{"id":98911,"date":"2021-01-21T14:42:14","date_gmt":"2021-01-21T12:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq"},"modified":"2021-01-21T14:42:14","modified_gmt":"2021-01-21T12:42:14","slug":"dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","title":{"rendered":"DNSpooq - shtat\u00eb vulnerabilitete t\u00eb reja n\u00eb dnsmasq","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Specialist\u00ebt nga laborator\u00ebt e k\u00ebrkimeve JSOF informuan p\u00ebr shtat\u00eb dob\u00ebsi t\u00eb reja n\u00eb serverin DNS\/DHCP dnsmasq. Serveri dnsmasq \u00ebsht\u00eb mjaft i njohur dhe p\u00ebrdoret si i zakonsh\u00ebm n\u00eb shum\u00eb distribucione Linux, si dhe n\u00eb pajisje rrjetike Cisco, Ubiquiti dhe t\u00eb tjera. Dob\u00ebsit\u00eb Dnspooq p\u00ebrfshijn\u00eb helmimin e ka\u00e7it DNS, si dhe ekzekutimin e kodit nga distanca. Dob\u00ebsit\u00eb jan\u00eb rregulluar n\u00eb dnsmasq 2.83.<\/p>\n<p>N\u00eb vitin 2008, studiuesi i njohur n\u00eb fush\u00ebn e siguris\u00eb Dan Kaminsky zbuloi dhe publikoi nj\u00eb t\u00eb met\u00eb themelore t\u00eb mekanizmit DNS n\u00eb Internet. Kaminsky provokoi se sulmuesit mund t\u00eb nd\u00ebrronin adresat <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/domain\/\"   title=\"t\u00eb domen\u00ebve\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3158\">t\u00eb domen\u00ebve<\/a> dhe vjedhja e t\u00eb dh\u00ebnave. Q\u00eb nga at\u00ebher\u00eb, kjo u b\u00eb e njohur si &laquo;Sulmi i Kaminskyt&raquo;.<\/p>\n<p>DNS \u00ebsht\u00eb konsideruar nj\u00eb protokoll i pasigurt p\u00ebr dekad\u00eb t\u00eb t\u00ebra, megjith\u00ebse supozohet se garanton nj\u00eb nivel t\u00eb caktuar t\u00eb integritetit. P\u00ebr k\u00ebt\u00eb arsye, ai vazhdon t\u00eb jet\u00eb shum\u00eb i besuesh\u00ebm. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, jan\u00eb zhvilluar mekanizma p\u00ebr t\u00eb rritur sigurin\u00eb e protokollit origjinal DNS. K\u00ebta mekanizma p\u00ebrfshijn\u00eb HTTPS, HSTS, DNSSEC dhe iniciativa t\u00eb tjera. Megjithat\u00eb, edhe me pranin\u00eb e k\u00ebtyre mekanizmave, kapja e DNS mbetet nj\u00eb sulm i rreziksh\u00ebm n\u00eb vitin 2021. Pjesa m\u00eb e madhe e internetit vazhdon t\u00eb mb\u00ebshtetet n\u00eb DNS po ashtu si n\u00eb vitin 2008 dhe \u00ebsht\u00eb e ekspozuar ndaj sulmeve t\u00eb nj\u00ebjta.<\/p>\n<p>Dob\u00ebsit\u00eb e helmimit t\u00eb ka\u00e7it DNSpooq:<br \/>\nCVE-2020-25686, CVE-2020-25684, CVE-2020-25685. K\u00ebto dob\u00ebsi jan\u00eb t\u00eb ngjashme me sulmet SAD DNS, p\u00ebr t\u00eb cilat studiuesit nga Universiteti i Kalifornis\u00eb dhe Universiteti Tsinghua kan\u00eb raportuar s\u00eb fundi. Dob\u00ebsit\u00eb SAD DNS dhe DNSpooq gjithashtu mund t\u00eb bashkohen p\u00ebr t\u00eb leht\u00ebsuar m\u00eb tej sulmet. Rreth sulmeve t\u00eb tjera me pasoja t\u00eb paqarta gjithashtu jan\u00eb raportuar nga p\u00ebrpjekjet e p\u00ebrbashk\u00ebta t\u00eb universiteteve (Poison Over Troubled Forwarders etj.).<br \/>\nDob\u00ebsit\u00eb funksionojn\u00eb duke ulur entropin\u00eb. P\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb nj\u00eb hash t\u00eb dob\u00ebt p\u00ebr identifikimin e k\u00ebrkesave DNS dhe p\u00ebrputhjes jo t\u00eb sakt\u00eb t\u00eb k\u00ebrkes\u00ebs me p\u00ebrgjigjen, entropia mund t\u00eb ulet ndjesh\u00ebm dhe nevojitet vet\u00ebm t\u00eb gjesh ~19 bit, \u00e7ka e b\u00ebn t\u00eb mundsh\u00ebm helmimin e ka\u00e7it. M\u00ebnyra se si dnsmasq trajton regjistrimet CNAME lejon falsifikimin e zinxhirit t\u00eb regjistrimeve CNAME dhe po ashtu helmimin e deri n\u00eb 9 regjistrimeve DNS n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb.<\/p>\n<p>Dob\u00ebsit\u00eb e mbushjes s\u00eb tamponit: CVE-2020-25687, CVE-2020-25683, CVE-2020-25682, CVE-2020-25681. T\u00eb gjitha 4 dob\u00ebsit\u00eb e p\u00ebrmendura jan\u00eb t\u00eb pranishme n\u00eb kodin me realizimin e DNSSEC dhe shfaqen vet\u00ebm kur aktivizohet kontrolli p\u00ebrmes DNSSEC n\u00eb cil\u00ebsime.<\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"http:\/\/www.linux.org.ru\/news\/security\/16121275\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq. \u0421\u0435\u0440\u0432\u0435\u0440 dnsmasq \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 linux, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Cisco, Ubiquiti \u0438 \u043f\u0440\u043e\u0447\u0438\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Dnspooq \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u043a\u044d\u0448\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 dnsmasq 2.83. \u0412 2008 \u0433\u043e\u0434\u0443 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98911","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47DNSpooq \u2014 \u0441\u0435\u043c\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 dnsmasq | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-01-21T12:42:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-01-21T12:42:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNSpooq \u2014 shtat\u00eb dob\u00ebsi t\u00eb reja n\u00eb dnsmasq | ProHoster","description":"Specialist\u00ebt nga laborator\u00ebt e k\u00ebrkimit JSOF njoftuan p\u00ebr shtat\u00eb dob\u00ebsi t\u00eb reja n\u00eb serverin DNS\/DHCP dnsmasq.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DNSpooq \u2014 \u0441\u0435\u043c\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 dnsmasq | ProHoster","og:description":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-21T12:42:14+00:00","article:modified_time":"2021-01-21T12:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:26","updated":"2026-02-11 11:12:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=98911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98911\/revisions"}],"predecessor-version":[{"id":160551,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98911\/revisions\/160551"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=98911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=98911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=98911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}