{"id":99712,"date":"2021-04-13T16:22:45","date_gmt":"2021-04-13T14:22:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns"},"modified":"2021-04-13T16:22:45","modified_gmt":"2021-04-13T14:22:45","slug":"uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","title":{"rendered":"Vulnerabilit\u00e0 in FreeBSD, IPnet e Nucleus NET, legate a errori nella realizzazione della compressione in DNS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>I gruppi di ricerca Forescout Research Labs e JSOF Research hanno pubblicato i risultati di uno studio congiunto sulla sicurezza di diverse implementazioni dello schema di compressione utilizzato per l'imballaggio di nomi ripetitivi nei messaggi DNS, mDNS, DHCP e IPv6 RA (imballaggio di parti duplicate di domini in messaggi contenenti pi\u00f9 nomi). Durante il lavoro condotto, sono state identificate 9 vulnerabilit\u00e0, riunite sotto il nome in codice NAME:WRECK.     <\/p>\n<p>I problemi sono stati riscontrati in FreeBSD, cos\u00ec come nelle sottosistemi di rete IPnet, Nucleus NET e NetX, diffusi nei sistemi operativi in tempo reale VxWorks, Nucleus e ThreadX, utilizzati in dispositivi di automazione, sistemi di archiviazione, apparecchiature mediche, avionic, stampanti ed elettronica di consumo. Si stima che almeno 100 milioni di dispositivi siano vulnerabili.      <\/p>\n<ul>\n<li class=\"l\"> Una vulnerabilit\u00e0 in FreeBSD (CVE-2020-7461) consentiva l'esecuzione di codice malevolo tramite l'invio di un pacchetto DHCP appositamente formattato da un attaccante che si trovava nella stessa rete locale della vittima, il cui trattamento da parte del client DHCP vulnerabile portava a un overflow del buffer. Un fattore mitigante era che il processo dhclient, che presenta la vulnerabilit\u00e0, veniva eseguito con privilegi ridotti in un ambiente isolato Capsicum, da cui era necessario identificare un'ulteriore vulnerabilit\u00e0 per evadere.\n<p>La causa dell'errore risiede nella verifica errata dei parametri nel pacchetto restituito dal server DHCP con l'opzione 119 DHCP, che consente di inviare un elenco di ricerca del dominio per il resolver. Il calcolo errato delle dimensioni del buffer necessario per contenere i dati decompattati, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/domain\/\"   title=\"di nomi di dominio\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"908\">di nomi di dominio<\/a>, portava alla scrittura di informazioni controllate dall'attaccante al di fuori del buffer assegnato. In FreeBSD, il problema \u00e8 stato risolto gi\u00e0 a settembre dello scorso anno. La questione pu\u00f2 essere sfruttata solo in presenza di accesso alla rete locale.          <\/p>\n<li class=\"l\"> Una vulnerabilit\u00e0 nel stack di rete incorporato IPnet, utilizzato in RTOS VxWorks, consente potenzialmente l'esecuzione di codice lato DNS client a causa di un'elaborazione errata della compressione dei messaggi DNS. In effetti, questa vulnerabilit\u00e0 \u00e8 stata identificata per la prima volta da Exodus nel 2016, ma non \u00e8 mai stata corretta. Anche una nuova richiesta a Wind River \u00e8 rimasta senza risposta, lasciando i dispositivi con IPnet vulnerabili.\n<li class=\"l\"> Nel stack TCP\/IP Nucleus NET, supportato da Siemens, sono state identificate 6 vulnerabilit\u00e0, delle quali due potrebbero portare all'esecuzione remota di codice, e quattro all'inizio di un attacco di denial of service. Il primo problema critico \u00e8 legato a un errore nell'elaborazione di messaggi DNS compressi, mentre il secondo riguarda un'analisi errata delle etichette dei nomi di dominio. Entrambi i problemi portano a un overflow del buffer durante l'elaborazione di risposte DNS appositamente formattate.\n<p>Per sfruttare le vulnerabilit\u00e0, basta che l'attaccante invii una risposta appositamente formattata a qualsiasi richiesta legittima inviata dal dispositivo vulnerabile, ad esempio attraverso un attacco MITM e l'inserimento nel traffico tra il server DNS e la vittima. Se l'attaccante ha accesso alla rete locale, pu\u00f2 avviare un server DNS che tenta di attaccare i dispositivi vulnerabili inviando richieste mDNS in modalit\u00e0 broadcast.    <\/p>\n<li class=\"l\"> Una vulnerabilit\u00e0 nello stack di rete NetX (Azure RTOS NetX), progettato per ThreadX RTOS e aperto nel 2019 dopo il trasferimento a Microsoft, si limita a causare un denial of service. Il problema \u00e8 causato da un errore nell'analisi dei messaggi DNS compressi nell'implementazione del resolver.      <\/ul>\n<p>Tra gli stack di rete verificati, nei quali non sono state trovate vulnerabilit\u00e0 legate alla compressione dei dati ripetitivi nei messaggi DNS, sono stati nominati i progetti lwIP, Nut\/Net, Zephyr, uC\/TCP-IP, uC\/TCP-IP, FreeRTOS+TCP, OpenThread e FNET. I primi due (Nut\/Net e lwIP) non supportano affatto la compressione nei messaggi DNS, mentre gli altri eseguono questa operazione senza errori. Inoltre, si osserva che precedentemente gli stessi ricercatori avevano gi\u00e0 identificato vulnerabilit\u00e0 simili negli stack Treck, uIP e PicoTCP.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54961\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 DNS, mDNS, DHCP \u0438 IPv6 RA (\u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0430 \u0434\u0443\u0431\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0447\u0430\u0441\u0442\u0435\u0439 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043c\u0451\u043d). \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 9 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u043e\u0431\u0449\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c NAME:WRECK. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99712","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD, IPnet \u0438 Nucleus NET, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0436\u0430\u0442\u0438\u044f \u0432 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-04-13T14:22:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-04-13T14:22:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u00e0 in FreeBSD, IPnet e Nucleus NET legate a errori nell'implementazione della compressione in DNS | ProHoster","description":"I gruppi di ricerca Forescout Research Labs e JSOF Research hanno pubblicato i risultati di uno studio congiunto sulla sicurezza delle diverse implementazioni dello schema di compressione utilizzato per impacchettare nomi ripetuti.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD, IPnet \u0438 Nucleus NET, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0436\u0430\u0442\u0438\u044f \u0432 DNS | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b Forescout Research Labs \u0438 JSOF Research \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u0445\u0435\u043c\u044b \u0441\u0436\u0430\u0442\u0438\u044f, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u043c\u0451\u043d \u0432.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-vo-freebsd-ipnet-i-nucleus-net-svyazannye-s-oshibkami-pri-realizaczii-szhatiya-v-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-13T14:22:45+00:00","article:modified_time":"2021-04-13T14:22:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99712","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-13 14:26:03","updated":"2026-02-08 20:56:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=99712"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99712\/revisions"}],"predecessor-version":[{"id":158099,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99712\/revisions\/158099"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=99712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=99712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=99712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}