BIND DNS server apdeite 9.11.22, 9.16.6, 9.17.4 le ho felisoa ha bofokoli bo 5

E hatisitsoe Lintlafatso tse lokisoang ho makala a tsitsitseng a BIND DNS server 9.11.22 le 9.16.6, hammoho le lekala la liteko 9.17.4, le ntseng le tsoela pele. Bofokoli ba 5 bo kentsoe likhatisong tse ncha. Kotsi e kotsi ka ho fetisisa (CVE-2020-8620) e lumella Baka ho hana ts'ebeletso u le hole ka ho romella sete e itseng ea lipakete boema-kepeng ba TCP bo amohelang likhokahano tsa BIND. Ho romella likopo tse kholo tse sa tloaelehang tsa AXFR boema-kepeng ba TCP, e ka bakang ho 'nete ea hore laebrari ea libuv e sebeletsang khokahanyo ea TCP e tla fetisetsa boholo ho seva, e leng se tla fella ka hore tlhahlobo ea tiisetso e qale ebe ts'ebetso e fela.

Bofokoli bo bong:

• CVE-2020-8621 - mohlaseli a ka etsa tlhahlobo ea boikemelo mme a senya tharollo ha a leka ho nyenyefatsa QNAME kamora ho romella kopo hape. Bothata bo hlaha feela ho li-server tse nang le QNAME minification e lumelletsoeng mme e sebetsa ka mokhoa oa 'pele pele'.
• CVE-2020-8622 - mohlaseli a ka qala tlhahlobo ea boitlamo le ho felisoa ha ts'ohanyetso ea ts'ebetso ea ts'ebetso haeba seva sa DNS sa mohlaseli se khutlisa likarabo tse fosahetseng ka signature ea TSIG ho arabela kopo e tsoang ho seva sa DNS sa motho ea hlasetsoeng.
• CVE-2020-8623 - mohlaseli a ka etsa tlhahlobo ea netefatso le pheliso ea tšohanyetso ea motho ea sebetsang ka ho romella likopo tse entsoeng ka mokhoa o ikhethileng tse saenneng ka senotlolo sa RSA. Bothata bo hlaha feela ha ho hahoa seva ka khetho ea "-enable-native-pkcs11".
• CVE-2020-8624 - mohlaseli ea nang le matla a ho fetola litaba tsa likarolo tse itseng libakeng tsa DNS a ka fumana litokelo tse eketsehileng tsa ho fetola litaba tse ling tsa sebaka sa DNS.

Source: opennet.ru