{"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fjovi0608.hatenablog.com%2Fentry%2F2020%2F07%2F03%2F131719\" title=\"GnuTLS\u306e\u8106\u5f31\u6027\u3067TLS1.3\u306e\u518d\u63a5\u7d9a\u3092\u7406\u89e3\u3059\u308b(Challenge CVE-2020-13777) - \u307c\u3061\u307c\u3061\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/j/jovi0608/20200703/20200703085337.png","version":"1.0","width":"100%","provider_name":"Hatena Blog","author_url":"https://blog.hatena.ne.jp/jovi0608/","url":"https://jovi0608.hatenablog.com/entry/2020/07/03/131719","provider_url":"https://hatena.blog","type":"rich","blog_url":"https://jovi0608.hatenablog.com/","description":"(TLDR; \u3081\u3061\u3083\u304f\u3061\u3083\u9577\u304f\u306a\u3063\u305f\u306e\u3067\u3001\u9577\u6587\u8aad\u3080\u306e\u304c\u82e6\u624b\u306a\u65b9\u306f\u8aad\u307e\u306a\u3044\u3088\u3046\u304a\u9858\u3044\u3057\u307e\u3059\u3002) 1. \u306f\u3058\u3081\u306b \u524d\u56de\u306e\u300c\u6c42\u3080\uff01TLS1.3\u306e\u518d\u63a5\u7d9a\u3092\u5b8c\u5168\u306b\u7406\u89e3\u3057\u305f\u65b9(Challenge CVE-2020-13777)\u300d \u306e\u8a18\u4e8b\u306b\u3066\u3001GnuTLS\u306e\u8106\u5f31\u6027(CVE-2020-13777)\u306ePoC\u3092\u52df\u96c6\u3057\u307e\u3057\u305f\u3002 \u77ed\u3044\u671f\u9593\u306b\u3082\u95a2\u308f\u3089\u305a2\u540d\u306e\u65b9\u304b\u3089\u5fdc\u52df\u3092\u9802\u304d\u3001\u672c\u5f53\u306b\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002 \u307e\u305f\u3001\u5fdc\u52df\u3057\u306a\u304b\u3063\u305f\u3051\u3069\u8ab2\u984c\u306b\u53d6\u308a\u7d44\u3093\u3067\u9802\u3044\u305f\u65b9\u3082\u3044\u3089\u3057\u3083\u3063\u305f\u3088\u3046\u3067\u3059\u3002\u3053\u306e\u8ab2\u984c\u3092\u901a\u3058\u3066\u3001\u3044\u308d\u3044\u308d\u306a\u65b9\u304cTLS1.3\u4ed5\u69d8(RFC8446)\u306b\u89e6\u308c\u308b\u6a5f\u4f1a\u3092\u6301\u3063\u3066\u3044\u305f\u3060\u3044\u305f\u3053\u3068\u3092\u975e\u5e38\u306b\u5b09\u3057\u304f\u601d\u3044\u307e\u3059\u3002 \u5168\u304f\u306e\u521d\u5fc3\u8005\u3067\u306f\u3084\u306f\u2026","categories":[],"author_name":"jovi0608","title":"GnuTLS\u306e\u8106\u5f31\u6027\u3067TLS1.3\u306e\u518d\u63a5\u7d9a\u3092\u7406\u89e3\u3059\u308b(Challenge CVE-2020-13777)","blog_title":"\u307c\u3061\u307c\u3061\u65e5\u8a18","published":"2020-07-03 13:17:19","height":"190"}