{"id":33548,"date":"2019-10-31T21:53:15","date_gmt":"2019-10-31T18:53:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-setevom-steke-yadra-linux\/"},"modified":"2019-10-31T21:53:15","modified_gmt":"2019-10-31T18:53:15","slug":"uyazvimost-v-setevom-steke-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","title":{"rendered":"Vuln\u00e9rabilit\u00e9 dans la stack r\u00e9seau du noyau Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans le code du gestionnaire du protocole RDS bas\u00e9 sur TCP (Reliable Datagram Socket, net\/rds\/tcp.c) (CVE-2019-11815<\/a><\/noindex>), qui peut conduire \u00e0 l'acc\u00e8s \u00e0 une zone m\u00e9moire d\u00e9j\u00e0 lib\u00e9r\u00e9e et \u00e0 un d\u00e9ni de service (il n'est pas exclu que le probl\u00e8me puisse \u00e9galement \u00eatre exploit\u00e9 pour permettre l'ex\u00e9cution de code). Ce probl\u00e8me est caus\u00e9 par une condition de course (race condition) qui peut survenir lors de l'ex\u00e9cution de la fonction rds_tcp_kill_sock au moment du nettoyage des sockets pour l'espace de noms r\u00e9seau. <\/p>\n

Dans la sp\u00e9cification NVD<\/a><\/noindex> , le probl\u00e8me est marqu\u00e9 comme pouvant \u00eatre exploit\u00e9 \u00e0 distance, mais selon la description correctifs<\/a><\/noindex>, il ne sera pas possible d'organiser une attaque \u00e0 distance sans pr\u00e9sence locale sur le syst\u00e8me et manipulation des espaces de noms. En particulier, selon les des passionn\u00e9s de ce sujet, pour se d\u00e9tourner de toutes les complexit\u00e9s vers un espace de noms universel, durable et d\u00e9centralis\u00e9, il faudra :<\/a><\/noindex> d\u00e9veloppeurs de SUSE, la vuln\u00e9rabilit\u00e9 n'est exploit\u00e9e que localement, l'organisation de l'attaque est suffisamment complexe et n\u00e9cessite des privil\u00e8ges suppl\u00e9mentaires sur le syst\u00e8me. Si dans le NVD le niveau de danger est \u00e9valu\u00e9 \u00e0 9,3 (CVSS v2) et 8,1 (CVSS v2), le classement de SUSE \u00e9value le danger \u00e0 6,4 sur 10. <\/p>\n

Les repr\u00e9sentants d'Ubuntu ont \u00e9galement \u00e9valu\u00e9<\/a><\/noindex> le danger du probl\u00e8me comme mod\u00e9r\u00e9. Par ailleurs, selon la sp\u00e9cification CVSS v3.0, le probl\u00e8me se voit attribuer un niveau de complexit\u00e9 d'attaque \u00e9lev\u00e9 et la possibilit\u00e9 d'exploitation est \u00e9valu\u00e9e \u00e0 seulement 2,2 sur 10.<\/p>\n

Selon le rapport<\/a><\/noindex> de la soci\u00e9t\u00e9 Cisco, la vuln\u00e9rabilit\u00e9 est exploit\u00e9e \u00e0 distance en envoyant des paquets TCP \u00e0 des services r\u00e9seau actifs RDS<\/a><\/noindex> et un prototype de l'exploit existe d\u00e9j\u00e0. \u00c0 quel point cette information est-elle exacte reste \u00e0 clarifier, il est possible que le rapport ne fasse que pr\u00e9senter des sp\u00e9culations artistiquement. Selon des informations<\/a><\/noindex> VulDB, aucun exploit n'a encore \u00e9t\u00e9 cr\u00e9\u00e9 et le probl\u00e8me n'est exploit\u00e9 qu'au niveau local.<\/p>\n

Le probl\u00e8me se manifeste dans les noyaux jusqu'\u00e0 5.0.8 et a \u00e9t\u00e9 bloqu\u00e9 par le correctif de mars , inclus dans la version du noyau 5.0.8. Dans la plupart des distributions, le probl\u00e8me reste non r\u00e9solu (<\/a><\/noindex>). Le correctif a \u00e9t\u00e9 publi\u00e9 pour SLE12 SP3, openSUSE 42.3 etDebian<\/a><\/noindex>, RHEL<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, SUSE<\/a><\/noindex>\ud83e\udd47 Vuln\u00e9rabilit\u00e9 dans la pile r\u00e9seau du noyau Linux | ProHoster Fedora<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11815), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 (race condition), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rds_tcp_kill_sock \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33548","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 dans la pile r\u00e9seau du noyau Linux | ProHoster","description":"Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans le code du gestionnaire du protocole RDS bas\u00e9 sur TCP (Reliable Datagram Socket, net\/rds\/tcp.c) (","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RDS \u043d\u0430 \u0431\u0430\u0437\u0435 TCP (Reliable Datagram Socket, net\/rds\/tcp.c) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-setevom-steke-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:15+00:00","article:modified_time":"2019-10-31T18:53:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33548","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:44:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:10","updated":"2026-01-21 15:44:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=33548"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33548\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=33548"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=33548"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=33548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}