in RTOS VxWorks, consente di eseguire potenzialmente codice dal lato del client DNS a causa di un'elaborazione errata della compressione dei messaggi DNS. A quanto pare, questa vulnerabilit\u00e0 era stata individuata per la prima volta dalla societ\u00e0 Exodus nel 2016, ma non \u00e8 mai stata corretta. Anche la nuova richiesta a Wind River \u00e8 rimasta senza risposta e i dispositivi con IPnet rimangono vulnerabili.\n<li class=\"l\"> Nel stack TCP\/IP Nucleus NET, supportato da Siemens, sono state identificate 6 vulnerabilit\u00e0, di cui due potrebbero portare all'esecuzione remota di codice e quattro all'avvio di un attacco di negazione di servizio. Il primo problema critico \u00e8 legato a un errore nel decompresso dei messaggi DNS compressi, mentre il secondo riguarda l'analisi errata delle etichette dei nomi di dominio. Entrambi i problemi portano a un overflow del buffer durante l'elaborazione di risposte DNS appositamente formulate.\n<p>Per sfruttare le vulnerabilit\u00e0, un attaccante deve semplicemente inviare una risposta appositamente formattata a qualsiasi richiesta legittima inviata da un dispositivo vulnerabile, ad esempio, conducendo un attacco MITM e infiltrandosi nel traffico tra il server DNS e la vittima. Se l'attaccante ha accesso alla rete locale, pu\u00f2 avviare un server DNS che tenta di attaccare i dispositivi problematizzati tramite l'invio di richieste mDNS in modalit\u00e0 broadcast.    <\/p>\n<li class=\"l\"> La vulnerabilit\u00e0 nel stack di rete NetX (Azure RTOS NetX), sviluppato per ThreadX RTOS e reso pubblico nel 2019 dopo il passaggio a Microsoft, ha comportato un attacco di negazione di servizio. Il problema \u00e8 causato da un errore nell'analisi dei messaggi DNS compressi nell'implementazione del resolver.      <\/ul>\n<p>Tra gli stack di rete verificati, nei quali non sono state trovate vulnerabilit\u00e0 relative alla compressione di dati ripetuti nei messaggi DNS, si segnalano i progetti lwIP, Nut\/Net, Zephyr, uC\/TCP-IP, FreeRTOS+TCP, OpenThread e FNET. I primi due (Nut\/Net e lwIP) non supportano affatto la compressione nei messaggi DNS, mentre gli altri implementano questa operazione senza errori. Inoltre, si fa notare che in precedenza gli stessi ricercatori avevano gi\u00e0 identificato vulnerabilit\u00e0 simili negli stack Treck, uIP e PicoTCP.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54961\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 DNS, mDNS, DHCP \u0438 IPv6 RA (\u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0434\u0443\u0431\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0447\u0430\u0441\u0442\u0435\u0439 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043c\u0451\u043d). \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 9 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u043e\u0431\u0449\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c NAME:WRECK. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99712","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD, IPnet \u0438 Nucleus NET, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0436\u0430\u0442\u0438\u044f \u0432 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-04-13T14:22:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-04-13T14:22:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u00e0 in FreeBSD, IPnet e Nucleus NET legate a errori nell'implementazione della compressione in DNS | ProHoster","description":"I gruppi di ricerca Forescout Research Labs e JSOF Research hanno pubblicato i risultati di una ricerca congiunta sulla sicurezza di diverse implementazioni dello schema di compressione utilizzato per imballare nomi ripetitivi.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD, IPnet \u0438 Nucleus NET, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0436\u0430\u0442\u0438\u044f \u0432 DNS | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-13T14:22:45+00:00","article:modified_time":"2021-04-13T14:22:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99712","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-13 14:26:03","updated":"2026-02-08 20:56:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=99712"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99712\/revisions"}],"predecessor-version":[{"id":158099,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99712\/revisions\/158099"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=99712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=99712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=99712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}