{"id":102308,"date":"2021-11-17T21:36:54","date_gmt":"2021-11-17T19:36:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/novyj-variant-ataki-sad-dns-dlya-podstanovki-fiktivnyh-dannyh-v-kesh-dns"},"modified":"2021-11-17T21:36:54","modified_gmt":"2021-11-17T19:36:54","slug":"novyj-variant-ataki-sad-dns-dlya-podstanovki-fiktivnyh-dannyh-v-kesh-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/novyj-variant-ataki-sad-dns-dlya-podstanovki-fiktivnyh-dannyh-v-kesh-dns","title":{"rendered":"Varianti i ri i sulmit SAD DNS p\u00ebr futjen e t\u00eb dh\u00ebnave t\u00eb rreme n\u00eb cache-in DNS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup k\u00ebrkuesish nga Universiteti i Kalifornis\u00eb n\u00eb Riverside publikoi nj\u00eb variant t\u00eb ri t\u00eb sulmit SAD DNS (CVE-2021-20322), i cili funksionon pavar\u00ebsisht mbrojtjes s\u00eb shtuar vitin e kaluar p\u00ebr bllokimin e dob\u00ebsis\u00eb CVE-2020-25705. Metoda e re n\u00eb p\u00ebrgjith\u00ebsi \u00ebsht\u00eb e ngjashme me dob\u00ebsin\u00eb e vitit t\u00eb kaluar dhe dallon vet\u00ebm n\u00eb p\u00ebrdorimin e nj\u00eb lloji tjet\u00ebr t\u00eb paketave ICMP p\u00ebr t\u00eb verifikuar portet aktive UDP. Sulmi i propozuar lejon futjen e t\u00eb dh\u00ebnave t\u00eb rreme n\u00eb cache-in e serverit DNS, gj\u00eb q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb z\u00ebvend\u00ebsuar n\u00eb cache adres\u00ebn IP t\u00eb nj\u00eb domene t\u00eb caktuar dhe p\u00ebr t\u00eb kthyer k\u00ebrkesat p\u00ebr domenin n\u00eb serverin e sulmuesit.      <\/p>\n<p>Metoda e propozuar \u00ebsht\u00eb e funksionueshme vet\u00ebm n\u00eb stakun e rrjetit Linux p\u00ebr shkak t\u00eb lidhjes me ve\u00e7orin\u00eb e funksionimit t\u00eb mekanizmit t\u00eb trajtimit t\u00eb paketave ICMP n\u00eb Linux, i cili \u00ebsht\u00eb burimi i rrjedhjes s\u00eb t\u00eb dh\u00ebnave q\u00eb leht\u00ebson p\u00ebrcaktimin e numrit t\u00eb portit UDP t\u00eb p\u00ebrdorur. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-prohoster\/\"   title=\"serverin\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3026\">serverin<\/a> p\u00ebr d\u00ebrgimin e nj\u00eb k\u00ebrkese t\u00eb jashtme. Ndryshimet q\u00eb parandalojn\u00eb rrjedhjen e informacionit jan\u00eb pranuar n\u00eb b\u00ebrtham\u00ebn Linux n\u00eb fund t\u00eb gushtit (korrigjimi u p\u00ebrfshi n\u00eb b\u00ebrtham\u00ebn 5.15 dhe p\u00ebrdit\u00ebsimet e n\u00ebntorit t\u00eb deg\u00ebve LTS t\u00eb b\u00ebrtham\u00ebs). Korrigjimi p\u00ebrfshin kalimin n\u00eb p\u00ebrdorimin e algoritmit t\u00eb hash-it SipHash n\u00eb cache-itat e rrjetit n\u00eb vend t\u00eb Jenkins Hash.     <\/p>\n<p>Sipas t\u00eb dh\u00ebnave nga studiuesit q\u00eb zbuluan problemin, rreth 38% e rezolvuesve t\u00eb hapur q\u00eb ndodhen n\u00eb rrjet jan\u00eb t\u00eb ndjesh\u00ebm ndaj k\u00ebsaj ndjeshm\u00ebrie, duke p\u00ebrfshir\u00eb sh\u00ebrbimet e njohura DNS si OpenDNS dhe Quad9 (9.9.9.9). Sa i p\u00ebrket softuerit t\u00eb serverit, sulmi mund t\u00eb kryhet duke p\u00ebrdorur paketa t\u00eb tilla si BIND, Unbound dhe dnsmasq n\u00eb server\u00ebt Linux. N\u00eb server\u00ebt DNS t\u00eb nd\u00ebrtuar me Windows dhe BSD, problemi nuk shfaqet. P\u00ebr t\u00eb kryer me sukses sulmin, \u00ebsht\u00eb e nevojshme t\u00eb p\u00ebrdoret spufimi i IP-s\u00eb, dometh\u00ebn\u00eb, duhet q\u00eb ofruesi i sulmuesit t\u00eb mos bllokoj\u00eb paketat me nj\u00eb IP adres\u00eb t\u00eb rreme.      <\/p>\n<p>Kujtojm\u00eb se sulmi SAD DNS lejon kalimin e sigurimeve t\u00eb cilat jan\u00eb shtuar n\u00eb server\u00ebt DNS p\u00ebr t\u00eb bllokuar metod\u00ebn klasike t\u00eb helmimit t\u00eb caches DNS, e propozuar n\u00eb vitin 2008 nga Dan Kaminsky. Metoda e Kaminsky manipuline nj\u00eb madh\u00ebsi t\u00eb vog\u00ebl t\u00eb fush\u00ebs me identifikuesin e k\u00ebrkes\u00ebs DNS, i cili \u00ebsht\u00eb vet\u00ebm 16 bit. P\u00ebr t\u00eb p\u00ebrzgjedhur identifikuesin e sakt\u00eb t\u00eb transaksionit DNS q\u00eb \u00ebsht\u00eb i nevojsh\u00ebm p\u00ebr t\u00eb mashtruar emrin e host-it, \u00ebsht\u00eb e mjaftueshme t\u00eb d\u00ebrgoni rreth 7000 k\u00ebrkesa dhe t\u00eb simuloni rreth 140,000 p\u00ebrgjigje t\u00eb falsifikuara. Sulmi p\u00ebrfshin d\u00ebrgimin n\u00eb DNS resolver t\u00eb nj\u00eb numri t\u00eb madh paketash me lidhje t\u00eb falsifikuara me IP dhe me identifikues t\u00eb ndrysh\u00ebm t\u00eb transaksionit DNS. P\u00ebr t\u00eb parandaluar ruajtjen e p\u00ebrgjigjes s\u00eb par\u00eb, n\u00eb \u00e7do p\u00ebrgjigje t\u00eb falsifikuar sh\u00ebnohet nj\u00eb em\u00ebr domeni i ndryshuar pak (1.example.com, 2.example.com, 3.example.com, etj.).     <\/p>\n<p>P\u00ebr t\u00eb mbrojtur nga ky lloj sulmi, prodhuesit e server\u00ebve DNS zbatuan shp\u00ebrndarjen e rast\u00ebsishme t\u00eb numrave t\u00eb porteve rrjet\u00ebsore origjinale, nga t\u00eb cilat d\u00ebrgohen k\u00ebrkesat p\u00ebr zgjidhje, duke kompensuar k\u00ebshtu mas\u00ebn jo mjaft t\u00eb madhe t\u00eb identifikuesit. Pas zbatimit t\u00eb mbrojtjes, p\u00ebr t\u00eb d\u00ebrguar nj\u00eb p\u00ebrgjigje t\u00eb rreme, p\u00ebrve\u00e7 se duhej t\u00eb zgjedhej nj\u00eb identifikues 16-bit\u00ebsh, duhet t\u00eb p\u00ebrzgjidhej gjithashtu nj\u00eb nga 64 mij\u00eb portet, q\u00eb rriti numrin e mund\u00ebsive p\u00ebr p\u00ebrzgjedhje deri n\u00eb 2^32.    <\/p>\n<p>Metoda SAD DNS lejon mund\u00ebson thjesht\u00ebzimin e p\u00ebrcaktimit t\u00eb numrit t\u00eb portit rrjetor dhe redukton sulmin n\u00eb metod\u00ebn klasike t\u00eb Kaminskit. Sulmuesi mund t\u00eb identifikoj\u00eb k\u00ebrkesat p\u00ebr porte UDP t\u00eb pap\u00ebrdorura dhe aktive, duke shfryt\u00ebzuar rrjedhjen e informacionit mbi aktivitetin e porteve rrjetore gjat\u00eb p\u00ebrpunimit t\u00eb paketave ICMP p\u00ebr p\u00ebrgjigje. Kjo metod\u00eb lejon t\u00eb reduktoj\u00eb me 4 renditje numrin e mund\u00ebsive t\u00eb prov\u00ebs \u2014 2^16+2^16 n\u00eb vend t\u00eb 2^32 (131_072 n\u00eb vend t\u00eb 4_294_967_296). Rrjedhja e informacionit q\u00eb lejon p\u00ebrcaktimin e shpejt\u00eb t\u00eb porteve UDP aktive shkaktohet nga nj\u00eb defekt n\u00eb kodin e trajtimit t\u00eb paketave ICMP me k\u00ebrkesat p\u00ebr fragmentim (flamuri ICMP Fragmentation Needed) ose rip\u00ebrshkrim (flamuri ICMP Redirect). D\u00ebrgimi i paketave t\u00eb tilla ndryshon gjendjen e caches n\u00eb stakun rrjetor, duke lejuar q\u00eb n\u00eb baz\u00eb t\u00eb reagimit t\u00eb serverit t\u00eb p\u00ebrcaktohet cili nga portet UDP \u00ebsht\u00eb aktiv e cili jo.    <\/p>\n<p>Skema e sulmit: Kur nj\u00eb DNS-rezolutor p\u00ebrpiqet t\u00eb p\u00ebrcaktoj\u00eb emrin e domain-it, ai d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb UDP n\u00eb serverin DNS q\u00eb sh\u00ebrben domenin. N\u00eb momentin q\u00eb rezolutori pret p\u00ebrgjigje, sulmuesi mund t\u00eb p\u00ebrcaktoj\u00eb shpejt numrin e portit origjinal q\u00eb u p\u00ebrdor p\u00ebr d\u00ebrgimin e k\u00ebrkes\u00ebs dhe t\u00eb d\u00ebrgoj\u00eb nj\u00eb p\u00ebrgjigje t\u00eb rreme, duke u maskuar si serveri DNS q\u00eb sh\u00ebrben domenin, duke p\u00ebrdorur spufing. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/lir\/ipv4\/\"   title=\"adresat IP\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"694\">adresat IP<\/a>Rezolutori DNS do t\u00eb vendos\u00eb n\u00eb cache t\u00eb dh\u00ebnat e d\u00ebrguara n\u00eb p\u00ebrgjigjen e rreme dhe p\u00ebr nj\u00eb periudh\u00eb t\u00eb caktuar do t\u00eb kthej\u00eb adres\u00ebn IP t\u00eb vendosur nga sulmuesi p\u00ebr t\u00eb gjitha k\u00ebrkesat e tjera DNS p\u00ebr emrin e domain-it.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56176\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 SAD DNS (CVE-2021-20322), \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0443, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-25705. \u041d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0432 \u0446\u0435\u043b\u043e\u043c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0442\u0438\u043f\u0430 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 UDP-\u043f\u043e\u0440\u0442\u043e\u0432. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u044d\u0448 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102308","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 SAD DNS (CVE-2021-20322), \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0443, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-25705. \u041d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0432 \u0446\u0435\u043b\u043e\u043c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0442\u0438\u043f\u0430 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 UDP-\u043f\u043e\u0440\u0442\u043e\u0432. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u044d\u0448 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/novyj-variant-ataki-sad-dns-dlya-podstanovki-fiktivnyh-dannyh-v-kesh-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 SAD DNS \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u044d\u0448 DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 SAD DNS (CVE-2021-20322), \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0443, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-25705. \u041d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0432 \u0446\u0435\u043b\u043e\u043c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0442\u0438\u043f\u0430 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 UDP-\u043f\u043e\u0440\u0442\u043e\u0432. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u044d\u0448 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/novyj-variant-ataki-sad-dns-dlya-podstanovki-fiktivnyh-dannyh-v-kesh-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-11-17T19:36:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-11-17T19:36:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nj\u00eb variant i ri i sulmit SAD DNS p\u00ebr vendosjen e t\u00eb dh\u00ebnave t\u00eb rreme n\u00eb cache-n\u00eb DNS | ProHoster","description":"Nj\u00eb grup k\u00ebrkuesish nga Universiteti i Kalifornis\u00eb n\u00eb Riverside publikoi nj\u00eb variant t\u00eb ri t\u00eb sulmit SAD DNS (CVE-2021-20322), q\u00eb funksionon pavar\u00ebsisht mbrojtjes s\u00eb shtuar vitin e kaluar p\u00ebr t\u00eb bllokuar dob\u00ebsin\u00eb CVE-2020-25705. Metoda e re \u00ebsht\u00eb n\u00eb thelb e ngjashme me dob\u00ebsin\u00eb e vitit t\u00eb kaluar dhe ndryshon vet\u00ebm n\u00eb p\u00ebrdorimin e nj\u00eb lloj tjet\u00ebr t\u00eb paketave ICMP p\u00ebr t\u00eb kontrolluar portet UDP aktive. Sulmi i propozuar lejon t\u00eb b\u00ebhet z\u00ebvend\u00ebsimi i t\u00eb dh\u00ebnave t\u00eb rreme n\u00eb cache-n e serverit DNS, q\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/novyj-variant-ataki-sad-dns-dlya-podstanovki-fiktivnyh-dannyh-v-kesh-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 SAD DNS \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u044d\u0448 DNS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0420\u0438\u0432\u0435\u0440\u0441\u0430\u0439\u0434\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 SAD DNS (CVE-2021-20322), \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0443, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-25705. \u041d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0432 \u0446\u0435\u043b\u043e\u043c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0442\u0438\u043f\u0430 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 UDP-\u043f\u043e\u0440\u0442\u043e\u0432. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u044d\u0448 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/novyj-variant-ataki-sad-dns-dlya-podstanovki-fiktivnyh-dannyh-v-kesh-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-17T19:36:54+00:00","article:modified_time":"2021-11-17T19:36:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102308","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-17 19:38:17","updated":"2026-02-09 21:46:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102308","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102308"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102308\/revisions"}],"predecessor-version":[{"id":160307,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102308\/revisions\/160307"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102308"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102308"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}