On avanenud teave haavatavuse (CVE-2023-4001) kohta GRUB2 laadija pat\u0161ides, mille on ette valmistanud Red Hat. See haavatavus v\u00f5imaldab mitmetel UEFI s\u00fcsteemidel k\u00f5rvaldada GRUB2-s seatud paroolikontrolli, mis piirab juurdep\u00e4\u00e4su laadimismen\u00fc\u00fcsse v\u00f5i laadija k\u00e4surida. Haavatavuse p\u00f5hjus on muudatus, mille Red Hat on teinud GRUB2 paketis, mida tarnitakse RHEL-i ja Fedora Linuxiga. Probleem ei ilmne GRUB2 p\u00f5hiprojektis ja m\u00f5jutab ainult jaotusi, mis on rakendanud Red Hat'i t\u00e4iendavaid pat\u0161e. <\/p>\n
Probleem on tingitud UUID-i kasutamise loogikavigast seadme laadija poolt konfigurerimisfaili otsimisel (n\u00e4iteks '\/boot\/efi\/EFI\/fedora\/grub.cfg'), mis sisaldab parooli r\u00e4si. Autentimise v\u00e4ltimiseks saab f\u00fc\u00fcsilise ligip\u00e4\u00e4suga kasutaja \u00fchendada v\u00e4lism\u00e4lu, n\u00e4iteks USB Flash, m\u00e4\u00e4rates selle UUID, mis on sama, mis r\u00fcnnatava s\u00fcsteemi boot-partitsiooni identifikaator. <\/p>\n
Paljud UEFI-s\u00fcsteemid k\u00e4sitlevad esmalt v\u00e4lism\u00e4lusid ja loetlevad need avastatud seadmete nimekirjas enne paljude sisem\u00e4lude, seega on r\u00fcndaja ettevalmistatud \/boot-partitsioon t\u00f6\u00f6tlemisel suurem prioriteet ja vastavalt sellele p\u00fc\u00fcab GRUB2 sellelt partitsioonilt laadida konfigurerimisfaili. Otsimise protsessis GRUB2-s k\u00e4su 'search' abil m\u00e4\u00e4ratakse ainult esimese UUID-i vaste, p\u00e4rast mida otsing peatub. Kui teatud partitsioonilt primaarsed konfigurerimisfailid ei leita, kuvab GRUB2 k\u00e4surea, mis v\u00f5imaldab t\u00e4ielikku kontrolli edasise laadimisprotsessi \u00fcle. <\/p>\n
Loomuliku madala privileegiga kasutaja v\u00f5ib partitsiooni UUID-d m\u00e4\u00e4rata utiliidiga 'lsblk', kuid v\u00e4liskasutaja, kellel ei ole s\u00fcsteemile ligip\u00e4\u00e4su, kuid kes suudab j\u00e4lgida laadimisprotsessi, v\u00f5ib m\u00f5nes jaotises m\u00e4\u00e4rata UUID-d laadimise ajal kuvatavate diagnostiliste teadete p\u00f5hjal. Haavatavus on Red Hat'i poolt lahendatud, lisades k\u00e4sule 'search' uue argumendi, mis v\u00f5imaldab piirata UUID skaneerimist ainult nende plokkseadmete osas, mida kasutatakse laadimisprogrammi k\u00e4ivitamiseks (st \/boot-partitsioon peab olema vaid samal kettal, kus asub EFI s\u00fcsteemipartitsioon). \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-4001) \u0432 \u043f\u0430\u0442\u0447\u0430\u0445 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443 GRUB2, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Red Hat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 UEFI \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432 GRUB2 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u043c\u0443 \u043c\u0435\u043d\u044e \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Red Hat \u0432 \u043f\u0430\u043a\u0435\u0442 \u0441 GRUB2, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u0432 RHEL \u0438 Fedora Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112924","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavus Red Hat'i GRUB2 k\u00e4ivituslaadija plaastrites, mis v\u00f5imaldab paroolikontrollist m\u00f6\u00f6da minna | ProHoster","description":"Teave haavatavusest (CVE-2023-4001) GRUB2 k\u00e4ivituslaadija plaastrites, mille on ette valmistanud Red Hat.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-patchah-red-hat-k-zagruzchiku-grub2-pozvolyayushhaya-obojti-proverku-parolya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u0442\u0447\u0430\u0445 Red Hat \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0430\u0440\u043e\u043b\u044f | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-4001) \u0432 \u043f\u0430\u0442\u0447\u0430\u0445 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443 GRUB2, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Red Hat.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-patchah-red-hat-k-zagruzchiku-grub2-pozvolyayushhaya-obojti-proverku-parolya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-15T15:28:03+00:00","article:modified_time":"2024-01-15T15:28:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=112924"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112924\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=112924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=112924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=112924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"