{"id":3212,"date":"2019-06-18T12:53:52","date_gmt":"2019-06-18T03:53:52","guid":{"rendered":"https:\/\/www.itbook.info\/web\/?p=3212"},"modified":"2019-06-20T09:43:04","modified_gmt":"2019-06-20T00:43:04","slug":"linux-%e3%82%ab%e3%83%bc%e3%83%8d%e3%83%ab%e3%81%ab%e3%83%aa%e3%83%a2%e3%83%bc%e3%83%88%e3%81%8b%e3%82%89%e6%94%bb%e6%92%83%e3%81%a7%e3%81%8d%e3%81%a6%e3%81%97%e3%81%be%e3%81%86%e8%84%86%e5%bc%b1","status":"publish","type":"post","link":"https:\/\/www.itbook.info\/web\/2019\/06\/linux-%e3%82%ab%e3%83%bc%e3%83%8d%e3%83%ab%e3%81%ab%e3%83%aa%e3%83%a2%e3%83%bc%e3%83%88%e3%81%8b%e3%82%89%e6%94%bb%e6%92%83%e3%81%a7%e3%81%8d%e3%81%a6%e3%81%97%e3%81%be%e3%81%86%e8%84%86%e5%bc%b1.html","title":{"rendered":"Linux \u30ab\u30fc\u30cd\u30eb\u306b\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u3067\u304d\u3066\u3057\u307e\u3046\u8106\u5f31\u6027\u306e\u5831\u544a"},"content":{"rendered":"<aside class=\"row veu_insertAds before\"><div class=\"col-md-12\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n                        <!-- cat_\u4e0a\u90e8 -->\r\n                        <ins class=\"adsbygoogle\" style=\"display:block\" data-ad-client=\"ca-pub-6102004203189610\" data-ad-slot=\"9628163001\" data-ad-format=\"auto\"><\/ins>\r\n                        <script>\r\n                        (adsbygoogle = window.adsbygoogle || []).push({});\r\n                        <\/script><\/div><\/aside><div class=\"veu_autoEyeCatchBox\"><img loading=\"lazy\" width=\"750\" height=\"500\" src=\"https:\/\/www.itbook.info\/web\/wp-content\/uploads\/2019\/06\/philipp-katzenberger-1313574-unsplash-1024x683.jpg\" class=\"attachment-large size-large wp-post-image\" alt=\"\" decoding=\"async\" srcset=\"https:\/\/www.itbook.info\/web\/wp-content\/uploads\/2019\/06\/philipp-katzenberger-1313574-unsplash-1024x683.jpg 1024w, https:\/\/www.itbook.info\/web\/wp-content\/uploads\/2019\/06\/philipp-katzenberger-1313574-unsplash-300x200.jpg 300w, https:\/\/www.itbook.info\/web\/wp-content\/uploads\/2019\/06\/philipp-katzenberger-1313574-unsplash-768x512.jpg 768w\" sizes=\"(max-width: 750px) 100vw, 750px\" \/><\/div>\n<p>2019\u5e746\u670817\u65e5\u306bFreeBSD\u3068Linux\u30ab\u30fc\u30cd\u30eb\u306b\u5bfe\u3059\u308b\u8106\u5f31\u6027\u304c\u5831\u544a\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<blockquote class=\"wp-block-quote\"><p>Sad SACK: Linux PCs, servers, gadgets can be crashed by &#8216;Ping of Death&#8217; network packetsvia:<a rel=\"noreferrer noopener\" href=\"https:\/\/www.theregister.co.uk\/2019\/06\/17\/linux_tcp_sack_kernel_crash\/\" target=\"_blank\">Sad SACK: Linux PCs, servers, gadgets can be crashed by &#8216;Ping of Death&#8217; network packets \u2022 The Register<\/a><\/p><\/blockquote>\n\n\n\n<p>\u4eca\u56de\u5831\u544a\u3055\u308c\u305f\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e4\u3064\u3067\u3059\u3002<\/p>\n\n\n\n<ul><li>CVE-2019-11477<ul><li>2.6.29\u4ee5\u4e0a\u306eLinux\u30ab\u30fc\u30cd\u30eb\u304c\u5bfe\u8c61<\/li><li> SACK Panic \u306b\u3088\u308bLinux\u30ab\u30fc\u30cd\u30eb\u30af\u30e9\u30c3\u30b7\u30e5\u3092\u5f15\u304d\u8d77\u3053\u3059<\/li><\/ul><\/li><li>CVE-2019-11478<ul><li>4.14.127\u4ee5\u4e0a\u306eLinux\u30ab\u30fc\u30cd\u30eb\u304c\u5bfe\u8c61<\/li><li>TCP SACK\u306e\u904e\u5270\u306a\u30ea\u30bd\u30fc\u30b9\u4f7f\u7528\u3092\u5f15\u304d\u8d77\u3053\u3059 <\/li><\/ul><\/li><li>CVE-2019-11479<ul><li>FreeBSD\u304c\u5bfe\u8c61<\/li><li>TCP SACK\u306e\u4f4e\u901f\u5316\u3092\u5f15\u304d\u8d77\u3053\u3059<\/li><\/ul><\/li><li>CVE-2019-5599<ul><li>\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306eLinux\u30ab\u30fc\u30cd\u30eb\u304c\u5bfe\u8c61<\/li><li> \u4f4e\u3044MSS\u5024\u306b\u3088\u308b\u904e\u5270\u306a\u30ea\u30bd\u30fc\u30b9\u6d88\u8cbb\u3092\u5f15\u304d\u8d77\u3053\u3059 <\/li><\/ul><\/li><\/ul>\n\n\n\n<p>\u6700\u3082\u6df1\u523b\u306a\u8106\u5f31\u6027\u306f\u300cSACK Panic\u300d\u3068\u547c\u3070\u308c\u308b\u3082\u306e\uff08<a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-11477\">CVE &#8211; CVE-2019-11477<\/a>\uff09\u3067\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089Linux \u30ab\u30fc\u30cd\u30eb\u3092\u30af\u30e9\u30c3\u30b7\u30e5\u3067\u304d\u3066\u3057\u307e\u3046\u8106\u5f31\u6027\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u30d1\u30c3\u30c1\u53ca\u3073\u30ef\u30fc\u30af\u30a2\u30e9\u30a6\u30f3\u30c9\u304c\u65e2\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u307e\u3059<br>\n\u8a73\u7d30\u306a\u8aac\u660e\u304a\u3088\u3073\u30d1\u30c3\u30c1\/\u30ef\u30fc\u30af\u30a2\u30e9\u30a6\u30f3\u30c9\u306b\u3064\u3044\u3066\u306f\u3001\u4ee5\u4e0b\u306e\u30b5\u30a4\u30c8\u3092\u53c2\u7167\u306e\u3053\u3068\u3002<\/p>\n\n\n\n<p><a href=\"https:\/\/github.com\/Netflix\/security-bulletins\/blob\/master\/advisories\/third-party\/2019-001.md\">security-bulletins\/2019-001.md at master \u00b7 Netflix\/security-bulletins \u00b7 GitHub<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u5bfe\u51e6\u65b9\u6cd5<\/h2>\n\n\n\n<p>\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3059\u308b\u4ee5\u5916\u306e\u5bfe\u51e6\u65b9\u6cd5\u3068\u3057\u3066\u306f\u3001\u6b21\u306e2\u3064\u306e\u65b9\u6cd5\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">SACK\u3092\u7121\u52b9\u306b\u3059\u308b<\/h3>\n\n\n\n<p>SACK\u3092\u4e00\u6642\u7684\u306b\u7121\u52b9\u306b\u3059\u308b\u5834\u5408\u306f\u3001\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">setenforce 0 <br>echo 0 >  \/proc\/sys\/net\/ipv4\/tcp_sack<br><\/pre>\n\n\n\n<p>1\u884c\u76ee\u306fSELinux\u306e\u5834\u5408\u306e\u307f\u5fc5\u8981\u3067\u3059\u3002<br>\u6c38\u7d9a\u7684\u306bSACK\u3092\u7121\u52b9\u306b\u3059\u308b\u306b\u306f\u3001\/etc\/sysctl.conf\u306b\u6b21\u306e\u884c\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">net.ipv4.tcp_sack = 0 <br>net.ipv4.tcp_dsack = 0 <br>net.ipv4.tcp_fack = 0<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u30eb\u30fc\u30eb\u306b\u8ffd\u52a0\u3059\u308b<\/h3>\n\n\n\n<p> iptables\u3067\u30b5\u30a4\u30ba\u306e\u5c0f\u3055\u3044MSS\u30d1\u30b1\u30c3\u30c8\u3092\u30d6\u30ed\u30c3\u30af\u3059\u308b\u3053\u3068\u3067\u5bfe\u51e6\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">iptables -t mangle -A PREROUTING -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP <\/pre>\n\n\n\n<p><\/p>\n<aside class=\"row veu_insertAds after\"><div class=\"col-md-12\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n                        <!-- cat_\u4e0a\u90e8 -->\r\n                        <ins class=\"adsbygoogle\" style=\"display:block\" data-ad-client=\"ca-pub-6102004203189610\" data-ad-slot=\"9628163001\" data-ad-format=\"auto\"><\/ins>\r\n                        <script>\r\n                        (adsbygoogle = window.adsbygoogle || []).push({});\r\n                        <\/script><\/div><\/aside>","protected":false},"excerpt":{"rendered":"<p>2019\u5e746\u670817\u65e5\u306bFreeBSD\u3068Linux\u30ab\u30fc\u30cd\u30eb\u306b\u5bfe\u3059\u308b\u8106\u5f31\u6027\u304c\u5831\u544a\u3055\u308c\u307e\u3057\u305f\u3002 Sad SACK: Linux PCs, servers, gadgets can be crashed by &#8216;Pi [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3214,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[38],"tags":[27,345],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v15.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Linux \u30ab\u30fc\u30cd\u30eb\u306b\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u3067\u304d\u3066\u3057\u307e\u3046\u8106\u5f31\u6027\u306e\u5831\u544a - \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a8\u30f3\u30b8\u30cb\u30a2\u304c\u65e5\u3005\u306e\u51fa\u6765\u4e8b\u3092\u8a9e\u308b<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.itbook.info\/web\/2019\/06\/linux-\u30ab\u30fc\u30cd\u30eb\u306b\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u3067\u304d\u3066\u3057\u307e\u3046\u8106\u5f31.html\" \/>\n<meta property=\"og:locale\" content=\"ja_JP\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Linux \u30ab\u30fc\u30cd\u30eb\u306b\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u3067\u304d\u3066\u3057\u307e\u3046\u8106\u5f31\u6027\u306e\u5831\u544a - \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a8\u30f3\u30b8\u30cb\u30a2\u304c\u65e5\u3005\u306e\u51fa\u6765\u4e8b\u3092\u8a9e\u308b\" \/>\n<meta property=\"og:description\" content=\"2019\u5e746\u670817\u65e5\u306bFreeBSD\u3068Linux\u30ab\u30fc\u30cd\u30eb\u306b\u5bfe\u3059\u308b\u8106\u5f31\u6027\u304c\u5831\u544a\u3055\u308c\u307e\u3057\u305f\u3002 Sad SACK: Linux PCs, servers, gadgets can be crashed by &#8216;Pi [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.itbook.info\/web\/2019\/06\/linux-\u30ab\u30fc\u30cd\u30eb\u306b\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u3067\u304d\u3066\u3057\u307e\u3046\u8106\u5f31.html\" \/>\n<meta property=\"og:site_name\" content=\"\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a8\u30f3\u30b8\u30cb\u30a2\u304c\u65e5\u3005\u306e\u51fa\u6765\u4e8b\u3092\u8a9e\u308b\" \/>\n<meta property=\"article:published_time\" content=\"2019-06-18T03:53:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-20T00:43:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.itbook.info\/web\/wp-content\/uploads\/2019\/06\/philipp-katzenberger-1313574-unsplash.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"6000\" \/>\n\t<meta property=\"og:image:height\" content=\"4000\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.itbook.info\/web\/#website\",\"url\":\"https:\/\/www.itbook.info\/web\/\",\"name\":\"\\u30cd\\u30c3\\u30c8\\u30ef\\u30fc\\u30af\\u30a8\\u30f3\\u30b8\\u30cb\\u30a2\\u304c\\u65e5\\u3005\\u306e\\u51fa\\u6765\\u4e8b\\u3092\\u8a9e\\u308b\",\"description\":\"\\u30cd\\u30c3\\u30c8\\u30ef\\u30fc\\u30af\\u30cd\\u30bf\\u3068\\u304b\\u3092\\u9069\\u5f53\\u306b\\u66f8\\u304d\\u6563\\u3089\\u304b\\u3059\\u30d6\\u30ed\\u30b0\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/www.itbook.info\/web\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"ja\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.itbook.info\/web\/2019\/06\/linux-%e3%82%ab%e3%83%bc%e3%83%8d%e3%83%ab%e3%81%ab%e3%83%aa%e3%83%a2%e3%83%bc%e3%83%88%e3%81%8b%e3%82%89%e6%94%bb%e6%92%83%e3%81%a7%e3%81%8d%e3%81%a6%e3%81%97%e3%81%be%e3%81%86%e8%84%86%e5%bc%b1.html#primaryimage\",\"inLanguage\":\"ja\",\"url\":\"https:\/\/www.itbook.info\/web\/wp-content\/uploads\/2019\/06\/philipp-katzenberger-1313574-unsplash.jpg\",\"width\":6000,\"height\":4000},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.itbook.info\/web\/2019\/06\/linux-%e3%82%ab%e3%83%bc%e3%83%8d%e3%83%ab%e3%81%ab%e3%83%aa%e3%83%a2%e3%83%bc%e3%83%88%e3%81%8b%e3%82%89%e6%94%bb%e6%92%83%e3%81%a7%e3%81%8d%e3%81%a6%e3%81%97%e3%81%be%e3%81%86%e8%84%86%e5%bc%b1.html#webpage\",\"url\":\"https:\/\/www.itbook.info\/web\/2019\/06\/linux-%e3%82%ab%e3%83%bc%e3%83%8d%e3%83%ab%e3%81%ab%e3%83%aa%e3%83%a2%e3%83%bc%e3%83%88%e3%81%8b%e3%82%89%e6%94%bb%e6%92%83%e3%81%a7%e3%81%8d%e3%81%a6%e3%81%97%e3%81%be%e3%81%86%e8%84%86%e5%bc%b1.html\",\"name\":\"Linux \\u30ab\\u30fc\\u30cd\\u30eb\\u306b\\u30ea\\u30e2\\u30fc\\u30c8\\u304b\\u3089\\u653b\\u6483\\u3067\\u304d\\u3066\\u3057\\u307e\\u3046\\u8106\\u5f31\\u6027\\u306e\\u5831\\u544a - \\u30cd\\u30c3\\u30c8\\u30ef\\u30fc\\u30af\\u30a8\\u30f3\\u30b8\\u30cb\\u30a2\\u304c\\u65e5\\u3005\\u306e\\u51fa\\u6765\\u4e8b\\u3092\\u8a9e\\u308b\",\"isPartOf\":{\"@id\":\"https:\/\/www.itbook.info\/web\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.itbook.info\/web\/2019\/06\/linux-%e3%82%ab%e3%83%bc%e3%83%8d%e3%83%ab%e3%81%ab%e3%83%aa%e3%83%a2%e3%83%bc%e3%83%88%e3%81%8b%e3%82%89%e6%94%bb%e6%92%83%e3%81%a7%e3%81%8d%e3%81%a6%e3%81%97%e3%81%be%e3%81%86%e8%84%86%e5%bc%b1.html#primaryimage\"},\"datePublished\":\"2019-06-18T03:53:52+00:00\",\"dateModified\":\"2019-06-20T00:43:04+00:00\",\"author\":{\"@id\":\"https:\/\/www.itbook.info\/web\/#\/schema\/person\/3707482c5270f902ec5d92dba1db0920\"},\"inLanguage\":\"ja\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.itbook.info\/web\/2019\/06\/linux-%e3%82%ab%e3%83%bc%e3%83%8d%e3%83%ab%e3%81%ab%e3%83%aa%e3%83%a2%e3%83%bc%e3%83%88%e3%81%8b%e3%82%89%e6%94%bb%e6%92%83%e3%81%a7%e3%81%8d%e3%81%a6%e3%81%97%e3%81%be%e3%81%86%e8%84%86%e5%bc%b1.html\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.itbook.info\/web\/#\/schema\/person\/3707482c5270f902ec5d92dba1db0920\",\"name\":\"na3620\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.itbook.info\/web\/#personlogo\",\"inLanguage\":\"ja\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1e7e7f8079aa707666c2a1069de805ef?s=96&d=mm&r=g\",\"caption\":\"na3620\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/posts\/3212"}],"collection":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/comments?post=3212"}],"version-history":[{"count":3,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/posts\/3212\/revisions"}],"predecessor-version":[{"id":3217,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/posts\/3212\/revisions\/3217"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/media\/3214"}],"wp:attachment":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/media?parent=3212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/categories?post=3212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/tags?post=3212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}