{"id":37225,"date":"2019-10-31T22:16:26","date_gmt":"2019-10-31T19:16:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth\/"},"modified":"2019-10-31T22:16:26","modified_gmt":"2019-10-31T19:16:26","slug":"ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","title":{"rendered":"KNOB r\u00fcnnak v\u00f5imaldab Bluetoothi kr\u00fcpteeritud liiklust pealt kuulata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ava<\/a><\/noindex> teave<\/a><\/noindex> r\u00fcnnaku kohta KNOB<\/a><\/noindex> (Key Negotiation Of Bluetooth), mis v\u00f5imaldab korraldada teabe pealtkuulamist ja asendamist kr\u00fcpteeritud Bluetoothi liikluses. Omades v\u00f5imalust blokeerida otse pakettide edastamine Bluetooth-seadmete \u00fchendamise protsessi k\u00e4igus, v\u00f5ib r\u00fcndaja saavutada seansi jaoks v\u00f5tmeid, mis sisaldavad vaid 1 bait entropiat, v\u00f5imaldades kasutada otsekatsetamise meetodit (brute-force) kr\u00fcpteerimisv\u00f5tme m\u00e4\u00e4ramiseks. <\/p>\n

Probleem tuleneb ebat\u00e4iuslikest kohtadest (CVE-2019-9506) Bluetooth BR\/EDR Core 5.1 ja varasemate versioonide spetsifikatsioonis, mis lubavad kasutada liiga l\u00fchikesi kr\u00fcpteerimisv\u00f5tmeid ja ei takista r\u00fcndaja sekkumist \u00fchenduse loomise etapis sarnaste ebaturvaliste v\u00f5tmete tagasiv\u00f5tmiseks (pakettide asendamine v\u00f5ib toimuda mitteautentseeritud r\u00fcndaja poolt). R\u00fcnnak v\u00f5ib toimuda seadmete \u00fchendamise hetkel (juba loodud seansse ei saa r\u00fcnnata) ja on t\u00f5hus ainult BR\/EDR (Bluetooth Basic Rate\/Enhanced Data Rate) re\u017eiimides, kui m\u00f5lemad seadmed on haavatavad. Kui r\u00fcndaja suudab v\u00f5tme edukalt m\u00e4\u00e4rata, saab ta edastatavaid andmeid dekr\u00fcpteerida ja m\u00e4rkamatult ohvri jaoks fikseerida suvalise kr\u00fcpteeritud liikluse.<\/p>\n

Kahe Bluetooth-kontrolleri A ja B vahelise \u00fchenduse loomisel v\u00f5ib kontroller A p\u00e4rast kanali v\u00f5tme (link key) autentimist pakkuda kasutada kr\u00fcpteerimise jaoks (encryption key) 16 baitist entropiat, samas kui kontroller B v\u00f5ib selle v\u00e4\u00e4rtusega n\u00f5ustuda v\u00f5i pakkuda v\u00e4iksemat v\u00e4\u00e4rtust, kui tal pole v\u00f5imalik kavandatud suurusega v\u00f5tit luua. Vastuseks v\u00f5ib kontroller A vastushanke aktsepteerida ja aktiveerida kr\u00fcpteeritud kommunikatsioonikanali. Selle protsessi k\u00e4igus ei rakendata kr\u00fcpteerimist, seega on r\u00fcndajal v\u00f5imalus sekkuda andmevahetusse kontrolleride vahel ja asendada pakett ettepaneku suuruse m\u00e4\u00e4ramiseks. Kuna lubatud v\u00f5tme suurus varieerub 1 kuni 16 baitini, v\u00f5tab teine kontroller selle v\u00e4\u00e4rtuse vastu ja saadab oma kinnituse samasuguse suuruse m\u00e4\u00e4ramisega.<\/p>\n

\"KNOB<\/a><\/noindex><\/center><\/p>\n

Laboratoorsetes tingimustes haavatavuse taasesitamiseks (r\u00e4nne simuleeriti \u00fchel seadmel) on ette n\u00e4htud
\nt\u00f6\u00f6riistade protot\u00fc\u00fcp<\/a><\/noindex> r\u00fcnnaku l\u00e4biviimiseks.
\nReaalse r\u00fcnnaku jaoks peab r\u00fcndaja olema ohvriseadmeste vastuv\u00f5tuv\u00f6\u00f6ndis ja suutma ajutiselt blokeerida signaali igalt seadmest, mida soovitatakse saavutada signaali manipuleerimise v\u00f5i reaktiivse summutamise kaudu. <\/p>\n

Bluetoothi spetsifikatsiooni arendamise eest vastutav organisatsioon Bluetooth SIG, avalikustas<\/a><\/noindex> korrektuuri nr 11838, mille kohaselt on tootjatele ette n\u00e4htud meetmed haavatavuse blokeerimiseks (\u0161ifreerimise minimaalne v\u00f5tme suurus on t\u00f5stetud 1-lt 7-le). Probleem ilmneb<\/a><\/noindex> on k\u00f5igi<\/a><\/noindex> vastava Bluetoothi standardiga \u00fchilduvate virnade ja Bluetoothi kiibistikude, sealhulgas toodete Intel<\/a><\/noindex>, Broadcom, Lenovolt<\/a><\/noindex>, Apple<\/a><\/noindex>, Microsoft<\/a><\/noindex>, Qualcomm, Linux, Android<\/a><\/noindex>, Blackberry<\/a><\/noindex> ja Cisco<\/a><\/noindex> (k\u00f5ik 14 testitud kiip olid haavatavad). Linuxi tuum Bluetoothi virnas on lisatud<\/a><\/noindex> parandus, mis v\u00f5imaldab muuta \u0161ifreerimise minimaalset v\u00f5tme suurust. <\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 KNOB (Key Negotiation Of Bluetooth), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c Bluetooth-\u0442\u0440\u0430\u0444\u0438\u043a\u0435. \u0418\u043c\u0435\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u0443\u044e \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u0430 \u043a\u043b\u044e\u0447\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 (brute-force) \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27914,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47KNOB-r\u00fcnnak, mis v\u00f5imaldab peatada Bluetoothi \u0161ifreeritud liiklust | ProHoster","description":"Ava","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 KNOB, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a Bluetooth | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:26+00:00","article:modified_time":"2019-10-31T19:16:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37225","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:49:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:31:24","updated":"2026-01-23 16:49:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=37225"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37225\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=37225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=37225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=37225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}