{"id":105525,"date":"2022-11-11T21:36:51","date_gmt":"2022-11-11T19:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana"},"modified":"2022-11-11T21:36:51","modified_gmt":"2022-11-11T19:36:51","slug":"uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","title":{"rendered":"Zranitelnost v Androidu, kter\u00e1 umo\u017e\u0148uje obej\u00edt blokaci obrazovky.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Na platform\u011b Android byla odhalena zranitelnost (CVE-2022-20465), kter\u00e1 umo\u017e\u0148uje deaktivovat uzam\u010den\u00ed obrazovky prost\u0159ednictv\u00edm p\u0159esm\u011brov\u00e1n\u00ed SIM karty a zad\u00e1n\u00ed PUK k\u00f3du. Mo\u017enost deaktivace uzam\u010den\u00ed byla demonstrov\u00e1na na za\u0159\u00edzen\u00edch Google Pixel, ale jeliko\u017e oprava ovliv\u0148uje z\u00e1kladn\u00ed k\u00f3dovou z\u00e1kladnu Androidu, je pravd\u011bpodobn\u00e9, \u017ee se probl\u00e9m t\u00fdk\u00e1 i firmware od jin\u00fdch v\u00fdrobc\u016f. Probl\u00e9m byl odstran\u011bn v listopadov\u00e9m souboru oprav bezpe\u010dnostn\u00edch probl\u00e9m\u016f pro Android. V\u00fdzkumn\u00edk, kter\u00fd na probl\u00e9m upozornil, obdr\u017eel od spole\u010dnosti Google odm\u011bnu ve v\u00fd\u0161i 70 000 dolar\u016f. <\/p>\n

Probl\u00e9m je zp\u016fsoben nespr\u00e1vn\u00fdm zpracov\u00e1n\u00edm odem\u010den\u00ed po zad\u00e1n\u00ed PUK k\u00f3du (Personal Unblocking Key), kter\u00fd se pou\u017e\u00edv\u00e1 pro obnoven\u00ed funkce SIM karty, zablokovan\u00e9 po opakovan\u00e9m nespr\u00e1vn\u00e9m zad\u00e1n\u00ed PIN k\u00f3du. Pro deaktivaci uzam\u010den\u00ed obrazovky sta\u010d\u00ed vlo\u017eit do telefonu svou SIM kartu, u kter\u00e9 je nastavena ochrana na z\u00e1klad\u011b PIN k\u00f3du. Po zm\u011bn\u011b SIM karty, chr\u00e1n\u011bn\u00e9 PIN k\u00f3dem, se na obrazovce nejprve zobrazuje v\u00fdzva k zad\u00e1n\u00ed PIN k\u00f3du. Pokud se t\u0159ikr\u00e1t nespr\u00e1vn\u011b zad\u00e1 PIN k\u00f3d, dojde k zablokov\u00e1n\u00ed SIM karty, po \u010dem\u017e bude mo\u017en\u00e9 zadat PUK k\u00f3d pro odem\u010den\u00ed. Uk\u00e1zalo se, \u017ee spr\u00e1vn\u00e9 zad\u00e1n\u00ed PUK k\u00f3du nejen odemyk\u00e1 SIM kartu, ale tak\u00e9 p\u0159ech\u00e1z\u00ed do hlavn\u00edho rozhran\u00ed obch\u00e1zen\u00edm spr\u00e1vce obrazovky, bez potvrzen\u00ed p\u0159\u00edstupu pomoc\u00ed hlavn\u00edho hesla nebo grafick\u00e9ho kl\u00ed\u010de.

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

Zranitelnost je zp\u016fsobena chybou v logice kontroly PUK k\u00f3d\u016f v obslu\u017en\u00e9m programu KeyguardSimPukViewController, kter\u00fd se pod\u00edl\u00ed na zobrazen\u00ed dodate\u010dn\u00e9 autentiza\u010dn\u00ed obrazovky. V Androidu se pou\u017e\u00edv\u00e1 n\u011bkolik typ\u016f autentiza\u010dn\u00edch obrazovek (pro PIN, PUK, heslo, grafick\u00fd kl\u00ed\u010d, biometrickou autentizaci) a tyto obrazovky jsou vyvol\u00e1v\u00e1ny postupn\u011b, kdy\u017e je pot\u0159eba prov\u00e9st v\u00edce kontrol, nap\u0159\u00edklad kdy\u017e je pot\u0159eba PIN a grafick\u00fd kl\u00ed\u010d. <\/p>\n

P\u0159i spr\u00e1vn\u00e9m zad\u00e1n\u00ed PIN k\u00f3du se aktivuje druh\u00e1 f\u00e1ze ov\u011b\u0159en\u00ed, kter\u00e1 vy\u017eaduje zad\u00e1n\u00ed hlavn\u00edho odblokovac\u00edho k\u00f3du, ale p\u0159i zad\u00e1n\u00ed PUK k\u00f3du je tato f\u00e1ze p\u0159esko\u010dena a p\u0159\u00edstup je poskytnut bez \u017e\u00e1dosti o hlavn\u00ed heslo nebo grafick\u00fd kl\u00ed\u010d. P\u0159esko\u010den\u00ed n\u00e1sleduj\u00edc\u00ed f\u00e1ze odblokov\u00e1n\u00ed prob\u00edh\u00e1, proto\u017ee p\u0159i vol\u00e1n\u00ed KeyguardSecurityContainerController#dismiss() nedoch\u00e1z\u00ed k porovn\u00e1n\u00ed o\u010dek\u00e1van\u00e9 a proveden\u00e9 metody ov\u011b\u0159en\u00ed, tj. zpracovatel pova\u017euje, \u017ee nedo\u0161lo ke zm\u011bn\u011b metody ov\u011b\u0159en\u00ed, a ukon\u010den\u00ed ov\u011b\u0159en\u00ed PUK k\u00f3du sv\u011bd\u010d\u00ed o \u00fasp\u011b\u0161n\u00e9m potvrzen\u00ed opr\u00e1vn\u011bn\u00ed. <\/p>\n

Zranitelnost byla odhalena n\u00e1hodou \u2014 u\u017eivateli se vybila baterie a po op\u011btovn\u00e9m nabit\u00ed a zapnut\u00ed n\u011bkolikr\u00e1t chybn\u011b zadal PIN k\u00f3d, pak odstranil z\u00e1mek pomoc\u00ed PUK k\u00f3du a byl p\u0159ekvapen, \u017ee syst\u00e9m nepo\u017eadoval hlavn\u00ed heslo pou\u017e\u00edvan\u00e9 k de\u0161ifrov\u00e1n\u00ed dat, po \u010dem\u017e se za\u0159\u00edzen\u00ed zaseklo s hl\u00e1\u0161kou \u201ePixel se spou\u0161t\u00ed\u2026\u201c. U\u017eivatel byl pe\u010dliv\u00fd, rozhodl se zjistit, v \u010dem je probl\u00e9m, a za\u010dal experimentovat s r\u016fzn\u00fdmi zp\u016fsoby zad\u00e1v\u00e1n\u00ed PIN a PUK k\u00f3d\u016f, a\u017e n\u00e1hodou zapomn\u011bl restartovat za\u0159\u00edzen\u00ed po zm\u011bn\u011b SIM karty a m\u00edsto zasek\u00e1v\u00e1n\u00ed z\u00edskal p\u0159\u00edstup k prost\u0159ed\u00ed. <\/p>\n

Zvl\u00e1\u0161tn\u00ed z\u00e1jem vzbuzuje reakce Googlu na zpr\u00e1vu o zranitelnosti. Informace o probl\u00e9mu byly zasl\u00e1ny v \u010dervnu, ale do z\u00e1\u0159\u00ed se v\u00fdzkumn\u00edkovi nepoda\u0159ilo dos\u00e1hnout smyslupln\u00e9 odpov\u011bdi. Uva\u017eoval, \u017ee takov\u00e9 chov\u00e1n\u00ed je zp\u016fsobeno t\u00edm, \u017ee nen\u00ed prvn\u00edm, kdo o t\u00e9to chyb\u011b informuje. Podez\u0159en\u00ed, \u017ee n\u011bco nen\u00ed v po\u0159\u00e1dku, vzbudila v z\u00e1\u0159\u00ed, kdy probl\u00e9m z\u016fstal neopraven\u00fd po instalaci aktualizace firmwaru, vydan\u00e9 po 90 dnech, kdy ji\u017e vypr\u0161el uveden\u00fd term\u00edn utajen\u00ed. <\/p>\n

Jeliko\u017e v\u0161echny pokusy zjistit stav zaslan\u00e9 zpr\u00e1vy o probl\u00e9mu vedly pouze k automatizovan\u00fdm a \u0161ablonovit\u00fdm odpov\u011bd\u00edm, pokusil se v\u00fdzkumn\u00edk osobn\u011b kontaktovat pracovn\u00edky Googlu, aby zjistil situaci ohledn\u011b p\u0159\u00edpravy opravy, a dokonce p\u0159edvedl zranitelnost v lond\u00fdnsk\u00e9 kancel\u00e1\u0159i Googlu. Teprve pot\u00e9 se pr\u00e1ce na odstran\u011bn\u00ed zranitelnosti posunula z mrtv\u00e9ho bodu. B\u011bhem \u0161et\u0159en\u00ed se uk\u00e1zalo, \u017ee o probl\u00e9mu u\u017e n\u011bkdo d\u0159\u00edve informoval, ale Google se rozhodl ud\u011blat v\u00fdjimku a vyplatit odm\u011bnu za op\u011btovn\u00e9 nahl\u00e1\u0161en\u00ed probl\u00e9mu, proto\u017ee jen d\u00edky vytrvalosti autora si n\u011bkdo na probl\u00e9m vzpomn\u011bl.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-20465), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0443\u0442\u0451\u043c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u0438 \u0432\u0432\u043e\u0434\u0430 PUK-\u043a\u043e\u0434\u0430. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Google Pixel, \u043d\u043e \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 Android, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f Android. \u041e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0439 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105525","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost v Androidu, kter\u00e1 umo\u017e\u0148uje obej\u00edt z\u00e1mek obrazovky | ProHoster","description":"Na platform\u011b Android byla zji\u0161t\u011bna zranitelnost (CVE-2022-20465), kter\u00e1 umo\u017e\u0148uje deaktivaci z\u00e1mku obrazovky v\u00fdm\u011bnou SIM karty a zad\u00e1n\u00edm PUK k\u00f3du.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 | ProHoster","og:description":"\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-20465), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0443\u0442\u0451\u043c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u0438 \u0432\u0432\u043e\u0434\u0430 PUK-\u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-11T19:36:51+00:00","article:modified_time":"2022-11-11T19:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=105525"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105525\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=105525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=105525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=105525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}