{"id":83016,"date":"2020-05-27T19:41:58","date_gmt":"2020-05-27T17:41:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket"},"modified":"2020-05-27T19:41:58","modified_gmt":"2020-05-27T17:41:58","slug":"25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","title":{"rendered":"25 haavatavust RTOS Zephyris, sealhulgas neid, mis on \u00e4ra kasutatavad ICMP-paketi kaudu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Uuringud tegi NCC Group avalikustasid<\/a><\/noindex> avaldatud tulemused avatud projekti auditeerimisest Zephyr<\/a><\/noindex>, arendav<\/a><\/noindex> reaalajas\u00fcsteem (RTOS), mis on suunatud seadmete varustamisele, mis vastavad \u201eAsjade Interneti\u201c (IoT, Internet of Things) kontseptsioonile. Audit k\u00e4igus leiti 25 haavatavust<\/a><\/noindex> Zephyris ja 1 haavatavus MCUbootis. Zephyri arendamisel osaleb mitmeid ettev\u00f5tteid, sealhulgas Intel. <\/p>\n

kokku 6 haavatavust v\u00f5rgu stacks, 4 - tuumas, 2 - k\u00e4sureas, 5 s\u00fcsteemi kutsete t\u00f6\u00f6tlemise, 5 USB alams\u00fcsteemis ja 3 fartide uuendamise mehhanismis. Kahte probleemile omistati kriitiline ohtude tase, kahte - k\u00f5rge, 9 m\u00f5\u00f5dukas, 9 - madala ja 4 - kaalumiseks. Kriitilised probleemid m\u00f5jutavad IPv4 staki ja MQTT parsijat, ohtlikud - USB mass storage ja USB DFU draiverid. Teabe avaldamise ajal olid parandused ette valmistatud ainult 15 k\u00f5ige ohtlikuma haavatavuse jaoks, paranduseta on endiselt probleemid, mis v\u00f5ivad p\u00f5hjustada teenuse keelamist v\u00f5i mis on seotud tuuma t\u00e4iendava kaitse mehhanismide puuduj\u00e4\u00e4kidega.<\/p>\n

IPv4 stakis tuvastati kaugt\u00f6\u00f6tlemise haavatavus, mis p\u00f5hjustab m\u00e4lu kahjustumise, t\u00f6\u00f6tlemisel teatud viisil muudetud ICMP-pakettide puhul. Veel \u00fcks t\u00f5sine probleem leiti MQTT protokolli parserist, mis tuleneb puudulikust ohutuse valikust ja v\u00f5ib p\u00f5hjustada kaugt\u00e4itmist. V\u00e4hem ohtlikud probleemid, mis p\u00f5hjustavad teenuse katkestumist, leiti IPv6 stakis ja CoAP protokolli rakenduses.<\/p>\n

\u00dclej\u00e4\u00e4nud probleemid v\u00f5ivad olla lokaalselt ekspluateeritud teenuse katkestamiseks v\u00f5i tuuma tasemel koodi k\u00e4ivitamiseks. Enamik neist haavatavustest on seotud mittet\u00e4ielike s\u00fcsteemi kutsete argumentide kontrollidega, mis v\u00f5ivad viia tuuma m\u00e4lu juhuslike alade kirjutamiseni ja lugemiseni. Probleemid h\u00f5lmavad ka otse s\u00fcsteemi kutse t\u00f6\u00f6tlemise koodi - negatiivse s\u00fcsteemi kutse numbri viitamine toob kaasa t\u00e4isarvude \u00fclevoolu. Tuumas leiti ka probleeme ASLR (aadressiruumi randomiseerimise) kaitse rakendamise ja kanaristide m\u00e4rgistamise mehhanismi rakendamisega virnas, mis muudavad need mehhanismid ebaefektiivseks. <\/p>\n

Rohkem kui \u00fcks probleem m\u00f5jutab USB stakki ja individuaalseid draivereid. N\u00e4iteks USB mass storage'i probleem v\u00f5imaldab bufrite \u00fclevoolu ja koodi t\u00e4itmise tuuma tasandil, kui seade on \u00fchendatud pahatahtliku USB-hostiga. USB DFU haavatavus, draiver, mis v\u00f5imaldab uusi p\u00fcsivara uuendusi l\u00e4bi USB, lubab laadida muudetud p\u00fcsivara pilti s\u00fcsteemi Flash-mikrokontrollerisse, kasutamata kr\u00fcptimist ja m\u00f6\u00f6da minnes turvasuundade valideerimisest digitaalse allkirjaga. T\u00e4iendavalt uuriti avatud laadijakoodi MCUbootis<\/a><\/noindex>, kus leiti \u00fcks madala ohuastmega haavatavus,
\nmis v\u00f5ib p\u00f5hjustada bufrite \u00fclevoolu SMP (Simple Management Protocol) kaudu UART-i kasutamisel.<\/p>\n

K\u00e4esolevaga tuletame meelde, et Zephyris antakse k\u00f5ikide protsesside jaoks ainult \u00fcks globaalne jagatav virtuaalne aadressiruumi (SASOS, \u00dcksik Aadressiruumi Operatsioonis\u00fcsteem). Rakendusele spetsiifiline kood segatakse konkreetse rakenduse tuumaga, luues monoliitse k\u00e4ivitatava faili s\u00f5idukisse laadimiseks ja k\u00e4ivitamiseks. K\u00f5ik s\u00fcsteemi ressursid m\u00e4\u00e4ratakse kompileerimise ajal, mis v\u00e4hendab koodi suurust ja suurendab j\u00f5udlust. S\u00fcsteemi pildil v\u00f5ivad olla ainult need tuuma funktsioonid, mida rakendus vajab.<\/p>\n

Oluline on m\u00e4rkida, et Zephyri peamiste eeliste seas Hacker News residentide poolt temaatilistes niitides kui go-to t\u00f6\u00f6riista benkmarkingu jaoks.<\/a><\/noindex> on arendamine, mis arvestab turvalisusega. Teatatakse<\/a><\/noindex>, et k\u00f5ik arendusetapid l\u00e4bivad kohustuslikud kodeerimise turvalisuse kontrollimise etapid: fuzzing-testi, staatiline anal\u00fc\u00fcs, sisser\u00e4ndet\u00f5rje testid, koodile vihjeid anal\u00fc\u00fcs, tagaukse anal\u00fc\u00fcs ja ohuteooriate modelleerimine.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NCC Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Zephyr, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 (RTOS), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 «\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432\u0435\u0449\u0435\u0439» (IoT, Internet of Things). \u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Zephyr \u0438 1 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MCUboot. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 Zephyr \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Intel. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-83016","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4725 haavatavust RTOS Zephyr, sealhulgas kaugkohtade kaudu ICMP-pakettide abil | ProHoster","description":"NCC Groupi teadlased avaldasid avatud projekti Zephyri auditi tulemused, mis arendab reaalaegset operatsioonis\u00fcsteemi (RTOS), mille eesm\u00e4rk on varustada seadmeid, mis vastavad \"Asjade Interneti\" (IoT, Internet of Things) kontseptsioonile. Auditi k\u00e4igus avastati 25 haavatavust Zephyris ja 1 haavatavus MCUbootis. Zephyri arendamise k\u00e4igus osalesid ettev\u00f5tted Intel. Kokku avastati 6","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4725 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 RTOS Zephyr, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 ICMP-\u043f\u0430\u043a\u0435\u0442 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NCC Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Zephyr, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 (RTOS), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 "\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432\u0435\u0449\u0435\u0439" (IoT, Internet of Things). \u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Zephyr \u0438 1 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MCUboot. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 Zephyr \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Intel. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-27T17:41:58+00:00","article:modified_time":"2020-05-27T17:41:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"83016","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:51:14","updated":"2022-10-02 09:38:36"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/83016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=83016"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/83016\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=83016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=83016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=83016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}