{"id":103950,"date":"2022-05-04T15:37:02","date_gmt":"2022-05-04T13:37:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns"},"modified":"2022-05-04T15:37:02","modified_gmt":"2022-05-04T13:37:03","slug":"uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","title":{"rendered":"Vulnerabilitet n\u00eb uClibc dhe uClibc-ng, i cili lejon ndryshimin e t\u00eb dh\u00ebnave n\u00eb cache-in DNS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb bibliotekat standarde C uClibc dhe uClibc-ng, t\u00eb p\u00ebrdorura n\u00eb shum\u00eb pajisje t\u00eb integruara dhe portative, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE nuk \u00ebsht\u00eb caktuar), q\u00eb lejon futjen e t\u00eb dh\u00ebnave t\u00eb rreme n\u00eb cache-n e DNS, gj\u00eb q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb nd\u00ebrruar IP-n\u00eb e nj\u00eb \u0434\u043e\u043cene t\u00eb rast\u00ebsishme n\u00eb cache dhe p\u00ebr t\u00eb redirigjuar k\u00ebrkesat e domenit n\u00eb serverin e sulmuesit. <\/p>\n

Problemi ndikon n\u00eb disa firmware Linux p\u00ebr router-a, pika access dhe pajisje t\u00eb internetit t\u00eb gj\u00ebrave, si dhe distribuime Linux p\u00ebr sisteme t\u00eb integruara, si OpenWRT dhe Embedded Gentoo. Raportohet se vulnerabiliteti manifeston n\u00eb pajisjet e shum\u00eb prodhuesve (p\u00ebr shembull, uClibc p\u00ebrdoret n\u00eb firmware-t e Linksys, Netgear dhe Axis), por p\u00ebrderisa vulnerabiliteti n\u00eb uClibc dhe uClibc-ng nuk \u00ebsht\u00eb ndrequr, informacionet e detajuara mbi pajisjet specifike dhe prodhuesit, n\u00eb produktet e t\u00eb cil\u00ebve paraqitet problemi, ende nuk jan\u00eb zbuluar. <\/p>\n

Vulnerabiliteti shkaktohet nga p\u00ebrdorimi i identifikuesve t\u00eb parashikuesh\u00ebm t\u00eb transaksioneve n\u00eb kodin e d\u00ebrgimit t\u00eb k\u00ebrkesave DNS. Numri identifikues i k\u00ebrkes\u00ebs DNS zgjidhej duke rritur thjesht nj\u00eb num\u00ebr t\u00eb count-it pa aplikuar ndonj\u00eb randomizim shtes\u00eb t\u00eb numrave t\u00eb porteve, \u00e7ka lejonte rrethimin e cache-it t\u00eb DNS p\u00ebrmes d\u00ebrgimin e parashikuesh\u00ebm t\u00eb paketimeve UDP me p\u00ebrgjigje t\u00eb rreme (p\u00ebrgjigja do t\u00eb merret n\u00ebse arrin m\u00eb her\u00ebt se p\u00ebrgjigja e v\u00ebrtet\u00eb dhe p\u00ebrfshin ID-n\u00eb e sakt\u00eb). server\u00eb<\/a> Ndryshe nga metoda e propozuar n\u00eb vitin 2008 nga Kaminski, identifikuesi i transaksionit as duhet t\u00eb gjuhet, pasi q\u00eb ai \u00ebsht\u00eb fillimisht i parashikuesh\u00ebm (fillimisht i caktohet vlera 1, e cila rritet me \u00e7do k\u00ebrkes\u00eb, dhe nuk zgjedhet rast\u00ebsisht).

\"Vulnerabilitet<\/center> <\/p>\n

N\u00eb specifikimin p\u00ebr mbrojtjen nga gjetja e identifikuesit, rekomandohet q\u00eb t\u00eb aplikohet gjithashtu shp\u00ebrndarja rast\u00ebsore e numrave t\u00eb porteve t\u00eb rrjetit nga t\u00eb cil\u00ebt d\u00ebrgohen k\u00ebrkesat DNS, gj\u00eb q\u00eb kompenzon p\u00ebr madh\u00ebsin\u00eb jo mjaft t\u00eb madhe t\u00eb identifikuesit. Me aktivizimin e randomizimit t\u00eb porteve p\u00ebr formimin e p\u00ebrgjigjes s\u00eb rreme, p\u00ebrve\u00e7 gjetjes s\u00eb identifikuesit t\u00eb 16 bit\u00ebve, gjithashtu duhet t\u00eb gjendet numri i portit t\u00eb rrjetit. N\u00eb uClibc dhe uClibc-ng nj\u00eb randomizim i till\u00eb nuk \u00ebsht\u00eb p\u00ebrfshir\u00eb shprehimisht (n\u00eb thirrjen bind nuk \u00ebsht\u00eb caktuar nj\u00eb port UDP i rast\u00ebsish\u00ebm) dhe zbatimi i saj varej nga konfigurimet e sistemit operativ. <\/p>\n

Kur ndalohet randomizimi i poreve, p\u00ebrcaktimi i identifikuesit t\u00eb inkrementuar t\u00eb k\u00ebrkes\u00ebs sh\u00ebnohet si nj\u00eb detyr\u00eb triviale. Por, edhe n\u00eb rastin e aplikimit t\u00eb randomizimit, sulltani duhet vet\u00ebm t\u00eb supozoj\u00eb portin rrjetor nga gam\u00ebn 32768\u201360999, p\u00ebr t\u00eb cil\u00ebn mund t\u00eb p\u00ebrdor\u00eb d\u00ebrgimin masiv t\u00eb p\u00ebrgjigjeve fals n\u00ebp\u00ebrmjet porteve t\u00eb ndryshme t\u00eb rrjetit.

\"Vulnerabilitet<\/center> <\/p>\n

Prania e problemit \u00ebsht\u00eb e konfirmuar n\u00eb t\u00eb gjitha versionet aktuale t\u00eb uClibc dhe uClibc-ng, p\u00ebrfshir\u00eb versionet m\u00eb t\u00eb fundit uClibc 0.9.33.2 dhe uClibc-ng 1.0.40. N\u00eb muajin shtator 2021, informacioni mbi dob\u00ebsin\u00eb u d\u00ebrgua n\u00eb CERT\/CC p\u00ebr p\u00ebrgatitjen e koordinuar t\u00eb rregullimeve. N\u00eb janar 2022, t\u00eb dh\u00ebnat mbi problemin iu kaluan mbi 200 prodhuesve, q\u00eb bashk\u00ebpunojn\u00eb me CERT\/CC. N\u00eb mars, u b\u00eb nj\u00eb p\u00ebrpjekje p\u00ebr t'u lidhur ve\u00e7mas me menaxherin e projektit uClibc-ng, por ai u p\u00ebrgjigj se nuk ishte n\u00eb gjendje t\u00eb rregullonte dob\u00ebsin\u00eb vet\u00eb dhe rekomandoi t\u00eb zbulohej publikuar informacioni mbi problemin, duke shpresuar t\u00eb merrte ndihm\u00eb p\u00ebr zhvillimin e nj\u00eb rregullimi nga komuniteti. Nga prodhuesit, NETGEAR njoftoi p\u00ebr l\u00ebshimin e nj\u00eb p\u00ebrdit\u00ebsimi q\u00eb rregullon dob\u00ebsin\u00eb.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 uClibc \u0438 uClibc-ng, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u044d\u0448 DNS, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0432 \u043a\u044d\u0448\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0439 \u043a \u0434\u043e\u043c\u0435\u043d\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 Linux-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430-\u0432\u0435\u0449\u0435\u0439, \u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":103951,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103950","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb uClibc dhe uClibc-ng, e cila lejon manipulimin e t\u00eb dh\u00ebnave n\u00eb cache-n\u00eb DNS | ProHoster","description":"N\u00eb bibliotekat standarde C, uClibc dhe uClibc-ng, t\u00eb aplikuara n\u00eb shum\u00eb pajisje t\u00eb integruara dhe portative, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE nuk \u00ebsht\u00eb em\u00ebruar), e cila lejon t\u00eb futen t\u00eb dh\u00ebna t\u00eb rreme n\u00eb cache-n\u00eb DNS, q\u00eb \u00ebsht\u00eb e mundur.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 uClibc \u0438 uClibc-ng, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u044d\u0448\u0435 DNS | ProHoster","og:description":"\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 uClibc \u0438 uClibc-ng, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043a\u044d\u0448 DNS, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-uclibc-i-uclibc-ng-pozvolyayushhaya-podmenit-dannye-v-keshe-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-04T13:37:03+00:00","article:modified_time":"2022-05-04T13:37:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103950","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 16:01:28","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-04 13:37:57","updated":"2026-02-22 16:01:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103950","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=103950"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103950\/revisions"}],"predecessor-version":[{"id":162337,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103950\/revisions\/162337"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/103951"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=103950"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=103950"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=103950"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}