{"id":31538,"date":"2019-10-31T21:41:45","date_gmt":"2019-10-31T18:41:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3\/"},"modified":"2019-10-31T21:41:45","modified_gmt":"2019-10-31T18:41:45","slug":"dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","title":{"rendered":"Dragonblood : les premi\u00e8res vuln\u00e9rabilit\u00e9s Wi-Fi WPA3 d\u00e9couvertes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En octobre 2017, il a \u00e9t\u00e9 d\u00e9couvert de mani\u00e8re inattendue qu'il existait une grave vuln\u00e9rabilit\u00e9 dans le protocole Wi-Fi Protected Access II (WPA2) utilis\u00e9 pour le chiffrement du trafic Wi-Fi, permettant de d\u00e9couvrir les mots de passe des utilisateurs et d'intercepter les communications des victimes. Cette vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 nomm\u00e9e KRACK (qui signifie Key Reinstallation Attack) et a \u00e9t\u00e9 identifi\u00e9e par les experts Mathy Vanhoef et Eyal Ronen. Apr\u00e8s la d\u00e9couverte, la vuln\u00e9rabilit\u00e9 KRACK a \u00e9t\u00e9 corrig\u00e9e par des mises \u00e0 jour de firmware pour les appareils, et le protocole WPA3, qui a remplac\u00e9 WPA2 l'ann\u00e9e derni\u00e8re, \u00e9tait cens\u00e9 r\u00e9soudre tous les probl\u00e8mes de s\u00e9curit\u00e9 des r\u00e9seaux Wi-Fi. <\/p>\n

\"Dragonblood<\/p>\n

Malheureusement, les m\u00eames experts ont d\u00e9couvert des vuln\u00e9rabilit\u00e9s tout aussi dangereuses dans le protocole WPA3. Ainsi, il est encore n\u00e9cessaire d'attendre et d'esp\u00e9rer de nouvelles mises \u00e0 jour pour les points d'acc\u00e8s sans fil et les appareils, sinon nous devrons vivre avec la connaissance des vuln\u00e9rabilit\u00e9s des r\u00e9seaux Wi-Fi domestiques et publics. Les vuln\u00e9rabilit\u00e9s trouv\u00e9es dans WPA3 ont \u00e9t\u00e9 collectivement nomm\u00e9es Dragonblood.<\/p>\n

Les racines du probl\u00e8me r\u00e9sident comme auparavant dans le fonctionnement du m\u00e9canisme d'\u00e9tablissement de connexion, ou ce que le standard appelle le \u00ab handshake \u00bb. Ce m\u00e9canisme dans le standard WPA3 est nomm\u00e9 Dragonfly. Avant la d\u00e9couverte de Dragonblood, il \u00e9tait consid\u00e9r\u00e9 comme bien prot\u00e9g\u00e9. Le paquet Dragonblood contient cinq types de vuln\u00e9rabilit\u00e9s : d\u00e9ni de service, deux vuln\u00e9rabilit\u00e9s de r\u00e9trogradation (downgrade) et deux vuln\u00e9rabilit\u00e9s d'attaque par canaux auxiliaires (side-channel).<\/p>\n

<\/center>
\n\"Dragonblood<\/p>\n

Le d\u00e9ni de service ne conduit pas \u00e0 une fuite de donn\u00e9es, mais il peut \u00eatre un \u00e9v\u00e9nement d\u00e9sagr\u00e9able pour un utilisateur qui ne peut pas se connecter \u00e0 r\u00e9p\u00e9tition au point d'acc\u00e8s. Les autres vuln\u00e9rabilit\u00e9s permettent \u00e0 un attaquant de r\u00e9cup\u00e9rer les mots de passe pour connecter l'utilisateur \u00e0 un point d'acc\u00e8s et de suivre toute information critique pour l'utilisateur.<\/p>\n

Les attaques de r\u00e9trogradation permettent de forcer le passage \u00e0 une ancienne version du protocole WPA2 ou \u00e0 des variantes de chiffrement plus faibles de WPA3, puis de continuer le piratage avec des m\u00e9thodes d\u00e9j\u00e0 connues. L'attaque utilisant des canaux auxiliaires exploite les caract\u00e9ristiques des algorithmes WPA3 et leur mise en \u0153uvre, ce qui permet finalement d'appliquer \u00e9galement des m\u00e9thodes de piratage de mots de passe d\u00e9j\u00e0 connues. Pour plus de d\u00e9tails, cliquez ici. Un ensemble d'outils pour d\u00e9tecter les vuln\u00e9rabilit\u00e9s Dragonblood peut \u00eatre trouv\u00e9 \u00e0 ce lien.<\/p>\n

\"Dragonblood<\/p>\n

L'alliance Wi-Fi, qui est responsable du d\u00e9veloppement des normes Wi-Fi, a \u00e9t\u00e9 inform\u00e9e des vuln\u00e9rabilit\u00e9s d\u00e9couvertes. On rapporte que les fabricants de mat\u00e9riel pr\u00e9parent des mises \u00e0 jour de firmware pour corriger les failles de s\u00e9curit\u00e9 d\u00e9tect\u00e9es. Aucune substitution ni retour du mat\u00e9riel ne sera n\u00e9cessaire.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Source : 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KRACK (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 Key Reinstallation Attack) \u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u0439\u0430\u043b\u043e\u043c \u0420\u043e\u043d\u0435\u043d\u043e\u043c (Eyal Ronen). \u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31538","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dragonblood : premi\u00e8res vuln\u00e9rabilit\u00e9s Wi-Fi WPA3 identifi\u00e9es | ProHoster","description":"En octobre 2017, il a \u00e9t\u00e9 soudainement d\u00e9couvert qu'il existait une vuln\u00e9rabilit\u00e9 s\u00e9rieuse dans le protocole Wi-Fi Protected Access II (WPA2) utilis\u00e9 pour chiffrer le trafic Wi-Fi, permettant d'exposer les mots de passe des utilisateurs.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Dragonblood: \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043f\u0435\u0440\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Wi-Fi WPA3 | ProHoster","og:description":"\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:45+00:00","article:modified_time":"2019-10-31T18:41:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31538","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:39:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:15:45","updated":"2026-01-21 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/31538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=31538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/31538\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/23463"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=31538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=31538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=31538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}