{"id":39040,"date":"2019-10-31T22:27:31","date_gmt":"2019-10-31T19:27:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek\/"},"modified":"2019-10-31T22:27:31","modified_gmt":"2019-10-31T19:27:31","slug":"udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","title":{"rendered":"Vzd\u00e1len\u011b zneu\u017eiteln\u00e1 zranitelnost v Linuxov\u00e9m ovlada\u010di pro \u010dipy Realtek","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V j\u00e1dru Linux obsa\u017een\u00e9m ovlada\u010di rtlwifi<\/a><\/noindex> pro bezdr\u00e1tov\u00e9 adapt\u00e9ry s \u010dipy Realtek byla odhalena<\/a><\/noindex> zranitelnost (CVE-2019-17666<\/a><\/noindex>), kter\u00fd m\u016f\u017ee b\u00fdt potenci\u00e1ln\u011b zneu\u017eit k vykon\u00e1n\u00ed k\u00f3du v kontextu j\u00e1dra p\u0159i odes\u00edl\u00e1n\u00ed speci\u00e1ln\u011b form\u00e1tovan\u00fdch r\u00e1mc\u016f.<\/p>\n

Zranitelnost je zp\u016fsobena p\u0159ekro\u010den\u00edm vyrovn\u00e1vac\u00ed pam\u011bti v k\u00f3du implementuj\u00edc\u00edm re\u017eim P2P (Wifi-Direct). P\u0159i anal\u00fdze r\u00e1mc\u016f NoA<\/a><\/noindex> (Notice of Absence) chyb\u00ed kontrola velikosti jednoho z hodnot, co\u017e umo\u017e\u0148uje zapisovat data za hranici vyrovn\u00e1vac\u00ed pam\u011bti a p\u0159epsat informace ve strukturovan\u00fdch datech j\u00e1dra n\u00e1sleduj\u00edc\u00edch za vyrovn\u00e1vac\u00ed pam\u011bt\u00ed.<\/p>\n

\u00datok m\u016f\u017ee b\u00fdt proveden odesl\u00e1n\u00edm speci\u00e1ln\u011b form\u00e1tovan\u00fdch r\u00e1mc\u016f na syst\u00e9m s aktivn\u00edm bezdr\u00e1tov\u00fdm adapt\u00e9rem zalo\u017een\u00fdm na \u010dipu Realtek s podporou technologie Wi-Fi Direct<\/a><\/noindex>, kter\u00e1 umo\u017e\u0148uje dv\u011bma bezdr\u00e1tov\u00fdm adapt\u00e9r\u016fm nav\u00e1zat spojen\u00ed p\u0159\u00edmo bez p\u0159\u00edstupov\u00e9ho bodu. Pro zneu\u017eit\u00ed t\u00e9to chyby nen\u00ed nutn\u00e9 p\u0159ipojen\u00ed k bezdr\u00e1tov\u00e9 s\u00edti \u00fato\u010dn\u00edka, ani \u017e\u00e1dn\u00e9 akce ze strany u\u017eivatele, sta\u010d\u00ed, aby \u00fato\u010dn\u00edk byl v dosahu bezdr\u00e1tov\u00e9ho sign\u00e1lu. <\/p>\n

Funguj\u00edc\u00ed prototyp exploit\u016f je zat\u00edm omezen na vzd\u00e1len\u00e9 vyvol\u00e1n\u00ed p\u00e1du j\u00e1dra, ale potenci\u00e1ln\u011b zranitelnost nevylu\u010duje mo\u017enost vykon\u00e1n\u00ed k\u00f3du (p\u0159edpoklad je zat\u00edm pouze teoretick\u00fd, jeliko\u017e prototyp exploitu pro vykon\u00e1n\u00ed k\u00f3du zat\u00edm neexistuje, ale v\u00fdzkumn\u00edk, kter\u00fd probl\u00e9m odhalil, ji\u017e pracuje<\/a><\/noindex> na jeho vytvo\u0159en\u00ed pracuje).<\/p>\n

Probl\u00e9m se projevuje od j\u00e1dra 3.12<\/a><\/noindex> (podle jin\u00fdch \u00fadaj\u016f se probl\u00e9m projevuje od j\u00e1dra 3.10<\/a><\/noindex>), vydan\u00e9ho v roce 2013. Oprava zat\u00edm dostupn\u00e1 pouze ve form\u011b patche<\/a><\/noindex>. V distribuc\u00edch z\u016fst\u00e1v\u00e1 probl\u00e9m neopraven\u00fd.
\nSledov\u00e1n\u00ed odstra\u0148ov\u00e1n\u00ed zranitelnost\u00ed v distribuc\u00edch lze prov\u00e1d\u011bt na t\u011bchto str\u00e1nk\u00e1ch: Debian<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex>, RHEL<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, Fedora<\/a><\/noindex>. Pravd\u011bpodobn\u011b se zranitelnost t\u00fdk\u00e1 tak\u00e9 ovliv\u0148uje<\/a><\/noindex> a platformy Android.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 rtlwifi \u0434\u043b\u044f \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u0432 \u043d\u0430 \u0447\u0438\u043f\u0430\u0445 Realtek \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-17666), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u0434\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0435 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0435\u0436\u0438\u043c\u0430 P2P (Wifi-Direct). \u041f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043a\u0430\u0434\u0440\u043e\u0432 NoA (Notice of Absence) \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39040","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vzd\u00e1len\u011b zneu\u017eiteln\u00e1 zranitelnost v Linuxov\u00e9m ovlada\u010di pro \u010dipy Realtek | ProHoster","description":"V j\u00e1dru Linux obsa\u017een\u00e9m ovlada\u010di rtlwifi pro bezdr\u00e1tov\u00e9 adapt\u00e9ry s \u010dipy.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux-\u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Realtek | ProHoster","og:description":"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 rtlwifi \u0434\u043b\u044f \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u0432 \u043d\u0430 \u0447\u0438\u043f\u0430\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:31+00:00","article:modified_time":"2019-10-31T19:27:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39040","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:30:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:30:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/39040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=39040"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/39040\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=39040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=39040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=39040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}