{"id":41415,"date":"2020-02-10T20:42:08","date_gmt":"2020-02-10T17:42:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth"},"modified":"2020-02-10T20:42:08","modified_gmt":"2020-02-10T17:42:08","slug":"uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","title":{"rendered":"Zranitelnost v Androidu, kter\u00e1 umo\u017e\u0148uje vzd\u00e1len\u00e9 proveden\u00ed k\u00f3du p\u0159i zapnut\u00e9m Bluetooth","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V \u00fanoru byl vy\u0159e\u0161en<\/a><\/noindex> byla na platform\u00e1ch Android odstran\u011bna kritick\u00e1 zranitelnost<\/a><\/noindex> (CVE-2020-0022) chyba v Bluetooth stacku, kter\u00e1 umo\u017e\u0148uje vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed k\u00f3du zasl\u00e1n\u00edm speci\u00e1ln\u011b upraven\u00e9ho Bluetooth paketu. Probl\u00e9m m\u016f\u017ee b\u00fdt nen\u00e1padn\u011b zneu\u017eit \u00fato\u010dn\u00edkem nach\u00e1zej\u00edc\u00edm se v dosahu Bluetooth. Nen\u00ed vylou\u010deno vyu\u017eit\u00ed zranitelnosti k vytv\u00e1\u0159en\u00ed \u010derv\u016f, kte\u0159\u00ed mohou infikovat sousedn\u00ed za\u0159\u00edzen\u00ed. <\/p>\n

Pro \u00fatok sta\u010d\u00ed zn\u00e1t MAC adresu za\u0159\u00edzen\u00ed ob\u011bti (p\u0159edchoz\u00ed p\u00e1rov\u00e1n\u00ed nen\u00ed nutn\u00e9, ale Bluetooth na za\u0159\u00edzen\u00ed mus\u00ed b\u00fdt zapnut\u00e9). Na n\u011bkter\u00fdch za\u0159\u00edzen\u00edch m\u016f\u017ee b\u00fdt MAC adresa Bluetooth vypo\u010d\u00edt\u00e1na na z\u00e1klad\u011b MAC adresy Wi-Fi. V p\u0159\u00edpad\u011b \u00fasp\u011b\u0161n\u00e9ho zneu\u017eit\u00ed zranitelnosti m\u016f\u017ee \u00fato\u010dn\u00edk spustit sv\u016fj k\u00f3d s pr\u00e1vy na pozad\u00ed, kter\u00e9 koordinuj\u00ed pr\u00e1ci Bluetooth v Androidu.
\nProbl\u00e9m je specifick\u00fd pro pou\u017eit\u00fd Bluetooth stack v Androidu Fluoride<\/a><\/noindex> (zalo\u017een na k\u00f3du projektu BlueDroid od spole\u010dnosti Broadcom) a neprojevuje se v pou\u017e\u00edv\u00e1n\u00e9m Linux stacku BlueZ.<\/p>\n

V\u00fdzkumn\u00edci, kte\u0159\u00ed probl\u00e9m odhalili, dok\u00e1zali p\u0159ipravit funk\u010dn\u00ed prototyp exploit, ale podrobnosti zneu\u017eit\u00ed budou odhaleny<\/a><\/noindex> pozd\u011bji, jakmile bude oprava k dispozici pro \u0161ir\u0161\u00ed okruh u\u017eivatel\u016f. Je zn\u00e1mo, \u017ee zranitelnost existuje v k\u00f3du pro rekonstrukci paket\u016f a byl zp\u016fsoben<\/a><\/noindex> nespr\u00e1vn\u00fdm v\u00fdpo\u010dtem velikosti paket\u016f L2CAP (Logical link control and adaptation protocol), pokud p\u0159ed\u00e1van\u00e1 data p\u0159esahuj\u00ed o\u010dek\u00e1vanou velikost.<\/p>\n

V Androidu 8 a 9 m\u016f\u017ee probl\u00e9m v\u00e9st k vykon\u00e1n\u00ed k\u00f3du, ale v Androidu 10 je omezen na p\u00e1d pozad\u00ed procesu Bluetooth. Star\u0161\u00ed verze Androidu jsou potenci\u00e1ln\u011b n\u00e1chyln\u00e9 k probl\u00e9mu, ale mo\u017enost zneu\u017eit\u00ed zranitelnosti nebyla testov\u00e1na. U\u017eivatel\u016fm se doporu\u010duje co nejd\u0159\u00edve nainstalovat aktualizaci firmwaru, a pokud to nen\u00ed mo\u017en\u00e9 \u2013 v\u00fdchoz\u00ed nastaven\u00ed Bluetooth vypnout, zak\u00e1zat zji\u0161t\u011bn\u00ed za\u0159\u00edzen\u00ed a aktivovat Bluetooth na ve\u0159ejn\u00fdch m\u00edstech pouze v nezbytn\u00e9m p\u0159\u00edpad\u011b (nap\u0159\u00edklad je mo\u017en\u00e9 nahradit bezdr\u00e1tov\u00e1 sluch\u00e1tka dr\u00e1tov\u00fdmi). <\/p>\n

Krom\u011b uveden\u00e9ho probl\u00e9mu bylo \u00fanorov\u00e9m<\/a><\/noindex> v sad\u011b oprav probl\u00e9m\u016f s bezpe\u010dnost\u00ed pro Android odstran\u011bno 26 zranitelnost\u00ed, z nich\u017e jedna (CVE-2020-0023) byla klasifikov\u00e1na jako kritick\u00e1. Druh\u00e1 zranitelnost byla tak\u00e9 ovliv\u0148uje<\/a><\/noindex> Bluetoothov\u00e9 z\u00e1sobn\u00edky a selh\u00e1n\u00ed v zpracov\u00e1n\u00ed opr\u00e1vn\u011bn\u00ed BLUETOOTH_PRIVILEGED v setPhonebookAccessPermission. Co se t\u00fd\u010de zranitelnost\u00ed ozna\u010den\u00fdch jako kritick\u00e9, bylo opraveno 7 probl\u00e9m\u016f ve frameworkech a aplikac\u00edch, 4 v syst\u00e9mov\u00fdch komponentech, 2 v j\u00e1d\u0159e a 10 v otev\u0159en\u00fdch a propriet\u00e1rn\u00edch komponentech pro \u010dipy Qualcomm.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0022) \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e Bluetooth-\u043f\u0430\u043a\u0435\u0442\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 Bluetooth. \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0447\u0435\u0440\u0432\u0435\u0439, \u043f\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u043f\u043e\u0440\u0430\u0436\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c MAC-\u0430\u0434\u0440\u0435\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0436\u0435\u0440\u0442\u0432\u044b (\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41415","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Zranitelnost v Androidu, kter\u00e1 umo\u017e\u0148uje vzd\u00e1len\u00e9 proveden\u00ed k\u00f3du p\u0159i aktivn\u00edm Bluetooth | ProHoster","description":"\u00danorov\u00e1 aktualizace platformy Android odstranila kritickou zranitelnost","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c Bluetooth | ProHoster","og:description":"\u0412 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f","og:url":"https:\/\/prohoster.info\/cs\/blog\/uyazvimost-v-android-pozvolyayushhaya-udalyonno-vypolnit-kod-pri-vklyuchyonnom-bluetooth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-10T17:42:08+00:00","article:modified_time":"2020-02-10T17:42:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41415","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:26:29","updated":"2022-09-29 21:00:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/41415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=41415"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/41415\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=41415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=41415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=41415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}