{"id":107077,"date":"2023-03-03T12:48:24","date_gmt":"2023-03-03T10:48:24","guid":{"rendered":"https:\/\/prohoster.info\/?p=107077"},"modified":"2023-03-05T11:49:19","modified_gmt":"2023-03-05T09:49:19","slug":"uyazvimost-v-strongswan-ipsec-dopuskayushhaya-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-strongswan-ipsec-dopuskayushhaya-udalyonnoe-vypolnenie-koda","title":{"rendered":"Une vuln\u00e9rabilit\u00e9 dans strongSwan IPsec permet une ex\u00e9cution de code \u00e0 distance.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La version strongSwan 5.9.10 est disponible, un paquet libre pour la cr\u00e9ation de connexions VPN bas\u00e9es sur le protocole IPSec, utilis\u00e9 sur Linux, Android, FreeBSD et macOS. La nouvelle version corrige une vuln\u00e9rabilit\u00e9 critique (CVE-2023-26463) qui pourrait \u00eatre exploit\u00e9e pour contourner l'authentification, mais qui pourrait \u00e9galement entra\u00eener l'ex\u00e9cution de code malveillant sur le serveur ou le client. Le probl\u00e8me se manifeste lors de la v\u00e9rification de certificats sp\u00e9cialement con\u00e7us dans les m\u00e9thodes d'authentification EAP (Extensible Authentication Protocol) bas\u00e9es sur TLS. <\/p>\n

La vuln\u00e9rabilit\u00e9 provient du fait que le gestionnaire TLS accepte incorrectement des cl\u00e9s publiques du certificat d'un n\u0153ud voisin (peer), les consid\u00e9rant comme fiables, m\u00eame si le certificat ne peut pas \u00eatre v\u00e9rifi\u00e9 avec succ\u00e8s. En particulier, lorsque la fonction tls_find_public_key() est appel\u00e9e pour identifier les certificats fiables, un \u00e9chantillage bas\u00e9 sur le type de cl\u00e9 publique est utilis\u00e9. Le probl\u00e8me r\u00e9side dans le fait que la variable utilis\u00e9e pour d\u00e9terminer le type de cl\u00e9 pour l'op\u00e9ration de recherche est d\u00e9finie dans tous les cas, m\u00eame si le certificat n'est pas fiable. <\/p>\n

De plus, par la manipulation de la cl\u00e9, il est possible de r\u00e9duire le compteur de r\u00e9f\u00e9rences (si le certificat n'est pas fiable, la r\u00e9f\u00e9rence \u00e0 l'objet est lib\u00e9r\u00e9e apr\u00e8s la d\u00e9termination du type de cl\u00e9) et de lib\u00e9rer la m\u00e9moire pour un autre objet cl\u00e9 encore utilis\u00e9. La d\u00e9faillance examin\u00e9e ne garantit pas que des exploits ne pourront pas \u00eatre cr\u00e9\u00e9s pour provoquer des fuites d'informations depuis la m\u00e9moire et ex\u00e9cuter leur propre code. <\/p>\n

L'attaque sur serveur<\/a> s'effectue par l'envoi par le client d'un certificat auto-sign\u00e9 pour l'authentification du client en utilisant les m\u00e9thodes EAP-TLS, EAP-TTLS, EAP-PEAP et EAP-TNC. Une attaque sur le client peut \u00eatre r\u00e9alis\u00e9e par le retour d'un serveur<\/a> certificat sp\u00e9cialement con\u00e7u. La vuln\u00e9rabilit\u00e9 se manifeste dans les versions strongSwan 5.9.8 et 5.9.9. La publication des mises \u00e0 jour des paquets dans les distributions peut \u00eatre suivie sur les pages : Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD, NetBSD.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a strongSwan 5.9.10, \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPSec, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Linux, Android, FreeBSD \u0438 macOS. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-26463), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 dans strongSwan IPsec permettant l'ex\u00e9cution de code \u00e0 distance | ProHoster","description":"La version strongSwan 5.9.10 est disponible, un paquet libre pour la cr\u00e9ation de connexions VPN bas\u00e9es sur le protocole IPSec, utilis\u00e9 sur Linux, Android, FreeBSD et macOS.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-strongswan-ipsec-dopuskayushhaya-udalyonnoe-vypolnenie-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 strongSwan IPsec, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a strongSwan 5.9.10, \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPSec, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Linux, Android, FreeBSD \u0438 macOS.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-strongswan-ipsec-dopuskayushhaya-udalyonnoe-vypolnenie-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-03T10:48:24+00:00","article:modified_time":"2023-03-05T09:49:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"107077","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:46:34","updated":"2026-02-09 21:46:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/107077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=107077"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/107077\/revisions"}],"predecessor-version":[{"id":172813,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/107077\/revisions\/172813"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=107077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=107077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=107077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}