yun2025 发表于 11 分钟前

保乐力加亮相第九届中国国际进口博览会

保乐力加亮相第九届中国国际进口博览会

Hickory DNS:DNS签名验证缺少对所属域的核对

11月8日公开的漏洞记录CVE-2026-123605涉及Hickory DNS。验证程序会查找签名者名称对应的密钥,却漏掉关键一步,查证这个名称是否属于正在验证的记录集所在的域。这使掌握一个已签名域的参与者有机会为另一个无关域的记录背书,并使依赖该程序的解析器接受错误结果。公告分别列出了网络库和协议库的范围。版本清单标出的受影响范围包括0.1至0.25.0-alpha.3(含)。

这条记录给出的CVSS 3.1基础评分为8.8分,分级为高危。按照评分列出的条件,利用者可通过网络接触相关功能,需要已有低权限账户或相当的访问权,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU3OTE2Njk2MA==.html
https://v.youku.com/v_show/id_XNjU3OTE2ODQ2NA==.html
https://v.youku.com/v_show/id_XNjU4ODg0MTQ5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODg0NjA1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODg0NjA1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODg0OTAyNA==.html
https://v.youku.com/v_show/id_XNjU3OTE2ODQ0NA==.html
https://v.youku.com/v_show/id_XNjU4ODg0MTQ0MA==.html
https://v.youku.com/v_show/id_XNjU3OTE2NjkwMA==.html
https://v.youku.com/v_show/id_XNjU4ODg0NTk4NA==.html
https://v.youku.com/v_show/id_XNjU4ODg0NTk0OA==.html
https://v.youku.com/v_show/id_XNjU4ODg0ODkxMg==.html
https://v.youku.com/v_show/id_XNjU4ODg0ODkwOA==.html
https://v.youku.com/v_show/id_XNjU4ODg0ODg5Mg==.html
https://v.youku.com/v_show/id_XNjU3OTE2ODM0NA==.html
https://v.youku.com/v_show/id_XNjU4ODg0MTMzNg==.html
https://v.youku.com/v_show/id_XNjU3OTE2ODMyMA==.html
https://v.youku.com/v_show/id_XNjU4ODg0MTMyOA==.html
https://v.youku.com/v_show/id_XNjU4ODg0NDMyMA==.html
https://v.youku.com/v_show/id_XNjU4ODg0NzMzMg==.html
https://v.youku.com/v_show/id_XNjU3OTE2OTg0NA==.html
https://v.youku.com/v_show/id_XNjU3OTE3MTM0OA==.html
https://v.youku.com/v_show/id_XNjU3OTE2OTgzNg==.html
https://v.youku.com/v_show/id_XNjU3OTE2OTgzMg==.html
https://v.youku.com/v_show/id_XNjU4ODg0NzI4MA==.html
https://v.youku.com/v_show/id_XNjU4ODg0MjgxNg==.html
https://v.youku.com/v_show/id_XNjU3OTE2OTc2NA==.html
https://v.youku.com/v_show/id_XNjU4ODg0Mjc2OA==.html
https://v.youku.com/v_show/id_XNjU4ODg0Mjc1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODgzOTk5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODg0Mjc0NA==.html
https://v.youku.com/v_show/id_XNjU4ODg0MjczNg==.html
https://v.youku.com/v_show/id_XNjU3OTE2ODE2NA==.html
https://v.youku.com/v_show/id_XNjU3OTE3MTI0OA==.html
https://v.youku.com/v_show/id_XNjU3OTE2NjY0NA==.html
https://v.youku.com/v_show/id_XNjU3OTE2NTQwNA==.html
https://v.youku.com/v_show/id_XNjU4ODg0MTE3Ng==.html
https://v.youku.com/v_show/id_XNjU3OTE2Mzk4NA==.html
https://v.youku.com/v_show/id_XNjU3OTE2Mzk2MA==.html
https://v.youku.com/v_show/id_XNjU3OTE2OTY0OA==.html
https://v.youku.com/v_show/id_XNjU3OTE2OTY0NA==.html
https://v.youku.com/v_show/id_XNjU4ODgzOTkxNg==.html
https://v.youku.com/v_show/id_XNjU4ODgzOTkwOA==.html
https://v.youku.com/v_show/id_XNjU3OTE2MjM5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODg0NDA4NA==.html
https://v.youku.com/v_show/id_XNjU3OTE2MjM4OA==.html
https://v.youku.com/v_show/id_XNjU3OTE2Mzg5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODgzOTg0NA==.html
https://v.youku.com/v_show/id_XNjU4ODg0NDAzNg==.html
https://v.youku.com/v_show/id_XNjU4ODg0MjU2NA==.html
https://v.youku.com/v_show/id_XNjU3OTE2MjM1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODgzOTgzMg==.html
https://v.youku.com/v_show/id_XNjU3OTE2MjM0OA==.html
https://v.youku.com/v_show/id_XNjU4ODg0NDAyNA==.html
https://v.youku.com/v_show/id_XNjU3OTE2MjMxMg==.html

邂逅温柔 发表于 2 分钟前

小手一抖,沙发到手!
页: [1]
查看完整版本: 保乐力加亮相第九届中国国际进口博览会