{"id":112103,"date":"2023-12-10T09:10:17","date_gmt":"2023-12-10T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios"},"modified":"2023-12-10T09:10:17","modified_gmt":"2023-12-10T07:10:17","slug":"uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","title":{"rendered":"S\u00e5rbarhed i Bluetooth-stakke til Linux, macOS, Android og iOS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/p>\n

Marc Newlin, der opdagede s\u00e5rbarheden MouseJack<\/a> for syv \u00e5r siden, afsl\u00f8rede information om en lignende s\u00e5rbarhed (CVE-2023-45866)<\/a>, der p\u00e5virker Bluetooth-stakke i Android, Linux, macOS og iOS. Denne s\u00e5rbarhed muligg\u00f8r erstatning af tastetryk ved at simulere aktivitet fra en Bluetooth-forbundet indgangsenhed. Ved at f\u00e5 adgang til tastaturindgangen kan angriberen udf\u00f8re forskellige handlinger, s\u00e5som at k\u00f8re kommandoer i systemet, installere apps og omdirigere meddelelser.<\/p>\n

<\/noindex><\/noindex> <\/p>\n

S\u00e5rbarheden skyldes, at v\u00e6rtens HID (Human Interface Device) drivere til Bluetooth-enheder har en tilstand, der tillader en ekstern perif\u00e6r enhed at oprette og opretholde krypterede forbindelser uden godkendelse. S\u00e5danne tilsluttede enheder kan sende tastaturmeddelelser, og HID-stakken behandler dem, hvilket \u00e5bner mulighed for angreb p\u00e5 erstatning af HID-meddelelser, der udf\u00f8res uden brugerens inddragelse. Dette angreb kan udf\u00f8res p\u00e5 afstande op til 100 meter fra offeret.<\/p>\n

Mechanismen til parring af enheder uden godkendelse er defineret i Bluetooth-specifikationen og, afh\u00e6ngigt af indstillingerne for Bluetooth-stakken, tillader det tilslutning af enheden uden brugerbekr\u00e6ftelse. For eksempel i Linux, ved brug af Bluetooth-stakken BlueZ, skal Bluetooth-adapteren v\u00e6re i opdagelses- og tilslutningstilstand for skjult parring. I Android er det tilstr\u00e6kkeligt at aktivere Bluetooth-underst\u00f8ttelse. I iOS og macOS skal Bluetooth v\u00e6re t\u00e6ndt, og en tr\u00e5dl\u00f8s tastatur tilsluttet for at angrebet kan lykkes.<\/p>\n

Muligheden for at erstatte input blev demonstreret i Ubuntu 18.04, 20.04, 22.04 og 23.10 med Bluetooth-stakken baseret p\u00e5 BlueZ-pakken. ChromeOS er ikke s\u00e5rbar, da dens indstillinger for Bluetooth-stakken ikke tillader forbindelser uden godkendelse. I Android p\u00e5virker s\u00e5rbarheden enheder med platformversioner fra 4.2.2 til 14. I macOS blev s\u00e5rbarheden demonstreret p\u00e5 en MacBook Pro 2022 med Apple M2-processor og macOS 13.3.3, s\u00e5vel som p\u00e5 en MacBook Air 2017 med Intel-processor og macOS 12.6.7. I iOS blev s\u00e5rbarheden demonstreret p\u00e5 en iPhone SE med iOS 16.6. Aktivering af Lockdown-tilstand beskytter ikke mod angreb p\u00e5 macOS og iOS.<\/p>\n

<\/p>\n

I Linux er s\u00e5rbarheden blevet afhjulpet<\/a> I kodebasen for Bluez kan man aktivere indstillingen «ClassicBondedOnly» til «true», hvilket aktiverer en sikkerhedsindstilling, der kun tillader oprettelse af forbindelser efter parring. Tidligere var indstillingen sat til «false», hvilket, for at sikre kompatibilitet med visse inputenheder, s\u00e6nkede sikkerhedsniveauet.<\/p>\n

<\/noindex> <\/p>\n

I Bluetooth-stakken Fluoride, der anvendes i de nyeste versioner af Android, er s\u00e5rbarheden blevet rettet<\/a> ved at kr\u00e6ve autentificering for alle krypterede forbindelser. Rettelser til Android er kun blevet udgivet for brancherne 11-14. For Pixel-enheder blev s\u00e5rbarheden rettet i den december firmwareopdatering. For Android-udgivelser fra 4.2.2 til 10 er s\u00e5rbarheden stadig uopdaget.<\/p>\n

<\/noindex><\/p>\n

Kilde: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u043f\u0443\u0442\u0435\u043c \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0432\u043e\u0434\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e Bluetooth. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u043d\u043e\u043c\u0443 \u0432\u0432\u043e\u0434\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112103","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e5rbarhed i Bluetooth-stakkene p\u00e5 Linux, macOS, Android og iOS | ProHoster","description":"Marc Newlin, der opdagede MouseJack-s\u00e5rbarheden for syv \u00e5r siden, har afsl\u00f8ret information om","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0430\u0445 Linux, macOS, Android \u0438 iOS | ProHoster","og:description":"\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-10T07:10:17+00:00","article:modified_time":"2023-12-10T07:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/112103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=112103"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/112103\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=112103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=112103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=112103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}