{"id":112094,"date":"2023-12-09T21:10:14","date_gmt":"2023-12-09T19:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish"},"modified":"2023-12-09T21:10:14","modified_gmt":"2023-12-09T19:10:14","slug":"uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","title":{"rendered":"Zranitelnost v Bluetooth stack\u00edch Linuxu, macOS, Androidu a iOSu, kter\u00e1 umo\u017e\u0148uje substituci stisk\u016f kl\u00e1ves","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Marc Newlin, kter\u00fd p\u0159ed sedmi lety odhalil zranitelnost MouseJack, zve\u0159ejnil informace o podobn\u00e9 zranitelnosti (CVE-2023-45866), kter\u00e1 se t\u00fdk\u00e1 Bluetooth stack\u016f Androidu, Linuxu, macOS a iOS, a umo\u017e\u0148uje podvr\u017een\u00ed stisk\u016f kl\u00e1ves prost\u0159ednictv\u00edm simulace aktivity vstupn\u00edho za\u0159\u00edzen\u00ed p\u0159ipojen\u00e9ho p\u0159es Bluetooth. S p\u0159\u00edstupem k vstupu z kl\u00e1vesnice m\u016f\u017ee \u00fato\u010dn\u00edk prov\u00e1d\u011bt \u010dinnosti jako spou\u0161t\u011bn\u00ed p\u0159\u00edkaz\u016f v syst\u00e9mu, instalaci aplikac\u00ed a p\u0159esm\u011brov\u00e1n\u00ed zpr\u00e1v. <\/p>\n

Zranitelnost je zp\u016fsobena t\u00edm, \u017ee hostitelsk\u00e9 ovlada\u010de HID (Human Interface Device) pro Bluetooth za\u0159\u00edzen\u00ed maj\u00ed re\u017eim, kter\u00fd umo\u017e\u0148uje vzd\u00e1len\u00e9mu perifern\u00edmu za\u0159\u00edzen\u00ed vytv\u00e1\u0159et a navazovat \u0161ifrovan\u00e1 spojen\u00ed bez autentifikace. Mezi jin\u00fdm, p\u0159ipojen\u00e1 za\u0159\u00edzen\u00ed t\u00edmto zp\u016fsobem mohou zas\u00edlat zpr\u00e1vy z kl\u00e1vesnice a HID stack je zpracov\u00e1v\u00e1, co\u017e umo\u017e\u0148uje prov\u00e1d\u011bt \u00fatoky na vzd\u00e1len\u00e9 podvr\u017een\u00ed HID zpr\u00e1v, prov\u00e1d\u011bn\u00e9 bez \u00fa\u010dasti u\u017eivatele. \u00datok m\u016f\u017ee b\u00fdt proveden, kdy\u017e se \u00fato\u010dn\u00edk nach\u00e1z\u00ed a\u017e 100 metr\u016f od ob\u011bti. <\/p>\n

Mechanismus p\u00e1rov\u00e1n\u00ed za\u0159\u00edzen\u00ed bez autentifikace je definov\u00e1n ve specifikaci Bluetooth a v z\u00e1vislosti na nastaven\u00ed Bluetooth stacku umo\u017e\u0148uje p\u0159ipojet\u00ed za\u0159\u00edzen\u00ed bez potvrzen\u00ed od u\u017eivatele. V Linuxu p\u0159i pou\u017eit\u00ed Bluetooth stacku BlueZ mus\u00ed b\u00fdt Bluetooth adapt\u00e9r v re\u017eimu objevov\u00e1n\u00ed a p\u00e1rov\u00e1n\u00ed. V Androidu sta\u010d\u00ed zapnout podporu Bluetooth. V iOS a macOS mus\u00ed b\u00fdt Bluetooth zapnuto a bezdr\u00e1tov\u00e1 kl\u00e1vesnice p\u0159ipojena, aby \u00fatok prob\u011bhl. <\/p>\n

Mo\u017enost podvr\u017een\u00ed vstupu byla demonstrov\u00e1na v Ubuntu 18.04, 20.04, 22.04 a 23.10 s Bluetooth stackem zalo\u017een\u00fdm na bal\u00ed\u010dku Bluez. ChromeOS zranitelnosti nen\u00ed vystaven, proto\u017ee nastaven\u00ed Bluetooth stacku v n\u011bm neumo\u017e\u0148uje spojen\u00ed bez autentifikace. V Androidu se zranitelnost dot\u00fdk\u00e1 za\u0159\u00edzen\u00ed s verzemi platformy od 4.2.2 do 14. V macOS byla zranitelnost demonstrov\u00e1na na MacBook Pro 2022 s CPU Apple M2 a macOS 13.3.3 a MacBook Air 2017 s CPU Intel a macOS 12.6.7. V iOS byla zranitelnost demonstrov\u00e1na na iPhone SE s iOS 16.6. Aktivace re\u017eimu Lockdown nechr\u00e1n\u00ed p\u0159ed \u00fatokem na macOS a iOS. <\/p>\n

Ve spr\u00e1v\u011b syst\u00e9mu Linux byla zranitelnost odstran\u011bna v k\u00f3du Bluez nastaven\u00edm parametru «ClassicBondedOnly» na hodnotu «true», co\u017e aktivuje bezpe\u010dn\u00fd re\u017eim, kter\u00fd umo\u017e\u0148uje navazov\u00e1n\u00ed spojen\u00ed pouze po sp\u00e1rov\u00e1n\u00ed. P\u0159edt\u00edm byla nastavena hodnota «false», kter\u00e1 sni\u017eovala bezpe\u010dnost, aby se vy\u0159e\u0161ily probl\u00e9my s kompatibilitou s n\u011bkter\u00fdmi vstupn\u00edmi za\u0159\u00edzen\u00edmi. <\/p>\n

Ve Bluetooth stacku Fluoride, pou\u017e\u00edvan\u00e9m v posledn\u00edch verz\u00edch Androidu, byla zranitelnost odstran\u011bna zaveden\u00edm povinn\u00e9ho ov\u011b\u0159ov\u00e1n\u00ed pro v\u0161echna \u0161ifrovan\u00e1 spojen\u00ed. Opravy pro Android byly vytvo\u0159eny pouze pro v\u011btve 11-14. Pro za\u0159\u00edzen\u00ed Pixel byla zranitelnost odstran\u011bna v prosincov\u00e9 aktualizaci firmwaru. Pro verze Androidu od 4.2.2 do 10 zranitelnost z\u016fst\u00e1v\u00e1 neopraven\u00e1.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0432\u043e\u0434\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 Bluetooth. \u0418\u043c\u0435\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u043d\u043e\u043c\u0443 \u0432\u0432\u043e\u0434\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043a\u0430\u043a \u0437\u0430\u043f\u0443\u0441\u043a \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112094","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost v Bluetooth stack\u00e1ch Linuxu, macOS, Androidu a iOS, kter\u00e1 umo\u017e\u0148uje substituci stisk\u016f kl\u00e1ves | ProHoster","description":"Marc Newlin, kter\u00fd p\u0159ed sedmi lety odhalil zranitelnost MouseJack, zve\u0159ejnil informace o podobn\u00e9 zranitelnosti (CVE-2023-45866), kter\u00e1 se dot\u00fdk\u00e1 Bluetooth stack\u016f Androidu, Linuxu, macOS a iOS a umo\u017e\u0148uje \u00fatok.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0430\u0445 Linux, macOS, Android \u0438 iOS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 | ProHoster","og:description":"\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-09T19:10:14+00:00","article:modified_time":"2023-12-09T19:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/112094","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=112094"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/112094\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=112094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=112094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=112094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}