{"id":805084,"date":"2023-06-28T08:05:35","date_gmt":"2023-06-28T10:05:35","guid":{"rendered":"https:\/\/teknomers.com\/fr\/des-failles-critiques-dinjection-sql-exposent-gentoo-soko-a-lexecution-de-code-a-distance\/"},"modified":"2023-06-28T08:05:38","modified_gmt":"2023-06-28T10:05:38","slug":"des-failles-critiques-dinjection-sql-exposent-gentoo-soko-a-lexecution-de-code-a-distance","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/des-failles-critiques-dinjection-sql-exposent-gentoo-soko-a-lexecution-de-code-a-distance\/","title":{"rendered":"Des failles critiques d&#8217;injection SQL exposent Gentoo Soko \u00e0 l&#8217;ex\u00e9cution de code \u00e0 distance"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">28 juin 2023<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">S\u00e9curit\u00e9 des terminaux \/ RCE<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><\/div>\n<p>Plusieurs vuln\u00e9rabilit\u00e9s d&#8217;injection SQL ont \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9es dans Gentoo Soko qui pourraient conduire \u00e0 l&#8217;ex\u00e9cution de code \u00e0 distance (RCE) sur des syst\u00e8mes vuln\u00e9rables.<\/p>\n<p>&#8220;Ces injections SQL se sont produites malgr\u00e9 l&#8217;utilisation d&#8217;une biblioth\u00e8que ORM (Object-Relational Mapping) et d&#8217;instructions pr\u00e9par\u00e9es&#8221;, a d\u00e9clar\u00e9 Thomas Chauchefoin, chercheur \u00e0 SonarSource. <a rel=\"nofollow noopener\" href=\"https:\/\/www.sonarsource.com\/blog\/why-orms-and-prepared-statements-cant-always-win\/\" target=\"_blank\">a dit<\/a>ajoutant qu&#8217;ils pourraient entra\u00eener un RCE sur Soko en raison d&#8217;une &#8220;mauvaise configuration de la base de donn\u00e9es&#8221;.<\/p>\n<p>Le <a rel=\"nofollow noopener\" href=\"https:\/\/github.com\/gentoo\/soko\/security\/advisories\/GHSA-gc2x-86p3-mxg2\" target=\"_blank\">deux<\/a> <a rel=\"nofollow noopener\" href=\"https:\/\/github.com\/gentoo\/soko\/security\/advisories\/GHSA-45jr-w89p-c843\" target=\"_blank\">questions<\/a>, qui ont \u00e9t\u00e9 d\u00e9couverts dans la fonction de recherche de Soko, ont \u00e9t\u00e9 suivis collectivement en tant que CVE-2023-28424 (score CVSS\u00a0: 9,1).  Ils ont \u00e9t\u00e9 trait\u00e9s dans les 24 heures suivant la divulgation responsable le 17 mars 2023.<\/p>\n<p>Soko est un module logiciel Go qui alimente <a rel=\"nofollow noopener\" href=\"https:\/\/packages.gentoo.org\/\" target=\"_blank\">packages.gentoo.org<\/a>offrant aux utilisateurs un moyen simple de rechercher parmi les diff\u00e9rents packages Portage disponibles pour la distribution Gentoo Linux.<\/p>\n<p>Mais les lacunes identifi\u00e9es dans le service ont fait qu&#8217;il aurait \u00e9t\u00e9 possible pour un acteur malveillant de <a rel=\"nofollow noopener\" href=\"https:\/\/capec.mitre.org\/data\/definitions\/66.html\" target=\"_blank\">injecter du code sp\u00e9cialement con\u00e7u<\/a>entra\u00eenant l&#8217;exposition d&#8217;informations sensibles. <\/p>\n<div class=\"check_two clear badbox\"><center class=\"cf\"><a rel=\"nofollow noopener\" href=\"https:\/\/www.memcyco.com\/home\/library\/the-untold-cost-of-brand-impersonation-ebook\/?utm_source=thn&amp;utm_medium=referral&amp;utm_campaign=ebook-campaign\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"La cyber-s\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2023\/06\/Microsoft-met-en-garde-contre-les-attaques-de-vol-dinformations.png\" width=\"728\" height=\"90\"\/><\/a><\/center><\/div>\n<p>&#8220;Les injections SQL \u00e9taient exploitables et avaient la capacit\u00e9 de divulguer la version du serveur PostgreSQL et d&#8217;ex\u00e9cuter des commandes arbitraires sur le syst\u00e8me&#8221;, a d\u00e9clar\u00e9 SonarSource.<\/p>\n<p>Le d\u00e9veloppement intervient des mois apr\u00e8s SonarSource <a rel=\"nofollow noopener\" href=\"https:\/\/www.sonarsource.com\/blog\/odoo-get-your-content-type-right-or-else\/\" target=\"_blank\">d\u00e9couvert<\/a> une faille de script intersite (XSS) dans une suite commerciale open source appel\u00e9e Odoo qui pourrait \u00eatre exploit\u00e9e pour se faire passer pour n&#8217;importe quelle victime sur une instance Odoo vuln\u00e9rable ainsi que pour exfiltrer des donn\u00e9es pr\u00e9cieuses.<\/p>\n<p>Plus t\u00f4t cette ann\u00e9e, des failles de s\u00e9curit\u00e9 ont \u00e9galement \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9es dans des logiciels open source tels que <a rel=\"nofollow noopener\" href=\"https:\/\/www.sonarsource.com\/blog\/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference\/\" target=\"_blank\">Pr\u00e9talx<\/a> et <a rel=\"nofollow noopener\" href=\"https:\/\/www.sonarsource.com\/blog\/openemr-remote-code-execution-in-your-healthcare-system\/\" target=\"_blank\">OpenEMR<\/a> cela pourrait ouvrir la voie \u00e0 des attaquants distants pour ex\u00e9cuter du code arbitraire.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant ?  Suivez-nous sur <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"nofollow noopener\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">LinkedIn<\/a> pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2023\/06\/critical-sql-injection-flaws-expose.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80228 juin 2023\ue804Ravie LakshmananS\u00e9curit\u00e9 des terminaux \/ RCE Plusieurs vuln\u00e9rabilit\u00e9s d&#8217;injection SQL ont \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9es dans Gentoo Soko qui pourraient conduire \u00e0 l&#8217;ex\u00e9cution de code \u00e0 distance (RCE) sur des syst\u00e8mes vuln\u00e9rables. &#8220;Ces injections SQL se sont produites malgr\u00e9 l&#8217;utilisation d&#8217;une biblioth\u00e8que ORM (Object-Relational Mapping) et d&#8217;instructions pr\u00e9par\u00e9es&#8221;, a d\u00e9clar\u00e9 Thomas Chauchefoin, chercheur \u00e0 SonarSource. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":805085,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[5597,4168,5729,4158,4165,4161,133,64307,2526,39576,4806,171052,4157,4159,4171,4170,40144,4167,4160,4163,4162,4172,4169,171053,8542,4166,4164],"class_list":["post-805084","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-code","tag-comment-pirater","tag-critiques","tag-cyber-actualites","tag-cyber-attaques","tag-cyber-mises-a-jour","tag-des","tag-dinjection","tag-distance","tag-exposent","tag-failles","tag-gentoo","tag-lactualite-de-la-cybersecurite","tag-lactualite-de-la-cybersecurite-aujourdhui","tag-lactualite-des-hackers","tag-la-securite-des-informations","tag-lexecution","tag-logiciel-malveillant-de-ransomware","tag-mises-a-jour-de-la-cybersecurite","tag-nouvelles-de-piratage","tag-nouvelles-de-pirates","tag-securite-informatique","tag-securite-internet","tag-soko","tag-sql","tag-violation-de-donnees","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/805084","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=805084"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/805084\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/805085"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=805084"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=805084"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=805084"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}