ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ PowerDNS Authoritative Server

ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ PowerDNS Authoritative Server

ื‘ื ื™ืžืฆื ืึทื˜ืึธืจืึทื˜ื™ื™ื˜ื™ื•ื• ื“ื ืก ืกืขืจื•ื•ืขืจ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ PowerDNS Authoritative Server 4.3.1, 4.2.3 ืื•ืŸ 4.1.14ืื™ืŸ ื•ื•ืึธืก ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ืคื™ืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ืฆื•ื•ื™ื™ ืคื•ืŸ ื•ื•ืึธืก ืงืขืŸ ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ืคื™ืจืŸ ืฆื• ื•ื•ื™ื™ึทื˜ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื“ื•ืจืš ืึท ืึทื˜ืึทืงืขืจ.

ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– CVE-2020-24696, CVE-2020-24697 ืื•ืŸ CVE-2020-24698
ื•ื•ื™ืจืงืŸ ืงืึธื“ ืžื™ื˜ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืฉืœื™ืกืœ ื•ื•ืขืงืกืœ ืžืขืงืึทื ื™ื–ืึทื ื’ืกืก-ืฆื™ื’. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื“ืขืจืฉื™ื™ึทื ืขืŸ ื‘ืœื•ื™ื– ื•ื•ืขืŸ PowerDNS ืื™ื– ื’ืขื‘ื•ื™ื˜ ืžื™ื˜ GSS-TSIG ืฉื˜ื™ืฆืŸ ("-enable-experimental-gss-tsig", ื ื™ื˜ ื’ืขื•ื•ื™ื™ื ื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜) ืื•ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื“ื•ืจืš ืฉื™ืงืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ื ืขืฅ ืคึผืึทืงืึทื˜. ืจืึทืกืข ื˜ื ืึธื™ื ืื•ืŸ ื˜ืึธืคึผืœ-ืคืจื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– CVE-2020-24696 ืื•ืŸ CVE-2020-24698 ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืงืจืึทืš ืึธื“ืขืจ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ืึทื˜ืึทืงืขืจ ืงืึธื“ ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืจื™ืงื•ื•ืขืก ืžื™ื˜ ืคืึทืœืฉ ืคืึธืจืžืึทื˜ื˜ืขื“ GSS-TSIG ืกื™ื’ื ืึทื˜ืฉืขืจื–. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ CVE-2020-24697 ืื™ื– ืœื™ืžื™ื˜ืขื“ ืฆื• ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜. ื–ื™ื ื˜ ื“ื™ GSS-TSIG ืงืึธื“ ืื™ื– ื ื™ืฉื˜ ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืคึผืึทืงืึทื“ื–ืฉืึทื–, ืื•ืŸ ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ื›ึผื•ืœืœ ืื ื“ืขืจืข ืคึผืจืึธื‘ืœืขืžืก, ืขืก ืื™ื– ื‘ืึทืฉืœืึธืกืŸ ืฆื• ื’ืึธืจ ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ืขืก ืื™ืŸ ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ PowerDNS Authoritative 4.4.0.

CVE-2020-17482 ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ ืคื•ืŸ ืึทื ื™ื ื™ืฉื™ืึทืœื™ื™ื–ื“ ืคึผืจืึธืฆืขืก ื–ื›ึผืจื•ืŸ, ืึธื‘ืขืจ ื ืึธืจ ืึทืงืขืจื– ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืจื™ืงื•ื•ืขืก ืคื•ืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ื˜ืึทื“ ื ื™ืฆืขืจืก ื•ื•ืึธืก ื”ืึธื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืœื™ื™ื’ืŸ ื ื™ื™ึท ืจืขืงืึธืจื“ืก ืฆื• ื“ื™ ื“ื ืก ื–ืึธื ืขืก ื’ืขื“ื™ื ื˜ ื“ื•ืจืš ื“ื™ ืกืขืจื•ื•ืขืจ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’