{"id":117002,"date":"2024-07-06T21:43:04","date_gmt":"2024-07-06T19:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan"},"modified":"2024-07-06T21:43:04","modified_gmt":"2024-07-06T19:43:04","slug":"v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","title":{"rendered":"Darkwebis on ilmunud teavet, et GRUB on kompromiteeritud","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Darkwebis <\/p>\n

Eksploit 0day-haavatavuse jaoks on juba m\u00fc\u00fcgil vastavatel foorumitel.<\/p>\n

21. juunil ilmus \u00fchel foorumil teave nullp\u00e4eva haavatavuse eksploidi m\u00fc\u00fcgist Linuxi GRUB-i laadimisprogrammi jaoks, mis v\u00f5imaldab kohalikku privileegide t\u00f5stmist (LPE).<\/p>\n

Dark Web Intelligence'i andmetel v\u00e4idab kurjategija, et on leidnud haavatavuse GRUB-is, mis v\u00f5imaldab \u00fcletada autentimise mehhanisme ja saada root-\u00f5igused s\u00fcsteemis.<\/p>\n

Selle kohaselt teatas tumefoorumi liige nimega \u00abCas\u00bb, et haavatavus m\u00f5jutab GRUB-i \u2014 kriitilise komponendi enamikes Linuxi s\u00fcsteemides, mis haldab k\u00e4ivitamisprotsessi, v\u00f5imaldades r\u00fcndajatel paigaldada varjatud ja p\u00fcsivat pahavara, mille tuvastamine ja eemaldamine v\u00f5ib olla \u00fcsna keeruline. Eksploit maksab 90 tuhat dollarit.<\/p>\n

Tasub m\u00e4rkida, et GRUB on minevikus olnud r\u00fcnnakute sihtm\u00e4rgiks. 2015. aastal avastati haavatavus CVE-2015-8370, mis v\u00f5imaldas autentimise \u00fcletamist, vajutades backspace-nuppu 28 korda kasutajanime sisestamise etapis GRUB-is. See haavatavus m\u00f5jutas GRUB-i versioone 1.98 kuni 2.02 ja seda kasutati laialdaselt enne paranduse v\u00e4ljaandmist. 2020. aastal avastati teine haavatavus - CVE-2020-10713, tuntud ka kui BootHole, mis lubas pahavara installimist k\u00e4ivitamisprotsessi k\u00e4igus.<\/p>\n

Peamised Linuxi jaotused, nagu Debian, RedHat ja Ubuntu, andsid kiiresti v\u00e4lja soovitusi ja parandusi eelnevate GRUB-i haavatavuste jaoks ning t\u00f5en\u00e4oliselt k\u00e4ituvad nad sarnaselt ka seekord, kuid probleem teeb olukorra keerulisemaks, kuna haavatavuse avastasid kurjategijad, mitte eetilised h\u00e4kkerid. See t\u00e4hendab, et selle avastamine ja parandamine turvauuringute k\u00e4igus v\u00f5ib oluliselt viibida.<\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0434\u0430\u0451\u0442\u0441\u044f \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445. 21 \u0438\u044e\u043d\u044f \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0444\u043e\u0440\u0443\u043c\u043e\u0432 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 GRUB-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE). \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Dark Web Intelligence, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GRUB, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":117003,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117002","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Darknetis ilmus teave, et GRUB on kompromiteeritud | ProHoster","description":"0day-haavatuse eksploit m\u00fc\u00fcakse juba vastavates foorumites. 21. juunil ilmus \u00fches foorumis teave Linuxi GRUB-laadurile suunatud nullp\u00e4eva haavatavuse eksploiti m\u00fc\u00fcmise kohta, mis v\u00f5imaldab kohalikke \u00f5iguste suurendamise (LPE) r\u00fcnnakuid. Dark Web Intelligence'i andmetel v\u00e4idab r\u00fcndaja, et on leidnud haavatavuse GRUB-is, mis v\u00f5imaldab petta autentimismehhanisme ja saada s\u00fcsteemis root-\u00f5igused. Vastavalt","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f, \u0447\u0442\u043e GRUB \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d | ProHoster","og:description":"\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0434\u0430\u0451\u0442\u0441\u044f \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445. 21 \u0438\u044e\u043d\u044f \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0444\u043e\u0440\u0443\u043c\u043e\u0432 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 GRUB-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE). \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Dark Web Intelligence, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GRUB, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-06T19:43:04+00:00","article:modified_time":"2024-07-06T19:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117002","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:39:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:39:19","updated":"2026-01-23 03:39:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=117002"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117002\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/117003"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=117002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=117002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=117002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}