陪跑成果转化“最初一公里”，南开概念验证陪跑营启动
陪跑成果转化“最初一公里”，南开概念验证陪跑营启动Hickory DNS：DNS签名验证缺少对所属域的核对
11月8日公开的漏洞记录CVE-2026-123605涉及Hickory DNS。验证程序会查找签名者名称对应的密钥，却漏掉关键一步，查证这个名称是否属于正在验证的记录集所在的域。这使掌握一个已签名域的参与者有机会为另一个无关域的记录背书，并使依赖该程序的解析器接受错误结果。公告分别列出了网络库和协议库的范围。版本清单标出的受影响范围包括0.1至0.25.0-alpha.3（含）。
这条记录给出的CVSS 3.1基础评分为8.8分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，需要已有低权限账户或相当的访问权，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。
https://v.youku.com/v_show/id_XNjU4Nzg5MjY4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg5MjY2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg5MTE2MA==.html
https://v.youku.com/v_show/id_XNjU3ODIwMjQwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzg5MTA3Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzg4OTE4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg4OTE2OA==.html
https://v.youku.com/v_show/id_XNjU3ODE5OTA1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODE5OTA0OA==.html
https://v.youku.com/v_show/id_XNjU3ODIwNDk4MA==.html
https://v.youku.com/v_show/id_XNjU3ODIwNjQwOA==.html
https://v.youku.com/v_show/id_XNjU3ODIwNDkzMg==.html
https://v.youku.com/v_show/id_XNjU3ODE5NzUyOA==.html
https://v.youku.com/v_show/id_XNjU3ODIwMTc0MA==.html
https://v.youku.com/v_show/id_XNjU3ODIwMTY4MA==.html
https://v.youku.com/v_show/id_XNjU3ODIwMTY2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg4NjE4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg4NjE3Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzg4MzE2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg4MzEyMA==.html
https://v.youku.com/v_show/id_XNjU3ODE5NTkxMg==.html
https://v.youku.com/v_show/id_XNjU3ODE5NTY1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE5NDA5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE5MjcwOA==.html
https://v.youku.com/v_show/id_XNjU3ODE5NTYxNg==.html
https://v.youku.com/v_show/id_XNjU4Nzg4MjgxNg==.html
https://v.youku.com/v_show/id_XNjU4Nzg4Mjc4NA==.html
https://v.youku.com/v_show/id_XNjU3ODE5NDA1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODE5NTU4NA==.html
https://v.youku.com/v_show/id_XNjU3ODE5NTU2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3ODE4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3NjcxMg==.html
https://v.youku.com/v_show/id_XNjU3ODE4NDc1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE4NDc0MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3NzkyOA==.html
https://v.youku.com/v_show/id_XNjU3ODE4NDY3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODE4OTM2NA==.html
https://v.youku.com/v_show/id_XNjU3ODE4NDYyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3NzYyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3NzYyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzg2ODgwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzg2ODc4NA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3MTg0OA==.html
https://v.youku.com/v_show/id_XNjU3ODE4NDI5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzg3NDYzMg==.html
https://v.youku.com/v_show/id_XNjU4Nzg3NDU4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3MDI2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzg3MDE0NA==.html
https://v.youku.com/v_show/id_XNjU3ODE3ODE1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE3Njc2NA==.html
https://v.youku.com/v_show/id_XNjU3ODE3Njc0OA==.html
https://v.youku.com/v_show/id_XNjU3ODE3Njc0NA==.html
https://v.youku.com/v_show/id_XNjU3ODE3NjY5Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzg2NjU3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE3OTU2NA==.html
页:
[1]