{"id":73029,"date":"2020-03-06T14:42:02","date_gmt":"2020-03-06T11:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oshibka-v-bind-9-16-privodyashhaya-k-narusheniyu-obrabotki-tcp-soedinenij"},"modified":"2020-03-06T14:42:02","modified_gmt":"2020-03-06T11:42:02","slug":"oshibka-v-bind-9-16-privodyashhaya-k-narusheniyu-obrabotki-tcp-soedinenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/oshibka-v-bind-9-16-privodyashhaya-k-narusheniyu-obrabotki-tcp-soedinenij","title":{"rendered":"Erreur dans BIND 9.16 entra\u00eenant une violation du traitement des connexions TCP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dans le fil publi\u00e9 il y a deux semaines BIND 9.16.0<\/a><\/noindex> une grave vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e erreur<\/a><\/noindex>, entra\u00eenant l'\u00e9puisement de la limite sur le nombre de connexions TCP. Dans BIND 9.16, un nouveau sous-syst\u00e8me r\u00e9seau a \u00e9t\u00e9 propos\u00e9, bas\u00e9 sur un m\u00e9canisme de traitement asynchrone des requ\u00eates utilisant la biblioth\u00e8que libuv<\/a><\/noindex>. En raison d'un bogue dans ce sous-syst\u00e8me, le compteur de connexions TCP actives ne diminue pas dans certaines conditions, ce qui entra\u00eene un \u00e9cart croissant entre sa valeur et le nombre r\u00e9el de connexions. Au bout d'un certain temps, la valeur du compteur peut atteindre la limite fix\u00e9e pour le nombre de connexions clients, emp\u00eachant ainsi l'acceptation de nouvelles requ\u00eates TCP (les requ\u00eates UDP continueront d'\u00eatre trait\u00e9es). <\/p>\n

Le probl\u00e8me se manifeste principalement sur les serveurs qui acceptent des connexions TCP de clients sur plusieurs interfaces r\u00e9seau.
\nLa mise \u00e0 jour de BIND 9.16 n'a pas encore \u00e9t\u00e9 publi\u00e9e, mais un un patch<\/a><\/noindex>a \u00e9t\u00e9 publi\u00e9 pour corriger le bogue. Comme solution temporaire, il est possible de fixer une limite sur le nombre de connexions (option tcp-clients) \u00e0 une valeur tr\u00e8s \u00e9lev\u00e9e. En plus de BIND 9.16, le probl\u00e8me affecte la branche exp\u00e9rimentale 9.15, \u00e0 partir de la version 9.15.6, mais cette branche est principalement utilis\u00e9e pour le d\u00e9veloppement et n'est pas destin\u00e9e \u00e0 \u00eatre d\u00e9ploy\u00e9e sur des serveurs de production.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434 \u0432\u0435\u0442\u043a\u0435 BIND 9.16.0 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044e \u043b\u0438\u043c\u0438\u0442\u0430 \u043d\u0430 \u0447\u0438\u0441\u043b\u043e TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0412 BIND 9.16 \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0441\u0435\u0442\u0435\u0432\u0430\u044f \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0451\u043d\u043d\u0430\u044f \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libuv. \u0418\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441\u0447\u0451\u0442\u0447\u0438\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043f\u0440\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0430\u0440\u0430\u0441\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u0435\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-73029","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Erreur dans BIND 9.16, entra\u00eenant des probl\u00e8mes de traitement des connexions TCP | ProHoster","description":"Dans le fil publi\u00e9 il y a deux semaines, une grave vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans BIND 9.16.0","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/oshibka-v-bind-9-16-privodyashhaya-k-narusheniyu-obrabotki-tcp-soedinenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 BIND 9.16, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0412 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434 \u0432\u0435\u0442\u043a\u0435 BIND 9.16.0 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/oshibka-v-bind-9-16-privodyashhaya-k-narusheniyu-obrabotki-tcp-soedinenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-06T11:42:02+00:00","article:modified_time":"2020-03-06T11:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"73029","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:41:07","updated":"2022-09-28 13:58:54","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/73029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=73029"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/73029\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=73029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=73029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=73029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}