{"id":83016,"date":"2020-05-27T19:41:58","date_gmt":"2020-05-27T17:41:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket"},"modified":"2020-05-27T19:41:58","modified_gmt":"2020-05-27T17:41:58","slug":"25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","title":{"rendered":"\ud83e\udd47Nginx 1.19.0 v\u00e4ljaanne | ProHoster","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Uurijad NCC Group'ist avalikustasid<\/a><\/noindex> avanprojekti auditi tulemused Zephyr<\/a><\/noindex>, arenduse<\/a><\/noindex> reaalajaotis\u00fcsteem (RTOS), mis on suunatud seadmete varustamisele \"Asjade Interneti\" (IoT, Internet of Things) kontseptsiooniga. Audiidi k\u00e4igus tuvastati 25 haavatavust<\/a><\/noindex> Zephyris ja 1 haavatavus MCUbootis. Zephyri arendust viib l\u00e4bi ka Intel. <\/p>\n

Kokku tuvastati 6 haavatavust v\u00f5rgustiku virnas, 4 \u2014 tuumas, 2 \u2014 k\u00e4surea interfaa\u017eis, 5 s\u00fcsteemik\u00f5nede t\u00f6\u00f6tlejates, 5 USB alam\u00fcsteemis ja 3 rakenduste v\u00e4rskendamise mehhanismis. Kahele probleemile anti kriitiline ohtu tase, kahele \u2014 k\u00f5rge, 9 m\u00f5\u00f5dukas, 9 \u2014 madal ja 4 \u2014 t\u00e4helepanu all. Kriitilised probleemid puudutavad IPv4 virna ja MQTT anal\u00fcsaatorit, ohtlikud \u2014 USB massim\u00e4lud ja USB DFU draivereid. Teabe avaldamise hetkel olid parandused ette valmistatud ainult 15 k\u00f5ige ohtlikuma haavatavuse jaoks, ei ole lahendamata j\u00e4\u00e4nud probleemid, mis v\u00f5ivad p\u00f5hjustada teenuse osutamise katkestusi v\u00f5i on seotud tuuma t\u00e4iendavate kaitsemehhanismide puudustega.<\/p>\n

IPv4 kihi tuvastati kaugelt ekspluateeritav haavatavus, mis p\u00f5hjustab m\u00e4lu kahjustumist teatavasti muudetud ICMP-pakettide t\u00f6\u00f6tlemisel. Veel \u00fcks t\u00f5sine probleem leiti MQTT protokolli parsinud, mis tuleneb v\u00e4ljakutsuva v\u00e4ljakutse puudumisest ja v\u00f5ib viia koodi kaugemale k\u00e4ivitamiseni. V\u00e4hem ohtlikud probleemid, mis p\u00f5hjustavad teenuste katkestamist, leiti IPv6 kihist ja CoAP protokolli rakendamisest.<\/p>\n

\u00dclej\u00e4\u00e4nud probleemid v\u00f5ivad olla kohaliku kasutaja poolt \u00e4ra kasutatud, et p\u00f5hjustada teenuse katkestamist v\u00f5i k\u00e4ivitada koodi tuuma tasemel. Suur osa nendest haavatavustest on seotud s\u00fcsteemik\u00f5nede argumentide n\u00f5uetekohaste kontrollide puudumisega ja v\u00f5ivad viia tuuma juhuslike m\u00e4lupiirkondade lugemise ja kirjutamisega. Probleemid h\u00f5lmavad ka s\u00fcsteemik\u00f5nede t\u00f6\u00f6tlemise koodi \u2014 negatiivse s\u00fcsteemik\u00f5ne numbri k\u00e4sitlemine p\u00f5hjustab \u00fclet\u00e4itumise. Tuumas on samuti tuvastatud ASLR (aadressiruumi randomiseerimise) kaitsemehhanismi ja kanaribi sisestamise mehhanismi rakendamisega seotud probleemid, mis muudavad need mehhanismid ebat\u00f5husaks. <\/p>\n

Paljusid probleeme m\u00f5jutavad USB-stek ja eraldi draiverid. N\u00e4iteks USB mass storage probleem v\u00f5imaldab p\u00f5hjustada m\u00e4lupuhvri \u00fclevoolu ja t\u00e4ita koodi tuumatasemel, kui seade on \u00fchendatud r\u00fcndaja kontrolli all olevasse USB-hosti. USB DFU haavatavus, draiver, mis laadib uut p\u00fcsivara USB kaudu, v\u00f5imaldab laadida muudetud p\u00fcsivara pilti mikrokontrolleri sisemisse Flash'i ilma kr\u00fcpteerimiseta ja m\u00f6\u00f6da minna kaitstud k\u00e4ivitamise re\u017eiimist, mis kontrollib komponente digitaalse allkirjaga. Lisaks on uuritud avatud buuteri koodi. MCUboot<\/a><\/noindex>, milles leiti \u00fcks mitteohtlik haavatavus,
\nmis v\u00f5ib p\u00f5hjustada m\u00e4lupuhvri \u00fclevoolu SMP (Simple Management Protocol) protokolli kasutamisel \u00fcle UART-i.<\/p>\n

Meenutame, et Zephyris on k\u00f5igil protsessidel ainult \u00fcks globaalne jagatud virtuaalne aadressiruum (SASOS, Single Address Space Operating System). Rakendusele spetsiifiline kood kombineeritakse rakendusele kohandatud tuumaga ja moodustab monoliitse k\u00e4itamiseks m\u00f5eldud faili, mis laaditakse ja k\u00e4ivitatakse konkreetsel varustusel. K\u00f5ik s\u00fcsteemiressursid m\u00e4\u00e4ratakse kompileerimise etapis, mis v\u00e4hendab koodi suurust ja suurendab j\u00f5udlust. S\u00fcsteemipildi v\u00f5ivad kuuluda vaid need tuuma funktsioonid, mis on vajalikud rakenduse t\u00e4itmiseks.<\/p>\n

Tuleb m\u00e4rkida, et Zephyri peamisteks omadusteks on mainitakse<\/a><\/noindex> arendamine turvalisust silmas pidades. Kinnitakse<\/a><\/noindex>, et k\u00f5ik arendusastmed l\u00e4bivad kohustuslikud koodi turvalisuse kinnitamise etapid: fuzzing-testimine, staatiline anal\u00fc\u00fcs, sissetungi katsetamine, koodi \u00fclevaatus, tagurpidi juurdep\u00e4\u00e4sude anal\u00fc\u00fcs ja ohu modelleerimine.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NCC Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Zephyr, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 (RTOS), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 «\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432\u0435\u0449\u0435\u0439» (IoT, Internet of Things). \u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Zephyr \u0438 1 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MCUboot. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 Zephyr \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Intel. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-83016","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4725 haavatavust RTOS Zephyris, sealhulgas exploitatavad ICMP-pakette kaudu | ProHoster","description":"NCC Grupi teadlased avaldasid auditi tulemused.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4725 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 RTOS Zephyr, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 ICMP-\u043f\u0430\u043a\u0435\u0442 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NCC Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/25-uyazvimostej-v-rtos-zephyr-v-tom-chisle-ekspluatiruemye-cherez-icmp-paket","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-27T17:41:58+00:00","article:modified_time":"2020-05-27T17:41:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"83016","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:51:14","updated":"2022-10-02 09:38:36","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/83016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=83016"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/83016\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=83016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=83016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=83016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}