?????? ????? ?????? ???? ???? ?? ?? ?????????? ????????? Border Gateway Protocol ?? BGP ??? ???????? ?? ???????? ???? ??????? ?? ????? ????? ????? (DoS) ?? BGP peer ??? ????????? ??????????? ???? ????.
??? ?? ?????????? ?? ???? ?/? ?? [?]FRRouting? ?? ?????? ?????? ???????? ??????? ???? ??? ????? ???? ?????????? ?????? ? ?????? ???? ????? ? ?? ??? ???? ???? ????? ??????? ????? NVIDIA [?]Cumulus? [?]DENT ? [?]SONiC ??????? ?????? ?? ????? ?????? ????? ?? ?? ????? ????.
??? ??? ????? ???????????? ??? ?????????? ????? BGP ??? ?? ???? Forescout Vedere Labs ????? ??? ???: FRRouting? BIRD? OpenBGPd? Mikrotik RouterOS? Juniper JunOS? Cisco IOS ? Arista EOS.
BGP ?? ?????? gateway[5] ??? ?? ???? ????? ??????? ???????? ? ?????? ??? ????????? ????? ????? ??? ??? ? ???? ????? ?????????? ?????? ???? ????? ?????? ??????? ??????? ??????.
???? ??? ?? ??? ?? ??? ??? ???:
CVE-2022-40302 (?????? ?/? ?? ????? CVSS) – ????? ?????? ?? ???? OPEN ?????? BGP[6] ?? ????? Extended Optional Length ?????????? ???????? ???? ?? ?????? ?????? ??????.
CVE-2022-40318 (?????? ?/? ?? ????? CVSS) – ????? ?????? ?? ???? OPEN ?????? BGP ?? ????? Extended Optional Length ?????????? ???????? ???? ?? ?????? ?????? ??????.
CVE-2022-43681 (?????? ?/? ?? ????? CVSS) – ????? ?????? ?? ???? OPEN ?????? BGP ?? ?????? ??????? ?? ????? length octet ????? ???????? ???? ?? ?????? ?????? ??????.
??? ???? ?? ??????[?] ?? ?? The Hacker News ?? ?????? ?????? ???????? «???? ??? ??? ?????? ???? ??????? ???? ??????? ?? ????? DoS ?? ??????? ????????? BGP ???? ??????????? ???? ????? ???????? ???? ????? BGP ? ???????? ???????? ??? ??????? ? peer?? ?????? ??????».
“??? DoS ???? ??? ?? ????? ???? ???????? ???? ?? ??? ??????? ?????? ???. ??? ???? ???? ????? ?? ????????? ??? ?? ?? ????? ?????? ????? ?? ????? ????? ????? ???????? OPEN ??? ??? ???.”
?? ???? ????? ???????? ?? ???? IP ????? ?? BGP peer ???? ?????? ?? ??? ??? ?? ?? ???? ?????? ? ???????????? ?????? ???? ?? ??? ??????? ?? ????? ?????? ??????????? ??? ? ??? ?? ???? OPEN ???????? BGP ?? ???? ???.
??? ?? ????????? ?? ??? ?????? ???? ?????? ?? “FRRouting ??? ?? ????? ????? ???? ????? ??????? BGP Identifier ? ASN ???? ???? ???? ???? ?????? ???????? ??? (?????????????? ??? ?????????? ???????) ?? ???? ??????.”
Forescout ?????? ?? ????? ???? ??? ?? ??? bgp_boofuzzer[8] ?? ?? ????? ???? ???? ??? ?? ?? ????????? ????? ?????? ?? ????? ?????????? BGP ?? ?? ?? ???? ??????? ???????? ?????? ???? ? ?????? ??????? ????? ?? ?? ?????????? BGP ??????.
Forescout ?????????? ???: «?????????????? BGP ???? ???? ???????? ????????? ??? ????? ?? ????????? ???? ??????? ???? ??????????? ???? ?????. ???? ???? ??? ????? BGP ?????????? ?????? ????? ??? ??? ?? ?????????? ??????? ???? ?? ?? ?? ????? ???? ????.»
??? ???????? ??????? ?????????? ESET ?????? ?? ???????[?] ???????? ?? ????? ?? ???????? ???????? ????? ??????? ???????? ???????? ????? ?????? ?????? ????? ?????? VPN? ??????? ???????? ? ???? ??????? ????? ????? ?? ?? ??? ??? ???? ?????.
??? ???? ????? ?????? ??????? ???[??]: «?? ????? ??????? ???????? ???????????? ?? ????????? – ?????? ???????? ?????? ??????? ????? ???? ???? ?? ????? ????????? ????????? ? ???? ?????? ???? – ???? ?????????? ?? ???? ?????? ???? ???».
?????
[?] https://github.com/FRRouting/frr
[?] https://www.nvidia.com/en-us/networking/ethernet-switching/cumulus-linux/
[?] https://sonic-net.github.io/SONiC
[?] https://www.cloudflare.com/learning/security/glossary/what-is-bgp
[?] https://www.ciscopress.com/articles/article.asp?p=2756480&seqNum=3
[?] https://www.forescout.com/blog/three-new-bgp-message-parsing-vulnerabilities-disclosed-in-frrouting-software
[?] https://github.com/Forescout/bgp_boofuzzer
[?] https://www.cloudflare.com/learning/network-layer/what-is-a-router
[??] https://www.eset.com/us/about/newsroom/press-releases/eset-discovers-corporate-secrets-and-data-on-recycled-company-routers-1
[??] https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html
???? : ???? ???? ??????? ???? ????
