{"id":98911,"date":"2021-01-21T14:42:14","date_gmt":"2021-01-21T12:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq"},"modified":"2021-01-21T14:42:14","modified_gmt":"2021-01-21T12:42:14","slug":"dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","title":{"rendered":"DNSpooq \u2014 shtat\u00eb vulnerabilitete t\u00eb reja n\u00eb dnsmasq","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ekspert\u00ebt nga laborator\u00ebt e k\u00ebrkimit JSOF njoftuan p\u00ebr shtat\u00eb t\u00eb reja dob\u00ebsi n\u00eb serverin DNS\/DHCP dnsmasq. Serveri dnsmasq \u00ebsht\u00eb mjaft popullor dhe p\u00ebrdoret si parazgjedhje n\u00eb shum\u00eb shp\u00ebrndarje Linux, si dhe n\u00eb pajisjet e rrjetit Cisco, Ubiquiti dhe t\u00eb tjera. Dob\u00ebsit\u00eb Dnspooq p\u00ebrfshijn\u00eb helmin e kesheve DNS, si dhe ekzekutimin e kodit n\u00eb distanc\u00eb. Dob\u00ebsit\u00eb jan\u00eb rregulluar n\u00eb dnsmasq 2.83.<\/p>\n

N\u00eb vitin 2008, hulumtuesi i njohur n\u00eb fush\u00ebn e siguris\u00eb Dan Kaminsky zbuloi dhe zbuloi nj\u00eb defekt themelor t\u00eb mekanizmit DNS n\u00eb Internet. Kaminsky tregoi se mekat t\u00eb mund\u00ebsh me adresat domen\u00ebve<\/a> dhe t\u00eb vjedh\u00eb t\u00eb dh\u00ebna. Nga at\u00ebher\u00eb, kjo \u00ebsht\u00eb njohur si «Sulmi Kaminski».<\/p>\n

DNS \u00ebsht\u00eb konsideruar si nj\u00eb protokoll i pa_sigurt p\u00ebr dekada, megjith\u00ebse supozohet se garanton nj\u00eb nivel t\u00eb caktuar t\u00eb integritetit. Pik\u00ebrisht p\u00ebr k\u00ebt\u00eb arsye, ai vazhdon t\u00eb mb\u00ebshtetet fort. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, jan\u00eb zhvilluar mekanizma p\u00ebr t\u00eb rritur sigurin\u00eb e protokollit origjinal t\u00eb DNS. K\u00ebta mekanizma p\u00ebrfshijn\u00eb HTTPS, HSTS, DNSSEC dhe nisma t\u00eb tjera. Megjithat\u00eb, edhe me k\u00ebta mekanizma, kapja e DNS mbetet nj\u00eb sulm i rreziksh\u00ebm n\u00eb vitin 2021. Nj\u00eb pjes\u00eb e madhe e internetit vazhdon t\u00eb mb\u00ebshtetet n\u00eb DNS po ashtu si\u00e7 b\u00ebnte n\u00eb vitin 2008 dhe \u00ebsht\u00eb e ekspozuar ndaj sulmeve t\u00eb nj\u00ebjta.<\/p>\n

Dob\u00ebsit\u00eb nga helmimi i caches DNSpooq:
\nCVE-2020-25686, CVE-2020-25684, CVE-2020-25685. K\u00ebto dob\u00ebsi jan\u00eb t\u00eb ngjashme me sulmet SAD DNS, t\u00eb cilat jan\u00eb raportuar s\u00eb fundmi nga studiues nga Universiteti i Kalifornis\u00eb dhe Universiteti Tsinghua. Dob\u00ebsit\u00eb SAD DNS dhe DNSpooq gjithashtu mund t\u00eb kombinohen p\u00ebr t\u00eb leht\u00ebsuar edhe m\u00eb shum\u00eb sulmet. Jan\u00eb raportuar gjithashtu sulme t\u00eb tjera me pasoja t\u00eb paqarta n\u00ebp\u00ebrmjet p\u00ebrpjekjeve t\u00eb p\u00ebrbashk\u00ebta t\u00eb universiteteve (Poison Over Troubled Forwarders etj.).
\nD\u00ebshmimet funksionojn\u00eb nga zvog\u00eblimi i entropis\u00eb. P\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb nj\u00eb hash-i t\u00eb dob\u00ebt p\u00ebr identifikimin e k\u00ebrkesave DNS dhe nj\u00eb p\u00ebrputhjeje t\u00eb pasakt\u00eb t\u00eb k\u00ebrkes\u00ebs me p\u00ebrgjigjen, entropia mund t\u00eb ulet ndjesh\u00ebm dhe nevojitet vet\u00ebm t\u00eb gjejm\u00eb rreth ~19 bits, q\u00eb b\u00ebn t\u00eb mundur helmimin e caches. M\u00ebnyra si e trajton dnsmasq CNAME-t\u00eb lejon falsifikimin e zinxhir\u00ebve CNAME dhe efekton helmimin e deri n\u00eb 9 regjistrave DNS p\u00ebr nj\u00ebher\u00ebsh.<\/p>\n

D\u00ebshmimet p\u00ebr mbip\u00ebrshkrimin e recuerdos: CVE-2020-25687, CVE-2020-25683, CVE-2020-25682, CVE-2020-25681. T\u00eb gjitha 4 d\u00ebshmit\u00eb e sh\u00ebnuara jan\u00eb t\u00eb pranishme n\u00eb kodin me implementim t\u00eb DNSSEC dhe shfaqen vet\u00ebm kur aktivizohet kontrolli p\u00ebrmes DNSSEC n\u00eb konfigurim.<\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq. \u0421\u0435\u0440\u0432\u0435\u0440 dnsmasq \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 linux, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Cisco, Ubiquiti \u0438 \u043f\u0440\u043e\u0447\u0438\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Dnspooq \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u043a\u044d\u0448\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 dnsmasq 2.83. \u0412 2008 \u0433\u043e\u0434\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98911","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNSpooq \u2014 shtat\u00eb k\u00ebrc\u00ebnime t\u00eb reja n\u00eb dnsmasq | ProHoster","description":"Ekspert\u00ebt nga laborator\u00ebt e k\u00ebrkimit JSOF raportuan mbi shtat\u00eb k\u00ebrc\u00ebnime t\u00eb reja n\u00eb serverin DNS\/DHCP dnsmasq. Serveri dnsmasq \u00ebsht\u00eb mjaft i njohur dhe p\u00ebrdoret si parazgjedhje n\u00eb shum\u00eb distribuese Linux, si dhe n\u00eb pajisjet rrjetore Cisco, Ubiquiti dhe t\u00eb tjera. K\u00ebrc\u00ebnimet Dnspooq p\u00ebrfshijn\u00eb helmimin e DNS caches, si dhe ekzekutimin e kodit t\u00eb larg\u00ebt. K\u00ebto k\u00ebrc\u00ebnime jan\u00eb rregulluar n\u00eb dnsmasq 2.83. N\u00eb vitin 2008,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DNSpooq \u2014 \u0441\u0435\u043c\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 dnsmasq | ProHoster","og:description":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq. \u0421\u0435\u0440\u0432\u0435\u0440 dnsmasq \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 linux, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Cisco, Ubiquiti \u0438 \u043f\u0440\u043e\u0447\u0438\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Dnspooq \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u043a\u044d\u0448\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 dnsmasq 2.83. \u0412 2008 \u0433\u043e\u0434\u0443","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-21T12:42:14+00:00","article:modified_time":"2021-01-21T12:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:26","updated":"2026-02-11 11:12:04"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=98911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98911\/revisions"}],"predecessor-version":[{"id":160551,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98911\/revisions\/160551"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=98911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=98911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=98911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}