{"id":38468,"date":"2019-10-31T22:23:53","date_gmt":"2019-10-31T19:23:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11\/"},"modified":"2019-10-31T22:23:53","modified_gmt":"2019-10-31T19:23:53","slug":"najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","title":{"rendered":"Vuln\u00e9rabilit\u00e9 trouv\u00e9e dans le bootrom de tous les appareils Apple \u00e9quip\u00e9s de puces de A5 \u00e0 A11","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Chercheur axi0mX a d\u00e9couvert<\/a><\/noindex> une vuln\u00e9rabilit\u00e9 dans le bootrom des appareils Apple, qui fonctionne au tout d\u00e9but du processus de d\u00e9marrage et transmet ensuite le contr\u00f4le \u00e0 iBoot. La vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 nomm\u00e9e checkm8 et permet de prendre le contr\u00f4le total de l'appareil. L'exploit publi\u00e9 peut potentiellement \u00eatre utilis\u00e9 pour contourner la v\u00e9rification des firmwares (Jailbreak), organiser un double d\u00e9marrage d'autres syst\u00e8mes d'exploitation et diff\u00e9rentes versions d'iOS. <\/p>\n

Le probl\u00e8me est remarquable car le Bootrom se trouve dans une m\u00e9moire NAND en lecture seule, ce qui emp\u00eache de r\u00e9soudre le probl\u00e8me sur les appareils d\u00e9j\u00e0 sortis (la vuln\u00e9rabilit\u00e9 ne peut \u00eatre corrig\u00e9e que dans de nouveaux lots d'appareils). Le probl\u00e8me se manifeste dans les SoC allant de A5 \u00e0 A11, utilis\u00e9s dans les produits cr\u00e9\u00e9s entre 2011 et 2017, allant de l'iPhone 4S aux mod\u00e8les iPhone 8 et X. <\/p>\n

Une version pr\u00e9liminaire du code pour exploiter la vuln\u00e9rabilit\u00e9 a d\u00e9j\u00e0 \u00e9t\u00e9 int\u00e9gr\u00e9e dans l'outil open source (GPLv3) ipwndfu<\/a><\/noindex>, destin\u00e9 \u00e0 d\u00e9verrouiller les firmwares Apple. L'exploit est pour l'instant limit\u00e9 aux fonctionnalit\u00e9s de cr\u00e9ation de dump de SecureROM, de d\u00e9chiffrement des cl\u00e9s pour les firmwares iOS et d'activation de JTAG. Un jailbreak automatis\u00e9 complet de la derni\u00e8re version d'iOS est possible, mais n'a pas encore \u00e9t\u00e9 r\u00e9alis\u00e9, car il n\u00e9cessite un travail suppl\u00e9mentaire. Actuellement, l'exploit a d\u00e9j\u00e0 \u00e9t\u00e9 adapt\u00e9 pour les SoC s5l8947x, s5l8950x, s5l8955x, s5l8960x, t8002, t8004, t8010, t8011 et t8015b, et sera \u00e9tendu \u00e0 l'avenir pour supporter s5l8940x, s5l8942x, s5l8945x, s5l8747x, t7000, t7001, s7002, s8000, s8001, s8003 et t8012.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c axi0mX \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 bootrom \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u0442\u0430\u0434\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 iBoot. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u043c\u044f checkm8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a (Jailbreak), \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0432\u043e\u0439\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u041e\u0421 \u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 iOS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38468","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 trouv\u00e9e dans le bootrom de tous les appareils Apple avec des puces allant de A5 \u00e0 A11 | ProHoster","description":"Le chercheur axi0mX a trouv\u00e9 une vuln\u00e9rabilit\u00e9 dans le bootrom des appareils Apple, qui fonctionne au tout d\u00e9but.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 bootrom \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 \u0441 A5 \u043f\u043e A11 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c axi0mX \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 bootrom \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:23:53+00:00","article:modified_time":"2019-10-31T19:23:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38468","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:11:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:08:32","updated":"2026-01-23 22:11:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/38468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=38468"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/38468\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=38468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=38468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=38468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}