{"id":98911,"date":"2021-01-21T14:42:14","date_gmt":"2021-01-21T12:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq"},"modified":"2021-01-21T14:42:14","modified_gmt":"2021-01-21T12:42:14","slug":"dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","title":{"rendered":"DNSpooq \u2013 sju nya s\u00e5rbarheter i dnsmasq","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Specialister fr\u00e5n JSOF-forskningslaboratorier har rapporterat om sju nya s\u00e5rbarheter i DNS\/DHCP-servern dnsmasq. Servern dnsmasq \u00e4r mycket popul\u00e4r och anv\u00e4nds som standard i m\u00e5nga Linux-distributioner samt i n\u00e4tverksutrustning fr\u00e5n Cisco, Ubiquiti och andra. S\u00e5rbarheterna i Dnspooq inkluderar DNS-cache poisoning och fj\u00e4rrexekvering av kod. S\u00e5rbarheterna har \u00e5tg\u00e4rdats i dnsmasq 2.83.<\/p>\n

\u00c5r 2008 uppt\u00e4ckte den k\u00e4nda s\u00e4kerhetsforskaren Dan Kaminsky en grundl\u00e4ggande brist i mekanismen f\u00f6r DNS p\u00e5 Internet. Kaminsky bevisade att angripare kan manipulera adresser dom\u00e4ner<\/a> \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435. \u0421 \u0442\u0435\u0445 \u043f\u043e\u0440 \u044d\u0442\u043e \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043a\u0430\u043a «\u0410\u0442\u0430\u043a\u0430 \u041a\u0430\u043c\u0438\u043d\u0441\u043a\u043e\u0433\u043e».<\/p>\n

DNS har ansetts vara ett os\u00e4kert protokoll under \u00e5rtionden, \u00e4ven om det antas garantera en viss niv\u00e5 av integritet. Just d\u00e4rf\u00f6r litar man fortfarande h\u00e5rt p\u00e5 det. Samtidigt har mekanismer f\u00f6r att \u00f6ka s\u00e4kerheten i det ursprungliga DNS-protokollet utvecklats. Dessa mekanismer inkluderar HTTPS, HSTS, DNSSEC och andra initiativ. Trots dessa mekanismer \u00e4r DNS-interception fortfarande en farlig attack \u00e4ven 2021. En stor del av Internet f\u00f6rlitar sig fortfarande p\u00e5 DNS precis som 2008 och \u00e4r utsatt f\u00f6r attacker av samma slag.<\/p>\n

S\u00e5rbarheter vid DNS-cache poisoning:
\nCVE-2020-25686, CVE-2020-25684, CVE-2020-25685. Dessa s\u00e5rbarheter liknar SAD DNS-attacker som nyligen rapporterats av forskare fr\u00e5n Kaliforniens universitet och Tsinghua-universitetet. S\u00e5rbarheterna SAD DNS och DNSpooq kan ocks\u00e5 kombineras f\u00f6r att underl\u00e4tta attackerna ytterligare. Rapportering om ytterligare attacker med oklar p\u00e5verkan har ocks\u00e5 gjorts genom samarbete mellan universiteten (Poison Over Troubled Forwarders m.fl.).
\nS\u00e5rbarheterna fungerar genom att minska entropin. P\u00e5 grund av anv\u00e4ndningen av en svag hash f\u00f6r att identifiera DNS-f\u00f6rfr\u00e5gningar och en otydlig matchning mellan f\u00f6rfr\u00e5gan och svaret kan entropin minskas avsev\u00e4rt, och det beh\u00f6vs endast att gissa ~19 bitar, vilket m\u00f6jligg\u00f6r cache poisoning. S\u00e4ttet som dnsmasq hanterar CNAME-poster g\u00f6r det m\u00f6jligt att f\u00f6rfalska kedjor av CNAME-poster och effektivt f\u00f6rgifta upp till 9 DNS-poster samtidigt.<\/p>\n

Buffertill\u00e4mpningss\u00e5rbarheter: CVE-2020-25687, CVE-2020-25683, CVE-2020-25682, CVE-2020-25681. Alla fyra s\u00e5rbarheterna \u00e4r n\u00e4rvarande i koden med implementering av DNSSEC och f\u00f6rekommer bara n\u00e4r DNSSEC-verifiering \u00e4r aktiverad i inst\u00e4llningarna.<\/p>\n

K\u00e4lla: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq. \u0421\u0435\u0440\u0432\u0435\u0440 dnsmasq \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 linux, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Cisco, Ubiquiti \u0438 \u043f\u0440\u043e\u0447\u0438\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Dnspooq \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 DNS-\u043a\u044d\u0448\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 dnsmasq 2.83. \u0412 2008 \u0433\u043e\u0434\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98911","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNSpooq \u2014 sju nya s\u00e5rbarheter i dnsmasq | ProHoster","description":"Experter fr\u00e5n JSOF forskningslaboratorier har rapporterat sju nya s\u00e5rbarheter i DNS\/DHCP-servern dnsmasq.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DNSpooq \u2014 \u0441\u0435\u043c\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 dnsmasq | ProHoster","og:description":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 JSOF research labs \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 DNS\/DHCP \u0441\u0435\u0440\u0432\u0435\u0440\u0435 dnsmasq.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/dnspooq-sem-novyh-uyazvimostej-v-dnsmasq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-21T12:42:14+00:00","article:modified_time":"2021-01-21T12:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:26","updated":"2026-02-11 11:12:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/98911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=98911"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/98911\/revisions"}],"predecessor-version":[{"id":160551,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/98911\/revisions\/160551"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=98911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=98911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=98911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}