ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ FreeBSD, IPnet ืื•ืŸ Nucleus NET ืฉื™ื™ึทื›ื•ืช ืฆื• ืขืจืจืึธืจืก ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื ืก ืงืึทืžืคึผืจืขืฉืึทืŸ

ื“ื™ ืคืึธืจืฉื•ื ื’ ื’ืจื•ืคึผืขืก Forescout Research Labs ืื•ืŸ JSOF Research ื”ืึธื‘ืŸ ืคืืจืขืคื ื˜ืœืขื›ื˜ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ืŸ ืคื•ืŸ ืึท ืฉืœืึธืก ืœืขืจื ืขืŸ ืคื•ืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ื™ืžืคึผืœืึทืžืึทื ืฅ ืคื•ืŸ ื“ื™ ืงืึทืžืคึผืจืขืฉืึทืŸ ืกื›ืขืžืข ื’ืขื ื™ืฆื˜ ืฆื• ืคึผืึทืงืŸ ื“ื•ืคึผืœื™ืงืึทื˜ ื ืขืžืขืŸ ืื™ืŸ DNS, mDNS, DHCP ืื•ืŸ IPv6 RA ืึทืจื˜ื™ืงืœืขืŸ (ืคึผืึทืงืึทืงื™ื ื’ ื“ื•ืคึผืœื™ืงืึทื˜ ืคืขืœื“ ืคึผืึทืจืฅ ืื™ืŸ ืึทืจื˜ื™ืงืœืขืŸ ื•ื•ืึธืก ื›ื•ืœืœ ืงื™ื™ืคืœ ื ืขืžืขืŸ). ื‘ืขืฉืึทืก ื“ื™ ืึทืจื‘ืขื˜, 9 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“, ื•ื•ืึธืก ื–ืขื ืขืŸ ืกืึทืžืขืจื™ื™ื–ื“ ืื•ื ื˜ืขืจ ื“ื™ ืงืึธื“ ื ืึธืžืขืŸ ื ืึธืžืขืŸ: WRECK.

ื™ืฉื•ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ FreeBSD, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืื™ืŸ ื“ื™ ื ืขื˜ื•ื•ืึธืจืงื™ื ื’ ืกืึทื‘ืกื™ืกื˜ืึทืžื– IPnet, Nucleus NET ืื•ืŸ NetX, ื•ื•ืึธืก ื”ืึธื‘ืŸ ื•ื•ืขืจืŸ ื•ื•ื™ื™ื“ืกืคึผืจืขื“ ืื™ืŸ ื“ื™ VxWorks, Nucleus ืื•ืŸ ThreadX ืคืึทืงื˜ื™ืฉ-ืฆื™ื™ื˜ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ ืึธื˜ืึทืžื™ื™ืฉืึทืŸ ื“ืขื•ื•ื™ืกืขืก, ืกื˜ืึธืจื™ื“ื–ืฉ, ืžืขื“ื™ืฆื™ื ื™ืฉ ื“ืขื•ื•ื™ืกืขืก, ืึทื•ื•ื™ืึธื ื™ืงืก, ืคึผืจื™ื ื˜ืขืจืก. ืื•ืŸ ืงืึทื ืกื•ืžืขืจ ืขืœืขืงื˜ืจืึธื ื™ืง. ืขืก ืื™ื– ืขืกื˜ื™ืžืึทื˜ืขื“ ืึทื– ื‘ื™ื™ึท ืžื™ื ื“ืกื˜ืขืจ 100 ืžื™ืœื™ืึธืŸ ื“ืขื•ื•ื™ืกืขืก ื–ืขื ืขืŸ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–.

  • ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ FreeBSD (CVE-2020-7461) ื’ืขืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื–ื™ื™ืŸ ืงืึธื“ ื“ื•ืจืš ืฉื™ืงืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ DHCP ืคึผืึทืงืึทื˜ ืฆื• ืึทื˜ืึทืงืขืจื– ืœื™ื’ืŸ ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื”ื™ื’ืข ื ืขืฅ ื•ื•ื™ ื“ื™ ืงืึธืจื‘ืŸ, ื“ื™ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื•ื•ืึธืก ื“ื•ืจืš ืึท ืฉืคึผื™ืจืขื•ื•ื“ื™ืง DHCP ืงืœื™ืขื ื˜ ื’ืขืคึฟื™ืจื˜. ืฆื• ืึท ื‘ืึทืคืขืจ ืœื•ื™ืคืŸ. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ืžื™ื˜ืึทื’ื™ื™ื˜ื™ื“ ื“ื•ืจืš ื“ื™ ืคืึทืงื˜ ืึทื– ื“ื™ ื“ื”ืงืœื™ืขื ื˜ ืคึผืจืึธืฆืขืก ืื™ืŸ ื•ื•ืึธืก ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ืื™ื– ืคืœื™ืกื ื“ื™ืง ืžื™ื˜ ื‘ืึทืฉื˜ืขื˜ื™ืง ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืื™ืŸ ืึท Capsicum ื–ืึทืžื“ืงืึทืกื˜ืŸ, ื•ื•ืึธืก ืคืืจืœืื ื’ื˜ ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืืŸ ืื ื“ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืฆื• ืึทืจื•ื™ืกื’ืึทื ื’.

    ื“ืขืจ ื˜ืขื•ืช ืฉื˜ืืžื˜ ืคื•ืŸ ืื•ืžืจืขื›ื˜ืขืจ ืคืืจืืžืขื˜ืขืจ ื•ื•ืึทืœื™ื“ืึทืฆื™ืข ืื™ืŸ ื“ืขื DHCP ืกืขืจื•ื•ืขืจ'ืก ืฆื•ืจื™ืงื’ืขืงืขืจื˜ืŸ ืคึผืึทืงืขื˜ ืžื™ื˜ DHCP ืึธืคึผืฆื™ืข 119, ื•ื•ืึธืก ืขืจืœื•ื™ื‘ื˜ ื“ื™ "ื“ืึธืžืขื™ืŸ ื–ื•ื›ืŸ" ืœื™ืกื˜ืข ืฆื• ื•ื•ืขืจืŸ ื“ื•ืจื›ื’ืขื’ืขื‘ืŸ ืฆื•ื ืจืขื–ืึธืœื•ื•ื•ืขืจ. ืื•ืžืจืขื›ื˜ืข ืงืึทืœืงื•ืœืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ืขืจ ื‘ืึทืคืขืจ ื’ืจื™ื™ืก ื•ื•ืึธืก ืื™ื– ื ื•ื™ื˜ื™ืง ืฆื• ืึทืงืึทืžืึทื“ื™ืจืŸ ื“ื™ ืื•ื™ืกื’ืขืคึผืึทืงื˜ืข ื“ืึทื˜ืŸ. ื“ืึธืžืขื™ืŸ ื ืขืžืขืŸ, ื”ืื˜ ื’ืขืคึฟื™ืจื˜ ืฆื• ื“ืขื ืึทื– ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืึธืก ืื™ื– ืงืึธื ื˜ืจืึธืœื™ืจื˜ ื’ืขื•ื•ืึธืจืŸ ื“ื•ืจืš ืึทื˜ืึทืงื™ืจืขืจ ื–ืึธืœ ื’ืขืฉืจื™ื‘ืŸ ื•ื•ืขืจืŸ ื•ื•ื™ื™ื˜ืขืจ ืคึฟื•ืŸ ื“ืขื ืฆื•ื’ืขื˜ื™ื™ืœื˜ืŸ ื‘ืึทืคึฟืขืจ. ื“ืึธืก ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคื™ืงืกื˜ ื’ืขื•ื•ืึธืจืŸ ืื™ืŸ FreeBSD ืื™ืŸ ืกืขืคึผื˜ืขืžื‘ืขืจ ืคึฟื•ืŸ ืœืขืฆื˜ืŸ ื™ืึธืจ. ืžืขืŸ ืงืขืŸ ืขืก ื ืึธืจ ืื•ื™ืกื ื•ืฆืŸ ืžื™ื˜ ืœืึธืงืึทืœืŸ ื ืขืฅ ืฆื•ื˜ืจื™ื˜.

  • ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ืขืžื‘ืขื“ื™ื“ IPnet ื ืขื˜ื•ื•ืึธืจืงื™ื ื’ ืึธื ืœื™ื™ื’ืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ RTOS VxWorks ืึทืœืึทื•ื– ืคึผืึธื˜ืขื ืฆื™ืขืœ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืงืึธื“ ืื•ื™ืฃ ื“ื™ ื“ื ืก ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜ ืจืขื›ื˜ ืฆื• ื™ืžืคึผืจืึทืคึผืขืจ ื”ืึทื ื“ืœื™ื ื’ ืคื•ืŸ ื“ื ืก ืึธื ื–ืึธื’ ืงืึทืžืคึผืจืขืฉืึทืŸ. ื•ื•ื™ ืขืก ืคืืจืงืขืจื˜ ืื•ื™ืก, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืขืจืฉื˜ืขืจ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื“ื•ืจืš ืขืงืกืึธื“ื•ืก ืฆื•ืจื™ืง ืื™ืŸ 2016, ืึธื‘ืขืจ ืื™ื– ืงื™ื™ื ืžืึธืœ ืคืึทืจืคืขืกื˜ื™ืงื˜. ื ื ื™ื™ึทืข ื‘ืงืฉื” ืฆื• ื•ื•ื™ื ื“ ื˜ื™ื™ืš ืื™ื– ืื•ื™ืš ืึทื ืึทื ืกืขืจื“ ืื•ืŸ IPnet ื“ืขื•ื•ื™ืกืขืก ื‘ืœื™ื™ื‘ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง.
  • ะ’ TCP/IP ื–ืขืงืก ืฉื•ื•ืื›ืงื™ื™ื˜ืŸ ื–ืขื ืขืŸ ืื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจื˜ ื’ืขื•ื•ืืจืŸ ืื™ืŸ ื“ืขื ื ื•ืงืœืขื•ืก ื ืขืฅ ืกื˜ืขืง ื•ื•ืืก ื•ื•ืขืจื˜ ื’ืขืฉื˜ื™ืฆื˜ ื“ื•ืจืš ืกื™ืžืขื ืก, ืฆื•ื•ื™ื™ ืคื•ืŸ ื•ื•ืขืœื›ืข ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ื•ื•ื™ื™ื˜ืขืจ ืงืื•ื“ ืื•ื™ืกืคื™ืจื•ื ื’ ืื•ืŸ ืคื™ืจ ื•ื•ืืก ืงืขื ืขืŸ ืคืืจืื•ืจื–ืื›ืŸ ื ื“ืขื ื™ืึทืœ ืืฃ ืกืขืจื•ื•ื™ืก. ื“ื™ ืขืจืฉื˜ืข ืงืจื™ื˜ื™ืฉืข ืคืจืื‘ืœืขื ืื™ื– ืคืืจื‘ื•ื ื“ืŸ ืžื™ื˜ ื ื˜ืขื•ืช ืื™ืŸ ื“ืขืงืืžืคืจืขืกื™ืจืŸ ืงืืžืคืจืขืกื˜ืข DNS ืžืขืกืขื“ื–ืฉืขืก, ืื•ืŸ ื“ื™ ืฆื•ื•ื™ื™ื˜ืข ืžื™ื˜ ืื•ืžืจืขื›ื˜ืŸ ืคืืจื–ื™ืจืŸ ืคื•ืŸ ื“ืืžืขื™ืŸ ื ืืžืขืŸ ืœื™ื™ื‘ืœืก. ื‘ื™ื™ื“ืข ืคืจืื‘ืœืขืžืขืŸ ืจืขื–ื•ืœื˜ื™ืจืŸ ืื™ืŸ ื‘ืืคืขืจ ืื™ื‘ืขืจืคืœื•ืกืŸ ื•ื•ืขืŸ ืžืขืŸ ืคืจืืฆืขืกื™ืจื˜ ืกืคืขืฆื™ืขืœ ื’ืขืžืื›ื˜ืข DNS ืจืขืืงืฆื™ืขืก.

    ืฆื• ื’ื•ื•ื•ืจืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ืึท ืึทื˜ืึทืงืขืจ ืคืฉื•ื˜ ื“ืึทืจืฃ ืฆื• ืฉื™ืงืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ืขื ื˜ืคืขืจ ืฆื• ืงื™ื™ืŸ ืœืึทื“ื–ืฉื™ื˜ืึทืžืึทื˜ ื‘ืขื˜ืŸ ื’ืขืฉื™ืงื˜ ืคื•ืŸ ืึท ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืžื™ื˜ืœ, ืœืžืฉืœ, ื“ื•ืจืš ืึธื ืคื™ืจืŸ ืึท MTIM ื‘ืึทืคืึทืœืŸ ืื•ืŸ ื™ื ื˜ืขืจืคื™ืจื™ื ื’ ืžื™ื˜ ืคืึทืจืงืขืจ ืฆื•ื•ื™ืฉืŸ ื“ื™ ื“ื ืก ืกืขืจื•ื•ืขืจ ืื•ืŸ ื“ื™ ืงืึธืจื‘ืŸ. ืื•ื™ื‘ ื“ืขืจ ืึทื˜ืึทืงืขืจ ื”ืื˜ ืฆื•ื˜ืจื™ื˜ ืฆื• ื“ื™ ื”ื™ื’ืข ื ืขืฅ, ืขืจ ืงืขื ืขืŸ ืงืึทื˜ืขืจ ืึท ื“ื ืก ืกืขืจื•ื•ืขืจ ื•ื•ืึธืก ืคืจื•ื•ื•ืŸ ืฆื• ื‘ืึทืคืึทืœืŸ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ื“ืขื•ื•ื™ืกืขืก ื“ื•ืจืš ืฉื™ืงืŸ ืžื“ื ืก ืจื™ืงื•ื•ืขืก ืื™ืŸ ื‘ืจืึธื“ืงืึทืกื˜ ืžืึธื“ืข.

  • ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ NetX ื ืขืฅ ืึธื ืœื™ื™ื’ืŸ (Azure RTOS NetX), ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืคึฟืึทืจ ThreadX RTOS ืื•ืŸ ื’ืขืขืคื ื˜ ืื™ืŸ 2019 ื ืึธืš ื’ืขื ื•ืžืขืŸ ื“ื•ืจืš ืžื™ื™ืงืจืึธืกืึธืคึฟื˜, ืื™ื– ื’ืขื•ื•ืขืŸ ืœื™ืžื™ื˜ืขื“ ืฆื• ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ื˜ืขื•ืช ืื™ืŸ ืคึผืึทืจืกื™ื ื’ ืงืึทืžืคึผืจืขืกื˜ ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืจืขืกืึธืœื•ื•ืขืจ.

ืคื•ืŸ ื“ื™ ื˜ืขืกื˜ืขื“ ื ืขืฅ ืกื˜ืึทืงืก ืื™ืŸ ื•ื•ืึธืก ืงื™ื™ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื’ืขืคื•ื ืขืŸ ืฉื™ื™ึทื›ื•ืช ืฆื• ืงืึทืžืคึผืจืขืฉืึทืŸ ืคื•ืŸ ืจื™ืคึผื™ื˜ื™ื“ ื“ืึทื˜ืŸ ืื™ืŸ ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ, ื“ื™ ืคืืœื’ืขื ื“ืข ืคึผืจืึทื“ื–ืฉืขืงืก ื–ืขื ืขืŸ ื’ืขื”ื™ื™ืกืŸ: lwIP, Nut/Net, Zephyr, uC/TCP-IP, uC/TCP-IP, FreeRTOS+TCP , OpenThread ืื•ืŸ FNET. ื“ืขืจืฆื•, ื“ื™ ืขืจืฉื˜ืขืจ ืฆื•ื•ื™ื™ (ื ื•ื˜ / ื ืขื˜ ืื•ืŸ ืœื•ื•ื™ืคึผ) ื˜ืึธืŸ ื ื™ื˜ ืฉื˜ื™ืฆืŸ ืงืึทืžืคึผืจืขืฉืึทืŸ ืื™ืŸ ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ ืื™ืŸ ืึทืœืข, ื‘ืฉืขืช ื“ื™ ืื ื“ืขืจืข ื™ื ืกื˜ืจื•ืžืขื ื˜ ื“ืขื ืึธืคึผืขืจืึทืฆื™ืข ืึธืŸ ืขืจืจืึธืจืก. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื‘ื™ื– ืึทื”ืขืจ, ื“ื™ ื–ืขืœื‘ืข ืจื™ืกืขืจื˜ืฉืขืจื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืขื ืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ื˜ืจืขืง, uIP ืื•ืŸ PicoTCP ืกื˜ืึทืงืก.

ืžืงื•ืจ: opennet.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster