ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ FreeBSD, IPnet ืื•ืŸ Nucleus NET ืฉื™ื™ึทื›ื•ืช ืฆื• ืขืจืจืึธืจืก ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื ืก ืงืึทืžืคึผืจืขืฉืึทืŸ

ื“ื™ ืคืึธืจืฉื•ื ื’ ื’ืจื•ืคึผืขืก Forescout Research Labs ืื•ืŸ JSOF Research ื”ืึธื‘ืŸ ืคืืจืขืคื ื˜ืœืขื›ื˜ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ืŸ ืคื•ืŸ ืึท ืฉืœืึธืก ืœืขืจื ืขืŸ ืคื•ืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ื™ืžืคึผืœืึทืžืึทื ืฅ ืคื•ืŸ ื“ื™ ืงืึทืžืคึผืจืขืฉืึทืŸ ืกื›ืขืžืข ื’ืขื ื™ืฆื˜ ืฆื• ืคึผืึทืงืŸ ื“ื•ืคึผืœื™ืงืึทื˜ ื ืขืžืขืŸ ืื™ืŸ DNS, mDNS, DHCP ืื•ืŸ IPv6 RA ืึทืจื˜ื™ืงืœืขืŸ (ืคึผืึทืงืึทืงื™ื ื’ ื“ื•ืคึผืœื™ืงืึทื˜ ืคืขืœื“ ืคึผืึทืจืฅ ืื™ืŸ ืึทืจื˜ื™ืงืœืขืŸ ื•ื•ืึธืก ื›ื•ืœืœ ืงื™ื™ืคืœ ื ืขืžืขืŸ). ื‘ืขืฉืึทืก ื“ื™ ืึทืจื‘ืขื˜, 9 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“, ื•ื•ืึธืก ื–ืขื ืขืŸ ืกืึทืžืขืจื™ื™ื–ื“ ืื•ื ื˜ืขืจ ื“ื™ ืงืึธื“ ื ืึธืžืขืŸ ื ืึธืžืขืŸ: WRECK.

ื™ืฉื•ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ FreeBSD, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืื™ืŸ ื“ื™ ื ืขื˜ื•ื•ืึธืจืงื™ื ื’ ืกืึทื‘ืกื™ืกื˜ืึทืžื– IPnet, Nucleus NET ืื•ืŸ NetX, ื•ื•ืึธืก ื”ืึธื‘ืŸ ื•ื•ืขืจืŸ ื•ื•ื™ื™ื“ืกืคึผืจืขื“ ืื™ืŸ ื“ื™ VxWorks, Nucleus ืื•ืŸ ThreadX ืคืึทืงื˜ื™ืฉ-ืฆื™ื™ื˜ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ ืึธื˜ืึทืžื™ื™ืฉืึทืŸ ื“ืขื•ื•ื™ืกืขืก, ืกื˜ืึธืจื™ื“ื–ืฉ, ืžืขื“ื™ืฆื™ื ื™ืฉ ื“ืขื•ื•ื™ืกืขืก, ืึทื•ื•ื™ืึธื ื™ืงืก, ืคึผืจื™ื ื˜ืขืจืก. ืื•ืŸ ืงืึทื ืกื•ืžืขืจ ืขืœืขืงื˜ืจืึธื ื™ืง. ืขืก ืื™ื– ืขืกื˜ื™ืžืึทื˜ืขื“ ืึทื– ื‘ื™ื™ึท ืžื™ื ื“ืกื˜ืขืจ 100 ืžื™ืœื™ืึธืŸ ื“ืขื•ื•ื™ืกืขืก ื–ืขื ืขืŸ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–.

  • ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ FreeBSD (CVE-2020-7461) ื’ืขืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื–ื™ื™ืŸ ืงืึธื“ ื“ื•ืจืš ืฉื™ืงืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ DHCP ืคึผืึทืงืึทื˜ ืฆื• ืึทื˜ืึทืงืขืจื– ืœื™ื’ืŸ ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื”ื™ื’ืข ื ืขืฅ ื•ื•ื™ ื“ื™ ืงืึธืจื‘ืŸ, ื“ื™ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื•ื•ืึธืก ื“ื•ืจืš ืึท ืฉืคึผื™ืจืขื•ื•ื“ื™ืง DHCP ืงืœื™ืขื ื˜ ื’ืขืคึฟื™ืจื˜. ืฆื• ืึท ื‘ืึทืคืขืจ ืœื•ื™ืคืŸ. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ืžื™ื˜ืึทื’ื™ื™ื˜ื™ื“ ื“ื•ืจืš ื“ื™ ืคืึทืงื˜ ืึทื– ื“ื™ ื“ื”ืงืœื™ืขื ื˜ ืคึผืจืึธืฆืขืก ืื™ืŸ ื•ื•ืึธืก ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ืื™ื– ืคืœื™ืกื ื“ื™ืง ืžื™ื˜ ื‘ืึทืฉื˜ืขื˜ื™ืง ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืื™ืŸ ืึท Capsicum ื–ืึทืžื“ืงืึทืกื˜ืŸ, ื•ื•ืึธืก ืคืืจืœืื ื’ื˜ ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืืŸ ืื ื“ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืฆื• ืึทืจื•ื™ืกื’ืึทื ื’.

    ื“ื™ ืขืกืึทื ืก ืคื•ืŸ ื“ื™ ื˜ืขื•ืช ืื™ื– ืื™ืŸ ืคืึทืœืฉ ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ืคื•ืŸ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืื™ืŸ ื“ื™ ืคึผืึทืงืึทื˜ ืื•ืžื’ืขืงืขืจื˜ ื“ื•ืจืš ื“ื™ DHCP ืกืขืจื•ื•ืขืจ ืžื™ื˜ DHCP ืึธืคึผืฆื™ืข 119, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื“ื™ "ื–ื•ืš ืคืขืœื“" ืจืฉื™ืžื” ืฆื• ื“ื™ ืจืขืกืึธืœื•ื•ืขืจ. ืื•ืžืจืขื›ื˜ ื›ืขื–ืฉื‘ืŸ ืคื•ืŸ ื“ื™ ื‘ืึทืคืขืจ ื’ืจื™ื™ืก ืคืืจืœืื ื’ื˜ ืฆื• ืึทืงืึทืžืึทื“ื™ื™ื˜ ืึทื ืคึผืึทืงื˜ ืคืขืœื“ ื ืขืžืขืŸ ื’ืขืคื™ืจื˜ ืฆื• ืึทื˜ืึทืงืขืจ-ืงืึทื ื˜ืจืึธื•ืœื“ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื’ืขืฉืจื™ื‘ืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืคื•ืŸ ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืึทืคืขืจ. ืื™ืŸ FreeBSD, ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜ ืฆื•ืจื™ืง ืื™ืŸ ืกืขืคื˜ืขืžื‘ืขืจ ืœืขืฆื˜ืข ื™ืึธืจ. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืงืขื ืขืŸ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื‘ืœื•ื™ื– ืื•ื™ื‘ ืื™ืจ ื”ืึธื‘ืŸ ืึทืงืกืขืก ืฆื• ื“ื™ ื”ื™ื’ืข ื ืขืฅ.

  • ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ืขืžื‘ืขื“ื™ื“ IPnet ื ืขื˜ื•ื•ืึธืจืงื™ื ื’ ืึธื ืœื™ื™ื’ืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ RTOS VxWorks ืึทืœืึทื•ื– ืคึผืึธื˜ืขื ืฆื™ืขืœ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืงืึธื“ ืื•ื™ืฃ ื“ื™ ื“ื ืก ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜ ืจืขื›ื˜ ืฆื• ื™ืžืคึผืจืึทืคึผืขืจ ื”ืึทื ื“ืœื™ื ื’ ืคื•ืŸ ื“ื ืก ืึธื ื–ืึธื’ ืงืึทืžืคึผืจืขืฉืึทืŸ. ื•ื•ื™ ืขืก ืคืืจืงืขืจื˜ ืื•ื™ืก, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืขืจืฉื˜ืขืจ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื“ื•ืจืš ืขืงืกืึธื“ื•ืก ืฆื•ืจื™ืง ืื™ืŸ 2016, ืึธื‘ืขืจ ืื™ื– ืงื™ื™ื ืžืึธืœ ืคืึทืจืคืขืกื˜ื™ืงื˜. ื ื ื™ื™ึทืข ื‘ืงืฉื” ืฆื• ื•ื•ื™ื ื“ ื˜ื™ื™ืš ืื™ื– ืื•ื™ืš ืึทื ืึทื ืกืขืจื“ ืื•ืŸ IPnet ื“ืขื•ื•ื™ืกืขืก ื‘ืœื™ื™ื‘ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง.
  • ื–ืขืงืก ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ Nucleus NET TCP / IP ืึธื ืœื™ื™ื’ืŸ, ื’ืขืฉื˜ื™ืฆื˜ ื“ื•ืจืš Siemens, ืคื•ืŸ ื•ื•ืึธืก ืฆื•ื•ื™ื™ ืงืขืŸ ืคื™ืจืŸ ืฆื• ื•ื•ื™ื™ึทื˜ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’, ืื•ืŸ ืคื™ืจ ืงืขืŸ ืคื™ืจืŸ ืฆื• ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜. ื“ืขืจ ืขืจืฉื˜ืขืจ ื’ืขืคืขืจืœืขืš ืคึผืจืึธื‘ืœืขื ืื™ื– ืฉื™ื™ึทื›ื•ืช ืฆื• ืึท ื˜ืขื•ืช ื•ื•ืขืŸ ื“ื™ืงืึทืžืคึผืจืขืกื™ื ื’ ืงืึทืžืคึผืจืขืกื˜ ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ, ืื•ืŸ ื“ื™ ืจื’ืข ืื™ื– ืฉื™ื™ึทื›ื•ืช ืฆื• ืคืึทืœืฉ ืคึผืึทืจืกื™ื ื’ ืคื•ืŸ ืคืขืœื“ ื ืึธืžืขืŸ ืœืึทื‘ืขืœืก. ื‘ื™ื™ื“ืข ืคึผืจืึธื‘ืœืขืžืก ืคื™ืจืŸ ืฆื• ืึท ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื• ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืกืคึผืขืฆื™ืขืœ ืคืึธืจืžืึทื˜ื˜ืขื“ ื“ื ืก ืจืขืกืคึผืึธื ืกืขืก.

    ืฆื• ื’ื•ื•ื•ืจืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, ืึท ืึทื˜ืึทืงืขืจ ืคืฉื•ื˜ ื“ืึทืจืฃ ืฆื• ืฉื™ืงืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ืขื ื˜ืคืขืจ ืฆื• ืงื™ื™ืŸ ืœืึทื“ื–ืฉื™ื˜ืึทืžืึทื˜ ื‘ืขื˜ืŸ ื’ืขืฉื™ืงื˜ ืคื•ืŸ ืึท ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืžื™ื˜ืœ, ืœืžืฉืœ, ื“ื•ืจืš ืึธื ืคื™ืจืŸ ืึท MTIM ื‘ืึทืคืึทืœืŸ ืื•ืŸ ื™ื ื˜ืขืจืคื™ืจื™ื ื’ ืžื™ื˜ ืคืึทืจืงืขืจ ืฆื•ื•ื™ืฉืŸ ื“ื™ ื“ื ืก ืกืขืจื•ื•ืขืจ ืื•ืŸ ื“ื™ ืงืึธืจื‘ืŸ. ืื•ื™ื‘ ื“ืขืจ ืึทื˜ืึทืงืขืจ ื”ืื˜ ืฆื•ื˜ืจื™ื˜ ืฆื• ื“ื™ ื”ื™ื’ืข ื ืขืฅ, ืขืจ ืงืขื ืขืŸ ืงืึทื˜ืขืจ ืึท ื“ื ืก ืกืขืจื•ื•ืขืจ ื•ื•ืึธืก ืคืจื•ื•ื•ืŸ ืฆื• ื‘ืึทืคืึทืœืŸ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ื“ืขื•ื•ื™ืกืขืก ื“ื•ืจืš ืฉื™ืงืŸ ืžื“ื ืก ืจื™ืงื•ื•ืขืก ืื™ืŸ ื‘ืจืึธื“ืงืึทืกื˜ ืžืึธื“ืข.

  • ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ NetX ื ืขืฅ ืึธื ืœื™ื™ื’ืŸ (Azure RTOS NetX), ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืคึฟืึทืจ ThreadX RTOS ืื•ืŸ ื’ืขืขืคื ื˜ ืื™ืŸ 2019 ื ืึธืš ื’ืขื ื•ืžืขืŸ ื“ื•ืจืš ืžื™ื™ืงืจืึธืกืึธืคึฟื˜, ืื™ื– ื’ืขื•ื•ืขืŸ ืœื™ืžื™ื˜ืขื“ ืฆื• ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ื˜ืขื•ืช ืื™ืŸ ืคึผืึทืจืกื™ื ื’ ืงืึทืžืคึผืจืขืกื˜ ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืจืขืกืึธืœื•ื•ืขืจ.

ืคื•ืŸ ื“ื™ ื˜ืขืกื˜ืขื“ ื ืขืฅ ืกื˜ืึทืงืก ืื™ืŸ ื•ื•ืึธืก ืงื™ื™ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื’ืขืคื•ื ืขืŸ ืฉื™ื™ึทื›ื•ืช ืฆื• ืงืึทืžืคึผืจืขืฉืึทืŸ ืคื•ืŸ ืจื™ืคึผื™ื˜ื™ื“ ื“ืึทื˜ืŸ ืื™ืŸ ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ, ื“ื™ ืคืืœื’ืขื ื“ืข ืคึผืจืึทื“ื–ืฉืขืงืก ื–ืขื ืขืŸ ื’ืขื”ื™ื™ืกืŸ: lwIP, Nut/Net, Zephyr, uC/TCP-IP, uC/TCP-IP, FreeRTOS+TCP , OpenThread ืื•ืŸ FNET. ื“ืขืจืฆื•, ื“ื™ ืขืจืฉื˜ืขืจ ืฆื•ื•ื™ื™ (ื ื•ื˜ / ื ืขื˜ ืื•ืŸ ืœื•ื•ื™ืคึผ) ื˜ืึธืŸ ื ื™ื˜ ืฉื˜ื™ืฆืŸ ืงืึทืžืคึผืจืขืฉืึทืŸ ืื™ืŸ ื“ื ืก ืึทืจื˜ื™ืงืœืขืŸ ืื™ืŸ ืึทืœืข, ื‘ืฉืขืช ื“ื™ ืื ื“ืขืจืข ื™ื ืกื˜ืจื•ืžืขื ื˜ ื“ืขื ืึธืคึผืขืจืึทืฆื™ืข ืึธืŸ ืขืจืจืึธืจืก. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื‘ื™ื– ืึทื”ืขืจ, ื“ื™ ื–ืขืœื‘ืข ืจื™ืกืขืจื˜ืฉืขืจื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืขื ืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ื˜ืจืขืง, uIP ืื•ืŸ PicoTCP ืกื˜ืึทืงืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’