{"id":36029,"date":"2019-10-31T22:09:14","date_gmt":"2019-10-31T19:09:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk\/"},"modified":"2019-10-31T22:09:14","modified_gmt":"2019-10-31T19:09:14","slug":"uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","title":{"rendered":"Vulnerabilidad del bloqueador de pantalla en Astra Linux Special Edition (Smolensk)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En este art\u00edculo, exploraremos una vulnerabilidad muy interesante en el sistema operativo \u00abnacional\u00bb Astra Linux, as\u00ed que, empecemos...<\/p>\n

\"Vulnerabilidad<\/a><\/noindex>
\nAstra Linux es un sistema operativo de prop\u00f3sito especial basado en el n\u00facleo de Linux, dise\u00f1ado para la protecci\u00f3n integral de la informaci\u00f3n y la construcci\u00f3n de sistemas automatizados seguros.<\/p>\n

El fabricante desarrolla versiones b\u00e1sicas de Astra Linux: Common Edition (edici\u00f3n de prop\u00f3sito general) y su modificaci\u00f3n Special Edition (edici\u00f3n de prop\u00f3sito especial):<\/p>\n

    \n
  1. la edici\u00f3n de prop\u00f3sito general \u2014 Common Edition \u2014 est\u00e1 destinada a peque\u00f1as y medianas empresas, instituciones educativas;<\/li>\n
  2. la edici\u00f3n de prop\u00f3sito especial \u2014 Special Edition \u2014 est\u00e1 destinada a sistemas automatizados en configuraciones seguras, que procesan informaci\u00f3n con un grado de secreto \u00abtop secret\u00bb incluido.<\/li>\n<\/ol>\n

    \nInicialmente, la vulnerabilidad en el bloqueador de pantalla fue descubierta en el sistema operativo Astra Linux Common Edition v2.12, manifest\u00e1ndose en el momento en que la computadora est\u00e1 bloqueada y, si en esta etapa se realiza un cambio en la resoluci\u00f3n de pantalla. En particular, en entornos virtuales (VMWare, Oracle Virtualbox), se produce una visualizaci\u00f3n completa del contenido del escritorio sin pasar por la autorizaci\u00f3n. <\/p>\n

    Esta vulnerabilidad tambi\u00e9n fue explotada con \u00e9xito en Astra Linux Special Edition v1.5. Es posible que exista una forma de obtener informaci\u00f3n desde m\u00e1quinas f\u00edsicas, utilizando varios monitores con diferentes resoluciones.<\/p>\n

    A continuaci\u00f3n, se presenta un video con una demostraci\u00f3n en Astra Linux Special Edition v1.5 (se bloque\u00f3 la estaci\u00f3n, se cambi\u00f3 la extensi\u00f3n de la ventana de la estaci\u00f3n):<\/p>\n

    \"Vulnerabilidad
    \n
    \nCaptura de pantalla del video (fragmento de datos en el escritorio):<\/p>\n

    \"Vulnerabilidad
    \n
    \nEn resumen, se puede concluir que la explotaci\u00f3n de esta brecha permitir\u00e1 acceder a documentos (incluyendo aquellos de acceso restringido) abiertos en el escritorio de una estaci\u00f3n bloqueada con Astra Linux, lo que provocar\u00e1 la fuga de este tipo de informaci\u00f3n.
    \n
    Fuente:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026 Astra Linux \u2014 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Astra Linux \u2014 Common Edition (\u043e\u0431\u0449\u0435\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f) \u0438 \u0435\u0451 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f Special Edition […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36029","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidad del bloqueador de pantalla en Astra Linux Special Edition (Smolensk) | ProHoster","description":"En este art\u00edculo, exploraremos una vulnerabilidad muy interesante en el sistema operativo \u00abnacional\u00bb Astra Linux, as\u00ed que, empecemos...","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u044d\u043a\u0440\u0430\u043d\u0430 \u0432 Astra Linux Special Edition (\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a) | ProHoster","og:description":"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:14+00:00","article:modified_time":"2019-10-31T19:09:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36029","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:43:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:52:24","updated":"2026-01-22 01:43:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/36029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=36029"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/36029\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=36029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=36029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=36029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}