{"id":103950,"date":"2022-05-04T15:37:02","date_gmt":"2022-05-04T13:37:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns"},"modified":"2022-05-04T15:37:02","modified_gmt":"2022-05-04T13:37:03","slug":"uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","title":{"rendered":"Vulnerabilitate \u00een uClibc \u0219i uClibc-ng, care permite \u00eenlocuirea datelor \u00een cache-ul DNS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen bibliotecile standard C uClibc \u0219i uClibc-ng, utilizate \u00een multe dispozitive \u00eencorporate \u0219i portabile, a fost identificat\u0103 o vulnerabilitate (CVE nesolicitat), care permite introducerea de date false \u00een cache-ul DNS, ceea ce poate fi folosit pentru a schimba adresa IP a oric\u0103rui domeniu \u0219i a redirec\u021biona cererile c\u0103tre domeniu pe un server al atacatorului. <\/p>\n

Problema afecteaz\u0103 diferite firmware-uri Linux pentru routere, puncte de acces \u0219i dispozitive IoT, precum \u0219i distribu\u021bii Linux pentru sisteme \u00eencorporate, cum ar fi OpenWRT \u0219i Embedded Gentoo. Se observ\u0103 c\u0103 vulnerabilitatea se manifest\u0103 \u00een dispozitivele multor produc\u0103tori (de exemplu, uClibc este utilizat \u00een firmware-urile Linksys, Netgear \u0219i Axis), dar deoarece vulnerabilitatea din uClibc \u0219i uClibc-ng r\u0103m\u00e2ne nerezolvat\u0103, informa\u021biile detaliate despre dispozitivele \u0219i produc\u0103torii specifici a c\u0103ror produse sunt afectate de problem\u0103 nu sunt deocamdat\u0103 divulgate. <\/p>\n

Vulnerabilitatea este cauzat\u0103 de utilizarea \u00een codul de trimitere a cererilor DNS a identificatorilor de tranzac\u021bie previzibili. Num\u0103rul de identificare a cererii DNS era selectat prin simpla cre\u0219tere a unui contor f\u0103r\u0103 aplicarea unui plus de randomizare a numerelor de port, ceea ce permitea infectarea cache-ului DNS prin trimiterea anticipat\u0103 a pachetelor UDP cu r\u0103spunsuri false (r\u0103spunsul va fi acceptat dac\u0103 a sosit \u00eenaintea r\u0103spunsului real \u0219i include un ID corect). server<\/a> Spre deosebire de metoda propus\u0103 \u00een 2008 de Kaminsky, identificatorul tranzac\u021biei nu trebuie nici m\u0103car ghicit, deoarece este \u00een mod evident previzibil (la \u00eenceput se stabile\u0219te valoarea 1, care este crescut\u0103 la fiecare cerere, \u0219i nu este aleas\u0103 aleatoriu).

\"Vulnerabilitate<\/center> <\/p>\n

\u00cen specifica\u021bia pentru protec\u021bia \u00eempotriva ghicirii identificatorului se recomand\u0103 aplicarea suplimentar\u0103 a distribu\u021biei aleatoare a numerelor de porturi de re\u021bea surs\u0103, din care sunt trimise cererile DNS, ceea ce compenseaz\u0103 dimensiunea insuficient de mare a identificatorului. La activarea randomiz\u0103rii porturilor pentru generarea unui r\u0103spuns fals, pe l\u00e2ng\u0103 ghicirea identificatorului de 16 bi\u021bi, este necesar s\u0103 se identifice \u0219i num\u0103rul portului re\u021belei. \u00cen uClibc \u0219i uClibc-ng, o astfel de randomizare nu a fost inclus\u0103 explicit (c\u00e2nd se apeleaz\u0103 bind, nu a fost specificat un port UDP surs\u0103 aleator) \u0219i aplicarea ei depindea de set\u0103rile sistemului de operare. <\/p>\n

Oprirea randomiz\u0103rii fluxului face ca determinarea identificatorului de cerere incrementabil s\u0103 par\u0103 o sarcin\u0103 trivial\u0103. Totu\u0219i, chiar \u0219i \u00een cazul aplic\u0103rii randomiz\u0103rii, atacatorul trebuie doar s\u0103 ghiceasc\u0103 portul de re\u021bea din intervalul 32768\u201360999, pentru care poate utiliza o trimitere masiv\u0103 de r\u0103spunsuri false simultane pe diferite porturi de re\u021bea.

\"Vulnerabilitate<\/center> <\/p>\n

Problema a fost confirmat\u0103 \u00een toate versiunile actuale ale uClibc \u0219i uClibc-ng, inclusiv cele mai recente versiuni uClibc 0.9.33.2 \u0219i uClibc-ng 1.0.40. \u00cen septembrie 2021, informa\u021biile despre vulnerabilitate au fost trimise c\u0103tre CERT\/CC pentru preg\u0103tirea coordonat\u0103 a corec\u021biilor. \u00cen ianuarie 2022, datele despre problem\u0103 au fost transmise mai multor produc\u0103tori, colabor\u00e2nd cu CERT\/CC. \u00cen martie, a fost f\u0103cut\u0103 o \u00eencercare de a contacta separat proiectul uClibc-ng, dar acesta a r\u0103spuns c\u0103 nu poate remedia vulnerabilitatea de sine st\u0103t\u0103tor \u0219i a recomandat s\u0103 se dezv\u0103luie public informa\u021biile despre problem\u0103, sper\u00e2nd s\u0103 primeasc\u0103 ajutor din partea comunit\u0103\u021bii pentru dezvoltarea unei corec\u021bii. NETGEAR a anun\u021bat despre lansarea unui upgrade pentru remedierea vulnerabilit\u0103\u021bii.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 uClibc \u0438 uClibc-ng, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u044d\u0448 DNS, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0432 \u043a\u044d\u0448\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0439 \u043a \u0434\u043e\u043c\u0435\u043d\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 Linux-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430-\u0432\u0435\u0449\u0435\u0439, \u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":103951,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103950","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een uClibc \u0219i uClibc-ng, care permite substituirea datelor din cache-ul DNS | ProHoster","description":"\u00cen bibliotecile standard C uClibc \u0219i uClibc-ng, utilizate \u00een numeroase dispozitive \u00eencorporate \u0219i portabile, a fost identificat\u0103 o vulnerabilitate (CVE ne\u00eenscris\u0103), care permite injectarea de date false \u00een memoria cache DNS.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 uClibc \u0438 uClibc-ng, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u044d\u0448\u0435 DNS | ProHoster","og:description":"\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 uClibc \u0438 uClibc-ng, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u044d\u0448 DNS, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-04T13:37:03+00:00","article:modified_time":"2022-05-04T13:37:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103950","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 16:01:28","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-04 13:37:57","updated":"2026-02-22 16:01:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103950","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=103950"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103950\/revisions"}],"predecessor-version":[{"id":162337,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103950\/revisions\/162337"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/103951"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=103950"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=103950"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=103950"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}