{"id":85612,"date":"2020-06-17T19:42:36","date_gmt":"2020-06-17T17:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck"},"modified":"2020-06-17T19:42:36","modified_gmt":"2020-06-17T17:42:36","slug":"19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","title":{"rendered":"19 vuln\u00e9rabilit\u00e9s exploitables \u00e0 distance dans la pile TCP\/IP Treck","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dans la pile TCP\/IP propri\u00e9taire Treck<\/a><\/noindex> d\u00e9tect\u00e9<\/a><\/noindex> 19 vuln\u00e9rabilit\u00e9s<\/a><\/noindex>, exploit\u00e9s par l'envoi de paquets sp\u00e9cialement format\u00e9s. Les vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 nomm\u00e9es Ripple20<\/a><\/noindex>. Certaines vuln\u00e9rabilit\u00e9s se manifestent \u00e9galement dans la pile TCP\/IP KASAGO de Zuken Elmic (Elmic Systems), qui partage des origines communes avec Treck. La pile Treck est utilis\u00e9e dans de nombreux appareils industriels, m\u00e9dicaux, de communication, int\u00e9gr\u00e9s et de consommation (des ampoules intelligentes aux imprimantes et onduleurs), ainsi que dans les \u00e9quipements \u00e9nerg\u00e9tiques, de transport, a\u00e9rospatiaux, commerciaux et p\u00e9troliers. <\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Parmi les cibles notables d'attaques utilisant la pile TCP\/IP Treck, on trouve les imprimantes r\u00e9seau HP et les puces Intel. Notamment, les probl\u00e8mes dans la pile TCP\/IP Treck ont \u00e9t\u00e9 \u00e0 l'origine de r\u00e9centes vuln\u00e9rabilit\u00e9s distantes<\/a><\/noindex> dans les sous-syst\u00e8mes Intel AMT et ISM, exploit\u00e9s par l'envoi de paquets r\u00e9seau. La pr\u00e9sence de vuln\u00e9rabilit\u00e9s a \u00e9t\u00e9 confirm\u00e9e par les fabricants Intel, HP, Hewlett Packard Enterprise, Baxter, Caterpillar, Digi, Rockwell Automation et Schneider Electric. De plus,
\n66 fabricants<\/a><\/noindex>, dont les produits utilisent la pile TCP\/IP Treck, n'ont pas encore r\u00e9agi aux probl\u00e8mes. Cinq fabricants, dont AMD, ont d\u00e9clar\u00e9 que leurs produits n'\u00e9taient pas affect\u00e9s par ces probl\u00e8mes.<\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Des probl\u00e8mes ont \u00e9t\u00e9 trouv\u00e9s dans l'impl\u00e9mentation des protocoles IPv4, IPv6, UDP, DNS, DHCP, TCP, ICMPv4 et ARP, caus\u00e9s par un traitement incorrect des param\u00e8tres de taille de donn\u00e9es (utilisation d'un champ de taille sans v\u00e9rification de la taille r\u00e9elle des donn\u00e9es), des erreurs de validation des entr\u00e9es, un double d\u00e9sallocation de m\u00e9moire, la lecture hors des limites du tampon, des d\u00e9bordements d'entiers, un contr\u00f4le d'acc\u00e8s inappropri\u00e9 et des probl\u00e8mes dans le traitement des cha\u00eenes avec un d\u00e9limiteur nul. <\/p>\n

Les deux probl\u00e8mes les plus critiques (CVE-2020-11896, CVE-2020-11897), ayant re\u00e7u un niveau CVSS de 10, permettent d'ex\u00e9cuter du code sur un appareil par l'envoi de paquets IPv4\/UDP ou IPv6 sp\u00e9cialement format\u00e9s. Le premier probl\u00e8me critique se manifeste sur des appareils prenant en charge les tunnels IPv4, tandis que le second concerne les versions publi\u00e9es avant le 04.06.2009 prenant en charge IPv6. Une autre vuln\u00e9rabilit\u00e9 critique (CVSS 9) est pr\u00e9sente dans le r\u00e9solveur DNS (CVE-2020-11901) et permet d'ex\u00e9cuter du code par l'envoi d'une requ\u00eate DNS sp\u00e9cialement format\u00e9e (ce probl\u00e8me a \u00e9t\u00e9 utilis\u00e9 pour d\u00e9montrer le piratage d'un onduleur Schneider Electric APC et se manifeste sur des dispositifs prenant en charge DNS).<\/p>\n

D'autres vuln\u00e9rabilit\u00e9s CVE-2020-11898, CVE-2020-11899, CVE-2020-11902, CVE-2020-11903, CVE-2020-11905 permettent de d\u00e9couvrir le contenu des zones m\u00e9moire du syst\u00e8me en envoyant des paquets sp\u00e9cialement format\u00e9s IPv4\/ICMPv4, IPv6OverIPv4, DHCP, DHCPv6 ou IPv6. D'autres probl\u00e8mes peuvent entra\u00eener un d\u00e9ni de service ou des fuites de donn\u00e9es r\u00e9siduelles \u00e0 partir des tampons syst\u00e8me.<\/p>\n

La plupart des vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans la version Treck 6.0.1.67 (le probl\u00e8me CVE-2020-11897 a \u00e9t\u00e9 corrig\u00e9 dans 5.0.1.35, CVE-2020-11900 dans 6.0.1.41, CVE-2020-11903 dans 6.0.1.28, CVE-2020-11908 dans 4.7.1.27). \u00c9tant donn\u00e9 que la pr\u00e9paration des mises \u00e0 jour de firmware pour des appareils sp\u00e9cifiques peut prendre du temps ou \u00eatre impossible (le stack Treck est en service depuis plus de 20 ans, beaucoup d'appareils ne sont plus pris en charge ou sont difficiles \u00e0 mettre \u00e0 jour), il est recommand\u00e9 aux administrateurs d'isoler les appareils probl\u00e9matiques et de configurer la normalisation ou le blocage des paquets fragment\u00e9s sur les syst\u00e8mes d'inspection des paquets, les pare-feu ou les routeurs, de bloquer les tunnels IP (IPv6-in-IPv4 et IP-in-IP), de bloquer le \u00ab routage source \u00bb, d'activer l'inspection des options incorrectes dans les paquets TCP, de bloquer les messages ICMP de gestion non utilis\u00e9s (mise \u00e0 jour MTU et masquage d'adresse), d'interdire le multicast IPv6 et de rediriger les requ\u00eates DNS vers un serveur DNS r\u00e9cursif s\u00e9curis\u00e9.<\/p>\n


\n
\r\n \"Lire\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719 vuln\u00e9rabilit\u00e9s exploitables \u00e0 distance dans la pile TCP\/IP Treck | ProHoster","description":"Des vuln\u00e9rabilit\u00e9s d\u00e9tect\u00e9es dans la pile TCP\/IP propri\u00e9taire Treck","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 Treck | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-17T17:42:36+00:00","article:modified_time":"2020-06-17T17:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:55:50","updated":"2022-09-28 01:40:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/85612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=85612"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/85612\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/85613"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=85612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=85612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=85612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}