{"id":78381,"date":"2020-04-19T07:42:02","date_gmt":"2020-04-19T05:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-dns-servera-bind-9-11-18-9-16-2-i-9-17-1"},"modified":"2020-04-19T07:42:02","modified_gmt":"2020-04-19T05:42:02","slug":"obnovlenie-dns-servera-bind-9-11-18-9-16-2-i-9-17-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/obnovlenie-dns-servera-bind-9-11-18-9-16-2-i-9-17-1","title":{"rendered":"Atualiza\u00e7\u00e3o do servidor DNS BIND 9.11.18, 9.16.2 e 9.17.1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publicado<\/a><\/noindex> Atualiza\u00e7\u00f5es corretivas para as vers\u00f5es est\u00e1veis do servidor DNS BIND 9.11.18 e 9.16.2, bem como para a vers\u00e3o experimental em desenvolvimento 9.17.1. Nas novas vers\u00f5es no lan\u00e7amento<\/a><\/noindex> um problema de seguran\u00e7a relacionado \u00e0 inefic\u00e1cia da prote\u00e7\u00e3o contra ataques \u00abDNS rebinding<\/a><\/noindex>\u00bb ao operar no modo de servidor DNS que redireciona consultas (bloco \u00abforwarders\u00bb nas configura\u00e7\u00f5es). Al\u00e9m disso, foi realizado um trabalho para reduzir o tamanho da estat\u00edstica de assinaturas digitais armazenadas em mem\u00f3ria para DNSSEC - o n\u00famero de chaves monitoradas foi reduzido para 4 para cada zona, o que \u00e9 suficiente em 99% dos casos.<\/p>\n

A t\u00e9cnica \u00abDNS rebinding\u00bb permite, ao abrir uma determinada p\u00e1gina no navegador pelo usu\u00e1rio, estabelecer uma conex\u00e3o WebSocket com um servi\u00e7o de rede na rede interna, que n\u00e3o est\u00e1 dispon\u00edvel para acesso direto pela internet. Para contornar a prote\u00e7\u00e3o aplicada pelos navegadores contra sa\u00eddas al\u00e9m do dom\u00ednio atual (cross-origin), utiliza-se a troca de nome de host no DNS. No servidor DNS do atacante, \u00e9 configurada a entrega alternada de dois endere\u00e7os IP: na primeira consulta, entrega-se o IP real do servidor com a p\u00e1gina, e nas consultas subsequentes retorna-se o endere\u00e7o interno do dispositivo (por exemplo, 192.168.10.1).<\/p>\n

O tempo de vida (TTL) para a primeira resposta \u00e9 definido para o valor m\u00ednimo, ent\u00e3o, ao abrir a p\u00e1gina, o navegador determina o IP real do servidor do invasor e carrega o conte\u00fado da p\u00e1gina. Um c\u00f3digo JavaScript \u00e9 iniciado na p\u00e1gina, que espera o TTL expirar e envia uma segunda solicita\u00e7\u00e3o, a qual agora define o host como 192.168.10.1. Isso permite, a partir do JavaScript, acessar o servi\u00e7o dentro da rede local, contornando a limita\u00e7\u00e3o cross-origin. Protecci\u00f3n<\/a><\/noindex> A prote\u00e7\u00e3o contra ataques desse tipo no BIND \u00e9 baseada no bloqueio da devolu\u00e7\u00e3o de endere\u00e7os IP da rede interna atual ou CNAMEs para dom\u00ednios locais por servidores externos, utilizando as configura\u00e7\u00f5es deny-answer-addresses e deny-answer-aliases.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.11.18 \u0438 9.16.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u0439\u0441\u044f \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 9.17.1. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a «DNS rebinding» \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 (\u0431\u043b\u043e\u043a «forwarders» \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445). \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0445\u0440\u0430\u043d\u044f\u0449\u0435\u0439\u0441\u044f \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78381","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atualiza\u00e7\u00e3o do servidor DNS BIND 9.11.18, 9.16.2 e 9.17.1 | ProHoster","description":"Foram publicadas atualiza\u00e7\u00f5es corretivas para as vers\u00f5es est\u00e1veis do servidor DNS BIND 9.11.18 e 9.16.2, e.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/obnovlenie-dns-servera-bind-9-11-18-9-16-2-i-9-17-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.11.18, 9.16.2 \u0438 9.17.1 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0442\u043e\u043a DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 BIND 9.11.18 \u0438 9.16.2, \u0430.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/obnovlenie-dns-servera-bind-9-11-18-9-16-2-i-9-17-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-19T05:42:02+00:00","article:modified_time":"2020-04-19T05:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78381","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:59:34","updated":"2022-10-05 22:31:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/78381","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=78381"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/78381\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=78381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=78381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=78381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}