Rashin lahani a cikin tarin Bluez Bluetooth

A cikin tarin Bluetooth kyauta bluez, wanda ake amfani da shi a cikin rarrabawar Linux da Chrome OS, gano rauni (CVE-2020-0556), mai yuwuwar barin maharin ya sami damar shiga tsarin. Sakamakon binciken shiga mara daidai a aiwatar da bayanan bayanan HID da HOGP na Bluetooth, rashin lahani. Yana da damar ba tare da bin hanyar daura na'urar ga mai gida ba, cimma ƙin sabis ko haɓaka gata yayin haɗa na'urar Bluetooth mara kyau. Na'urar Bluetooth mai ƙeta na iya kwaikwayon wani ba tare da bin hanyar haɗin kai ba Na'urar HID (allon madannai, linzamin kwamfuta, masu sarrafa wasa, da sauransu) ko tsara ɓoyayyun bayanan da ke cikin tsarin shigar da bayanai.

By bayarwa Matsalar Intel ta bayyana a cikin fitowar Bluez har zuwa 5.52. Babu tabbas ko batun ya shafi sakin 5.53, wanda ba a sanar ba jama'a, amma tun Fabrairu samuwa via Git da kuma cikin rumbun taro. Faci tare da gyara (1, 2) An ba da shawarar rashin lafiyar a ranar 10 ga Maris, da kuma sakewa 5.53 an kafa shi a ranar 15 ga Fabrairu. Har yanzu ba a ƙirƙiri sabuntawa ba a cikin kayan rarrabawa (Debian, Ubuntu, SUSE, RHEL, Arch, Fedora).

source: budenet.ru

Add a comment