{"id":32892,"date":"2019-10-31T21:49:35","date_gmt":"2019-10-31T18:49:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa\/"},"modified":"2019-10-31T21:49:35","modified_gmt":"2019-10-31T18:49:35","slug":"uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","title":{"rendered":"Vuln\u00e9rabilit\u00e9 dans le noyau Linux permettant de provoquer un plantage en envoyant un paquet UDP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dans le noyau Linux une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e<\/a><\/noindex> une vuln\u00e9rabilit\u00e9 (CVE-2019-11683<\/a><\/noindex>), permettant d'entra\u00eener \u00e0 distance un d\u00e9ni de service en envoyant des paquets UDP sp\u00e9cialement con\u00e7us (packet-of-death). Le probl\u00e8me est caus\u00e9 par une erreur dans le gestionnaire udp_gro_receive_segment (net\/ipv4\/udp_offload.c) avec l'impl\u00e9mentation de la technologie GRO (Generic Receive Offload) et peut entra\u00eener des corruptions du contenu des zones m\u00e9moire du noyau lors du traitement des paquets UDP \u00e0 remplissage nul (payload vide).<\/p>\n

Le probl\u00e8me ne touche que le noyau 5.0<\/a><\/noindex>, car le support de GRO pour les sockets UDP a \u00e9t\u00e9 r\u00e9alis\u00e9e<\/a><\/noindex> en novembre dernier et n'a fait son chemin que dans la derni\u00e8re version stable du noyau. La technologie GRO permet d'acc\u00e9l\u00e9rer le traitement d'un grand nombre de paquets entrants, en agr\u00e9geant plusieurs paquets en blocs plus grands qui ne n\u00e9cessitent pas un traitement distinct de chaque paquet.
\nPour TCP, le probl\u00e8me ne se manifeste pas, car ce protocole ne prend pas en charge l'agr\u00e9gation des paquets sans payload.<\/p>\n

La vuln\u00e9rabilit\u00e9 n'a pas encore \u00e9t\u00e9 corrig\u00e9e que sous la forme d'un correctif<\/a><\/noindex>, un correctif n'a pas encore \u00e9t\u00e9 publi\u00e9 (la mise \u00e0 jour d'hier 5.0.11 n'a pas inclus ). Dans les distributions, le noyau 5.0 a r\u00e9ussi \u00e0 entrer dans<\/a><\/noindex>et d'autres distributions mises \u00e0 jour en continu. Fedora 30<\/a><\/noindex>, Ubuntu 19.04<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, Gentoo<\/a><\/noindex> Ubuntu 18.10 et ant\u00e9rieures Debian<\/a><\/noindex>, RHEL\/CentOS<\/a><\/noindex>, le probl\u00e8me ne les affecte pas.<\/a><\/noindex> et SUSE\/openSUSE<\/a><\/noindex> Le probl\u00e8me a \u00e9t\u00e9 d\u00e9couvert \u00e0 la suite de<\/p>\n

l'utilisation d'un syst\u00e8me de tests automatis\u00e9s de fuzzing d\u00e9velopp\u00e9 par Google<\/a><\/noindex> syzbot et de l'analyseur<\/a><\/noindex> KASAN (KernelAddressSanitizer), visant \u00e0 d\u00e9celer des erreurs dans la gestion de la m\u00e9moire et des cas d'acc\u00e8s incorrect \u00e0 la m\u00e9moire, tels que l'acc\u00e8s \u00e0 des zones m\u00e9moire lib\u00e9r\u00e9es et le placement de code dans des zones de m\u00e9moire non destin\u00e9es \u00e0 de telles manipulations.<\/a><\/noindex> Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans le noyau Linux ( <\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11683), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 (packet-of-death). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 udp_gro_receive_segment (net\/ipv4\/udp_offload.c) \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 GRO (Generic Receive \u041effload) \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c (\u043f\u0443\u0441\u0442\u043e\u0439 payload). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u044f\u0434\u0440\u043e 5.0, \u0442\u0430\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32892","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 dans le noyau Linux permettant de provoquer un crash en envoyant un paquet UDP | ProHoster","description":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 dans le noyau Linux permettant de provoquer un crash en envoyant un paquet UDP | ProHoster","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 UDP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-vyzvat-krah-cherez-otpravku-udp-paketa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:49:35+00:00","article:modified_time":"2019-10-31T18:49:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 13:01:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:50:25","updated":"2026-01-21 13:01:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/32892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=32892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/32892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=32892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=32892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=32892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}