{"id":41415,"date":"2020-02-10T20:42:08","date_gmt":"2020-02-10T17:42:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth"},"modified":"2020-02-10T20:42:08","modified_gmt":"2020-02-10T17:42:08","slug":"uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","title":{"rendered":"Vuln\u00e9rabilit\u00e9 dans Android permettant une ex\u00e9cution de code \u00e0 distance lorsque le Bluetooth est activ\u00e9","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En f\u00e9vrier, la mise \u00e0 jour<\/a><\/noindex> une vuln\u00e9rabilit\u00e9 critique a \u00e9t\u00e9 corrig\u00e9e sur la plateforme Android CVE-2020-10174<\/a><\/noindex> (CVE-2020-0022) dans la pile Bluetooth, permettant l'ex\u00e9cution \u00e0 distance de code via l'envoi d'un paquet Bluetooth sp\u00e9cialement con\u00e7u. Le probl\u00e8me peut \u00eatre exploit\u00e9 discr\u00e8tement par un attaquant se trouvant \u00e0 port\u00e9e de Bluetooth. Il est possible que cette vuln\u00e9rabilit\u00e9 soit utilis\u00e9e pour cr\u00e9er des vers se propageant d'un appareil \u00e0 un autre. <\/p>\n

Pour attaquer, il suffit de conna\u00eetre l'adresse MAC de l'appareil cible (aucune association pr\u00e9alable n'est requise, mais le Bluetooth doit \u00eatre activ\u00e9 sur l'appareil). Sur certains appareils, l'adresse MAC Bluetooth peut \u00eatre calcul\u00e9e \u00e0 partir de l'adresse MAC Wi-Fi. En cas d'exploitation r\u00e9ussie de la vuln\u00e9rabilit\u00e9, l'attaquant peut ex\u00e9cuter son code avec les droits d'un processus en arri\u00e8re-plan, coordonnant le fonctionnement du Bluetooth sur Android.
\nLe probl\u00e8me est sp\u00e9cifique \u00e0 la pile Bluetooth utilis\u00e9e sur Android, Fluoride,<\/a><\/noindex> (bas\u00e9e sur le code du projet BlueDroid de Broadcom) et ne se manifeste pas dans la pile BlueZ utilis\u00e9e sous Linux.<\/p>\n

Les chercheurs ayant d\u00e9couvert le probl\u00e8me ont pu pr\u00e9parer un prototype fonctionnel de l'exploit, mais les d\u00e9tails de l'exploitation seront r\u00e9v\u00e9l\u00e9s<\/a><\/noindex> plus tard, apr\u00e8s que le correctif ait \u00e9t\u00e9 d\u00e9ploy\u00e9 pour la majorit\u00e9 des utilisateurs. On sait seulement que la vuln\u00e9rabilit\u00e9 existe dans le code de restructuration des paquets et est caus\u00e9e<\/a><\/noindex> le calcul incorrect de la taille des paquets L2CAP (Logical link control and adaptation protocol), lorsque les donn\u00e9es envoy\u00e9es par l'exp\u00e9diteur d\u00e9passent la taille attendue.<\/p>\n

Dans Android 8 et 9, le probl\u00e8me peut conduire \u00e0 l'ex\u00e9cution de code, mais dans Android 10, il se limite \u00e0 un plantage du processus Bluetooth en arri\u00e8re-plan. Les versions ant\u00e9rieures d'Android peuvent \u00eatre potentiellement affect\u00e9es par le probl\u00e8me, mais la possibilit\u00e9 d'exploiter la vuln\u00e9rabilit\u00e9 n'a pas \u00e9t\u00e9 test\u00e9e. Il est recommand\u00e9 aux utilisateurs d'installer la mise \u00e0 jour du micrologiciel d\u00e8s que possible ; si cela n'est pas possible, il est conseill\u00e9 de d\u00e9sactiver Bluetooth par d\u00e9faut, d'interdire la d\u00e9tection des appareils et d'activer Bluetooth dans des lieux publics uniquement en cas de n\u00e9cessit\u00e9 absolue (il est \u00e9galement possible de remplacer les \u00e9couteurs sans fil par des \u00e9couteurs filaires). <\/p>\n

En plus de ce probl\u00e8me, la mise \u00e0 jour de f\u00e9vrier<\/a><\/noindex> 26 vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans l'ensemble des correctifs de s\u00e9curit\u00e9 pour Android, dont une autre vuln\u00e9rabilit\u00e9 (CVE-2020-0023) a \u00e9t\u00e9 class\u00e9e comme critique. La deuxi\u00e8me vuln\u00e9rabilit\u00e9 \u00e9galement. touche<\/a><\/noindex> La pile Bluetooth est li\u00e9e \u00e0 un traitement incorrect du droit BLUETOOTH_PRIVILEGED dans setPhonebookAccessPermission. En ce qui concerne les vuln\u00e9rabilit\u00e9s class\u00e9es comme critiques, 7 probl\u00e8mes ont \u00e9t\u00e9 r\u00e9solus dans des frameworks et applications, 4 dans des composants syst\u00e8me, 2 dans le noyau et 10 dans des composants ouverts et propri\u00e9taires pour les puces Qualcomm.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0022) \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e Bluetooth-\u043f\u0430\u043a\u0435\u0442\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 Bluetooth. \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0447\u0435\u0440\u0432\u0435\u0439, \u043f\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u043f\u043e\u0440\u0430\u0436\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c MAC-\u0430\u0434\u0440\u0435\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0436\u0435\u0440\u0442\u0432\u044b (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41415","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 dans Android permettant l'ex\u00e9cution \u00e0 distance de code avec Bluetooth activ\u00e9 | ProHoster","description":"La mise \u00e0 jour de f\u00e9vrier de la plateforme Android a corrig\u00e9 une vuln\u00e9rabilit\u00e9 critique","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c Bluetooth | ProHoster","og:description":"\u0412 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f","og:url":"https:\/\/prohoster.info\/fr\/blog\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-10T17:42:08+00:00","article:modified_time":"2020-02-10T17:42:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41415","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:26:29","updated":"2022-09-29 21:00:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/41415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=41415"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/41415\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=41415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=41415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=41415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}