{"id":425339,"date":"2022-10-22T04:19:33","date_gmt":"2022-10-22T06:19:33","guid":{"rendered":"https:\/\/teknomers.com\/fr\/faille-critique-signalee-dans-move-virtual-machine-powering-the-aptos-blockchain-network\/"},"modified":"2022-10-22T04:19:35","modified_gmt":"2022-10-22T06:19:35","slug":"faille-critique-signalee-dans-move-virtual-machine-powering-the-aptos-blockchain-network","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/faille-critique-signalee-dans-move-virtual-machine-powering-the-aptos-blockchain-network\/","title":{"rendered":"Faille critique signal\u00e9e dans Move Virtual Machine Powering the Aptos Blockchain Network"},"content":{"rendered":"


\n<\/p>\n

\n
<\/div>\n

Les chercheurs ont r\u00e9v\u00e9l\u00e9 des d\u00e9tails sur une faille critique d\u00e9sormais corrig\u00e9e dans la machine virtuelle Move qui alimente le r\u00e9seau blockchain Aptos.<\/p>\n

La vuln\u00e9rabilit\u00e9 “peut provoquer le plantage des n\u0153uds Aptos et provoquer un d\u00e9ni de service”, a d\u00e9clar\u00e9 Numen Cyber \u200b\u200bLabs, bas\u00e9 \u00e0 Singapour. a dit<\/a> dans un article technique publi\u00e9 plus t\u00f4t ce mois-ci.<\/p>\n

Aptos est un nouveau venu<\/a> \u00e0 l’espace blockchain, qui lanc\u00e9<\/a> son r\u00e9seau principal<\/a> le 17 octobre 2022. Il a ses racines dans le syst\u00e8me de paiement Diem stablecoin propos\u00e9 par Meta (n\u00e9e Facebook), qui a \u00e9galement introduit un portefeuille num\u00e9rique de courte dur\u00e9e appel\u00e9 Novi<\/a>.<\/p>\n

\"La<\/a><\/div>\n

Le r\u00e9seau est construit \u00e0 l’aide d’un langage de programmation ind\u00e9pendant de la plate-forme connu sous le nom de D\u00e9placer<\/a>un syst\u00e8me bas\u00e9 sur Rust con\u00e7u<\/a> mettre en \u0153uvre et ex\u00e9cuter des contrats intelligents dans un environnement s\u00e9curis\u00e9 environnement d’ex\u00e9cution<\/a>\u00e9galement connu sous le nom de Move Virtual Machine (alias MoveVM<\/a>).<\/p>\n

\"\"<\/div>\n

La vuln\u00e9rabilit\u00e9<\/a> identifi\u00e9 par Numen Cyber \u200b\u200bLabs est ancr\u00e9 dans le module de v\u00e9rification du langage Move (“stack_usage_verifier.rs<\/a>“), un composant qui valide la instructions de bytecode<\/a> avant son ex\u00e9cution dans MoveVM.<\/p>\n

\"La<\/a><\/div>\n

Plus pr\u00e9cis\u00e9ment, il s’agit d’un vuln\u00e9rabilit\u00e9 de d\u00e9bordement d’entier<\/a> dans le bas\u00e9 sur la pile<\/a> Langage de programmation Web3 pouvant entra\u00eener un comportement ind\u00e9fini et donc des plantages.<\/p>\n

\"\"<\/div>\n

“\u00c9tant donn\u00e9 que cette vuln\u00e9rabilit\u00e9 se produit dans le module d’ex\u00e9cution Move, pour les n\u0153uds de la cha\u00eene, si le code bytecode est ex\u00e9cut\u00e9, cela entra\u00eenera un [Denial-of-Service] attaque \u00bb, a expliqu\u00e9 la soci\u00e9t\u00e9 de cybers\u00e9curit\u00e9.<\/p>\n

“Dans les cas graves, le r\u00e9seau Aptos peut \u00eatre compl\u00e8tement arr\u00eat\u00e9, ce qui causera des dommages incalculables et aura un impact s\u00e9rieux sur la stabilit\u00e9 du n\u0153ud.”<\/p>\n

<\/p>\n<\/div>\n


\n
ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Les chercheurs ont r\u00e9v\u00e9l\u00e9 des d\u00e9tails sur une faille critique d\u00e9sormais corrig\u00e9e dans la machine virtuelle Move qui alimente le r\u00e9seau blockchain Aptos. La vuln\u00e9rabilit\u00e9 “peut provoquer le plantage des n\u0153uds Aptos et provoquer un d\u00e9ni de service”, a d\u00e9clar\u00e9 Numen Cyber \u200b\u200bLabs, bas\u00e9 \u00e0 Singapour. a dit dans un article technique publi\u00e9 plus t\u00f4t […]<\/p>\n","protected":false},"author":1,"featured_media":425340,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[118523,19233,4168,22,4158,4165,4161,429,9048,4157,4159,4171,4170,4167,3970,4160,55995,35123,4163,4162,63008,4172,4169,9499,4166,92197,4164],"class_list":["post-425339","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-aptos","tag-blockchain","tag-comment-pirater","tag-critique","tag-cyber-actualites","tag-cyber-attaques","tag-cyber-mises-a-jour","tag-dans","tag-faille","tag-lactualite-de-la-cybersecurite","tag-lactualite-de-la-cybersecurite-aujourdhui","tag-lactualite-des-hackers","tag-la-securite-des-informations","tag-logiciel-malveillant-de-ransomware","tag-machine","tag-mises-a-jour-de-la-cybersecurite","tag-move","tag-network","tag-nouvelles-de-piratage","tag-nouvelles-de-pirates","tag-powering","tag-securite-informatique","tag-securite-internet","tag-signalee","tag-violation-de-donnees","tag-virtual","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/425339","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=425339"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/425339\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/425340"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=425339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=425339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=425339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}