{"id":184024,"date":"2026-10-28T23:40:36","date_gmt":"2026-10-28T21:40:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-uefi-proshivkah-ekspluatiruemaya-cherez-otpravku-icmp-paketa"},"modified":"2026-10-28T23:40:41","modified_gmt":"2026-10-28T21:40:41","slug":"remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","title":{"rendered":"Vzd\u00e1len\u00e1 zranitelnost v serverov\u00fdch UEFI firmware, zneu\u017e\u00edvan\u00e1 zasl\u00e1n\u00edm ICMP paketu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ve TianoCore EDK II (EFI Development Kit II), otev\u0159en\u00e9 reference implementace UEFI pou\u017e\u00edvan\u00e9 na v\u011bt\u0161in\u011b serverov\u00fdch z\u00e1kladn\u00edch desek, byla odstran\u011bna kritick\u00e1 zranitelnost (CVE-2026-97631). Zranitelnost se vyskytuje v PXE ovlada\u010di a m\u016f\u017ee b\u00fdt zneu\u017eita zasl\u00e1n\u00edm speci\u00e1ln\u011b vytvo\u0159en\u00fdch ICMP paket\u016f b\u011bhem s\u00ed\u0165ov\u00e9ho spu\u0161t\u011bn\u00ed v IPv4 nebo IPv6 s\u00edt\u00edch. \u00datok nevy\u017eaduje autentizaci a umo\u017e\u0148uje \u00fato\u010dn\u00edkovi spustit sv\u016fj k\u00f3d s opr\u00e1vn\u011bn\u00edmi UEFI firmwaru je\u0161t\u011b p\u0159ed p\u0159ed\u00e1n\u00edm kontroly opera\u010dn\u00edmu syst\u00e9mu, co\u017e m\u016f\u017ee b\u00fdt vyu\u017eito k obch\u00e1zen\u00ed mechanismu ov\u011b\u0159en\u00e9ho spu\u0161t\u011bn\u00ed UEFI Secure Boot a vlo\u017een\u00ed \u0161kodliv\u00fdch komponent\u016f b\u011bhem zav\u00e1d\u011bn\u00ed.<\/p>\n

Probl\u00e9m je zp\u016fsoben p\u0159ete\u010den\u00edm z\u00e1sobn\u00edku v zpracov\u00e1v\u00e1n\u00ed ICMP zpr\u00e1v v ovlada\u010di UefiPxeBcDxe, kter\u00fd se pou\u017e\u00edv\u00e1 pro PXE spu\u0161t\u011bn\u00ed a p\u0159ij\u00edm\u00e1 ICMP pakety b\u011bhem s\u00ed\u0165ov\u00e9ho spu\u0161t\u011bn\u00ed k zaznamen\u00e1n\u00ed s\u00ed\u0165ov\u00fdch chyb. P\u0159ete\u010den\u00ed nast\u00e1v\u00e1 d\u00edky um\u00edst\u011bn\u00ed p\u0159ijat\u00fdch chybov\u00fdch zpr\u00e1v do pevn\u00e9ho z\u00e1sobn\u00edku o velikosti 504 bajt\u016f bez kontroly skute\u010dn\u00e9 velikosti p\u0159ijat\u00fdch dat. P\u0159i odesl\u00e1n\u00ed v\u00edce ne\u017e 504 bajt\u016f v ICMP paketu se nadbyte\u010dn\u00e1 \u010d\u00e1st zap\u00ed\u0161e t\u011bsn\u011b za hranice z\u00e1sobn\u00edku a p\u0159ekr\u00fdv\u00e1 n\u00e1sleduj\u00edc\u00ed struktury. <\/p>\n

\u00datok m\u016f\u017ee b\u00fdt proveden z glob\u00e1ln\u00ed s\u00edt\u011b \u2014 sta\u010d\u00ed zn\u00e1t IP adresu ob\u011bti a um\u011bt ur\u010dit okam\u017eik PXE zav\u00e1d\u011bn\u00ed. Znalost konkr\u00e9tn\u00edho firmwaru, kter\u00fd se pou\u017e\u00edv\u00e1 na serveru<\/a> ob\u011bti, m\u016f\u017ee \u00fato\u010dn\u00edk p\u0159ipravit exploit s ohledem na um\u00edst\u011bn\u00ed struktur v pam\u011bti konkr\u00e9tn\u00ed verze firmwaru a zneu\u017e\u00edt zranitelnost k prov\u00e1d\u011bn\u00ed k\u00f3du na \u00farovni DXE (Driver Execution Environment), kter\u00fd b\u011b\u017e\u00ed v nulov\u00e9m ochrann\u00e9m kruhu. <\/p>\n

Projekt EDK II byl spu\u0161t\u011bn v roce 2004 firmou Intel a pou\u017e\u00edvaj\u00ed ho v\u0161ichni v\u00fdznamn\u00ed v\u00fdrobci firmwaru pro serverov\u00e9 syst\u00e9my, datacentra a cloudov\u00e9 poskytovatele. Krom\u011b jin\u00e9ho se pou\u017e\u00edv\u00e1 v firmwarech AMI, Insyde a Phoenix. Zranitelnosti se tak\u00e9 vyskytuj\u00ed ve firmwarech postaven\u00fdch na platform\u011b Mu od spole\u010dnosti Microsoft, co\u017e je fork EDK II.<\/p>\n

Probl\u00e9m byl identifikov\u00e1n z\u00e1stupci spole\u010dnost\u00ed Anthropic a Google a bylo napl\u00e1nov\u00e1no jeho koordinovan\u00e9 ve\u0159ejn\u00e9 zve\u0159ejn\u011bn\u00ed na leden 2027. Ale informace musela b\u00fdt zve\u0159ejn\u011bna d\u0159\u00edve, proto\u017ee in\u017een\u00fdr z firmy AMI n\u00e1hodn\u011b poru\u0161il embargo a publikoval ve\u0159ejn\u00fd pull-request s opravou, na jej\u00edm\u017e z\u00e1klad\u011b bylo mo\u017en\u00e9 pochopit podstatu zranitelnosti.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 PXE \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 IPv4 \u0438\u043b\u0438 IPv6. \u0410\u0442\u0430\u043a\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184024","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vzd\u00e1len\u00e1 zranitelnost ve serverov\u00fdch UEFI firmwarech, zneu\u017e\u00edvan\u00e1 prost\u0159ednictv\u00edm zasl\u00e1n\u00ed ICMP paketu | ProHoster","description":"Ve TianoCore EDK II (EFI Development Kit II), otev\u0159en\u00e9 referen\u010dn\u00ed implementaci UEFI pou\u017e\u00edvan\u00e9 ve v\u011bt\u0161in\u011b serverov\u00fdch z\u00e1kladn\u00edch desek, byla odstran\u011bna kritick\u00e1 zranitelnost (CVE-2026-97631).","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 ICMP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631).","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-28T21:40:36+00:00","article:modified_time":"2026-10-28T21:40:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/184024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=184024"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/184024\/revisions"}],"predecessor-version":[{"id":184025,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/184024\/revisions\/184025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=184024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=184024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=184024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}