{"id":112094,"date":"2023-12-09T21:10:14","date_gmt":"2023-12-09T19:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish"},"modified":"2023-12-09T21:10:14","modified_gmt":"2023-12-09T19:10:14","slug":"uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","title":{"rendered":"S\u00e5rbarheden i Bluetooth-stakkene p\u00e5 Linux, macOS, Android og iOS, der muligg\u00f8r substitution af tastetryk.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Marc Newlin, der for syv \u00e5r siden opdagede MouseJack-s\u00e5rbarheden, har afsl\u00f8ret oplysninger om en lignende s\u00e5rbarhed (CVE-2023-45866), der p\u00e5virker Bluetooth-stakke p\u00e5 Android, Linux, macOS og iOS, og som muligg\u00f8r indspr\u00f8jtning af tastetryk ved at simulere aktivitet fra en indtastningsenhed tilsluttet via Bluetooth. Med adgang til tastaturets input kan en angriber udf\u00f8re handlinger som at k\u00f8re kommandoer p\u00e5 systemet, installere applikationer og omdirigere beskeder. <\/p>\n

S\u00e5rbarheden skyldes, at v\u00e6rts-HID (Human Interface Device) drivere for Bluetooth-enheder har en tilstand, der tillader en fjernperipheral enhed at oprette og etablere krypterede forbindelser uden godkendelse. Blandt andet kan tilsluttede enheder p\u00e5 denne m\u00e5de sende tastaturbeskeder, som HID-stakken vil behandle, hvilket muligg\u00f8r en angreb p\u00e5 fjernindspr\u00f8jtning af HID-beskeder, der gennemf\u00f8res uden brugerens involvering. Angrebet kan udf\u00f8res, mens angriberen befinder sig op til 100 meter fraof offeret. <\/p>\n

Mekanismen til parring af enheder uden godkendelse er defineret i Bluetooth-specifikationen og afh\u00e6ngig af indstillingerne for Bluetooth-stakken muligg\u00f8r dette tilslutning af enheden uden bekr\u00e6ftelse fra brugeren. P\u00e5 Linux, n\u00e5r man bruger Bluetooth-stakken BlueZ til skjult parring, skal Bluetooth-adapteren v\u00e6re i opdagelses- og tilslutningstilstand. P\u00e5 Android er det blot n\u00f8dvendigt at aktivere Bluetooth-support. P\u00e5 iOS og macOS skal Bluetooth v\u00e6re aktiveret, og en tr\u00e5dl\u00f8s tastatur skal v\u00e6re tilsluttet for at gennemf\u00f8re angrebet. <\/p>\n

Muligheden for indspr\u00f8jtning af input blev demonstreret i Ubuntu 18.04, 20.04, 22.04 og 23.10 med Bluetooth-stakken baseret p\u00e5 Bluez-pakken. ChromeOS er ikke s\u00e5rbart, da indstillingerne for Bluetooth-stakken ikke tillader forbindelser uden godkendelse. P\u00e5 Android p\u00e5virker s\u00e5rbarheden enheder med platformversioner fra 4.2.2 til 14. P\u00e5 macOS er s\u00e5rbarheden demonstreret p\u00e5 en MacBook Pro 2022 med Apple M2 CPU og macOS 13.3.3 samt en MacBook Air 2017 med Intel CPU og macOS 12.6.7. P\u00e5 iOS er s\u00e5rbarheden demonstreret p\u00e5 en iPhone SE med iOS 16.6. Aktivering af Lockdown-tilstand beskytter ikke mod angrebet p\u00e5 macOS og iOS. <\/p>\n

I Linux er s\u00e5rbarheden blevet udbedret i Bluez-kodebasen ved at s\u00e6tte indstillingen «ClassicBondedOnly» til «true», hvilket aktiverer en sikker tilstand, der kun tillader forbindelser efter parring. Tidligere var indstillingen sat til «false», hvilket, p\u00e5 bekostning af sikkerheden, l\u00f8ste kompatibilitetsproblemer med nogle inputenheder. <\/p>\n

I Bluetooth-stakken Fluoride, der anvendes i de nyeste Android-versioner, er s\u00e5rbarheden blevet rettet ved at kr\u00e6ve autentificering for alle krypterede forbindelser. Rettelser til Android er kun foretaget for versioner 11-14. For Pixel-enheder er s\u00e5rbarheden blevet rettet i december firmwareopdateringen. For Android-versioner fra 4.2.2 til 10 forbliver s\u00e5rbarheden uoprettet.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0432\u043e\u0434\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 Bluetooth. \u0418\u043c\u0435\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u043d\u043e\u043c\u0443 \u0432\u0432\u043e\u0434\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043a\u0430\u043a \u0437\u0430\u043f\u0443\u0441\u043a \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112094","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e5rbarhed i Bluetooth-stakke for Linux, macOS, Android og iOS, der tillader substitution af tastetryk | ProHoster","description":"Marc Newlin, der for syv \u00e5r siden identificerede MouseJack-s\u00e5rbarheden, har afsl\u00f8ret oplysninger om en lignende s\u00e5rbarhed (CVE-2023-45866), der p\u00e5virker Bluetooth-stakke i Android, Linux, macOS og iOS og muligg\u00f8r.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0430\u0445 Linux, macOS, Android \u0438 iOS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 | ProHoster","og:description":"\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-09T19:10:14+00:00","article:modified_time":"2023-12-09T19:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/112094","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=112094"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/112094\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=112094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=112094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=112094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}