A GRUB2 bootloader driver handling the NTFS file system has a vulnerability (CVE-2023-4692) that allows arbitrary code execution at the bootloader level when accessing a specially crafted file system image. This vulnerability can be used to bypass the UEFI Secure Boot verification mechanism. <\/p>\n
A sebezhet\u0151s\u00e9get az NTFS-attrib\u00fatumok «$ATTRIBUTE_LIST» (grub-core\/fs\/ntfs.c) elemz\u00e9s\u00e9ben t\u00f6rt\u00e9nt k\u00f3dhiba okozza, amely lehet\u0151v\u00e9 teszi, hogy a felhaszn\u00e1l\u00f3 \u00e1ltal vez\u00e9relt inform\u00e1ci\u00f3kat \u00edrjon a lefoglalt pufferen k\u00edv\u00fcli mem\u00f3ria ter\u00fclet\u00e9re. Egy speci\u00e1lisan kialak\u00edtott NTFS-k\u00e9p kezel\u00e9s\u00e9n\u00e9l a t\u00falt\u00f6lt\u00e9s a GRUB egy r\u00e9sz\u00e9nek \u00e1t\u00edr\u00e1s\u00e1hoz vezet, \u00e9s bizonyos k\u00f6r\u00fclm\u00e9nyek k\u00f6z\u00f6tt k\u00e1ros\u00edthatja a UEFI firmware mem\u00f3riater\u00fclet\u00e9t is, potenci\u00e1lisan lehet\u0151v\u00e9 t\u00e9ve saj\u00e1t k\u00f3d futtat\u00e1s\u00e1t a bootloader vagy firmware szintj\u00e9n. <\/p>\n
Ezen k\u00edv\u00fcl a GRUB2 NTFS-illeszt\u0151programj\u00e1ban is felfedeztek egy \u00fajabb sebezhet\u0151s\u00e9get (CVE-2023-4693), amely lehet\u0151v\u00e9 teszi tetsz\u0151leges mem\u00f3ria ter\u00fclet tartalm\u00e1nak olvas\u00e1s\u00e1t az «$DATA» attrib\u00fatum speci\u00e1lisan kialak\u00edtott NTFS-k\u00e9pben val\u00f3 elemz\u00e9se sor\u00e1n. M\u00e1sok mellett a sebezhet\u0151s\u00e9g lehet\u0151v\u00e9 teszi \u00e9rz\u00e9keny adatok kiemel\u00e9s\u00e9t, amelyek a mem\u00f3ri\u00e1ban vannak cache-elve, vagy EFI v\u00e1ltoz\u00f3k \u00e9rt\u00e9keinek meghat\u00e1roz\u00e1s\u00e1t. <\/p>\n
Currently, the issues have only been addressed via a patch. The status of vulnerability fixes in distributions can be assessed on these pages: Debian, Ubuntu, SUSE, RHEL, Fedora. Simply updating the GRUB2 package is not enough; it\u2019s also necessary to generate new internal digital signatures and update installers, bootloaders, kernel packages, fwupd firmware, and the shim layer. <\/p>\n
A legt\u00f6bb Linux disztrib\u00faci\u00f3ban az UEFI Secure Boot ellen\u0151rz\u00f6tt ind\u00edt\u00e1s\u00e1hoz egy kis shim r\u00e9teg haszn\u00e1latos, amelyet a Microsoft digit\u00e1lis al\u00e1\u00edr\u00e1sa hiteles\u00edt. Ez a r\u00e9teg a saj\u00e1t tan\u00fas\u00edtv\u00e1ny\u00e1val ellen\u0151rzi a GRUB2-t, lehet\u0151v\u00e9 t\u00e9ve a disztrib\u00faci\u00f3k fejleszt\u0151i sz\u00e1m\u00e1ra, hogy ne kelljen minden kernel- \u00e9s GRUB-friss\u00edt\u00e9st Microsoft-hiteles\u00edteni. A GRUB2 sebezhet\u0151s\u00e9gei lehet\u0151v\u00e9 teszik, hogy k\u00f3dot hajtsanak v\u00e9gre a shim sikeres ellen\u0151rz\u00e9se ut\u00e1n, de az oper\u00e1ci\u00f3s rendszer bet\u00f6lt\u00e9se el\u0151tt, behatolva a bizalom l\u00e1nc\u00e1ba akt\u00edv Secure Boot \u00fczemm\u00f3dban, \u00e9s teljes ellen\u0151rz\u00e9st megszerezve a tov\u00e1bbi bet\u00f6lt\u00e9si folyamatr\u00f3l, p\u00e9ld\u00e1ul m\u00e1s oper\u00e1ci\u00f3s rendszer bet\u00f6lt\u00e9s\u00e9r\u0151l, az oper\u00e1ci\u00f3s rendszer \u00f6sszetev\u0151inek m\u00f3dos\u00edt\u00e1s\u00e1r\u00f3l \u00e9s a Lockdown v\u00e9delem megker\u00fcl\u00e9s\u00e9r\u0151l. <\/p>\n
A sebezhet\u0151s\u00e9g visszavon\u00e1sa n\u00e9lk\u00fcli blokkol\u00e1s\u00e1hoz a disztrib\u00faci\u00f3k haszn\u00e1lhatj\u00e1k az SBAT mechanizmust (UEFI Secure Boot Advanced Targeting), amelynek t\u00e1mogat\u00e1sa a GRUB2-re, shim-re \u00e9s fwupd-re a legt\u00f6bb n\u00e9pszer\u0171 Linux disztrib\u00faci\u00f3ban megval\u00f3sult. Az SBAT-ot a Microsoft egy\u00fcttm\u0171k\u00f6d\u00e9s\u00e9vel fejlesztett\u00e9k ki, \u00e9s plusz metaadat\u00e1k hozz\u00e1ad\u00e1s\u00e1t jelenti az UEFI komponensek v\u00e9grehajthat\u00f3 f\u00e1jljaihoz, amelyek tartalmazz\u00e1k a gy\u00e1rt\u00f3r\u00f3l, term\u00e9kr\u0151l, komponensr\u0151l \u00e9s verzi\u00f3r\u00f3l sz\u00f3l\u00f3 inform\u00e1ci\u00f3kat. Ezek a metaadatok digit\u00e1lis al\u00e1\u00edr\u00e1ssal hiteles\u00edtettek, \u00e9s k\u00fcl\u00f6n-k\u00fcl\u00f6n is szerepelhetnek az UEFI Secure Boot enged\u00e9lyezett vagy tilthat\u00f3 komponenseinek list\u00e1j\u00e1n. <\/p>\n
A SBAT lehet\u0151v\u00e9 teszi a digit\u00e1lis al\u00e1\u00edr\u00e1s haszn\u00e1lat\u00e1nak blokkol\u00e1s\u00e1t a komponensek egyes verzi\u00f3i eset\u00e9ben an\u00e9lk\u00fcl, hogy sz\u00fcks\u00e9g lenne a Secure Boot kulcsainak visszavon\u00e1s\u00e1ra. A SBAT-on kereszt\u00fcli sebezhet\u0151s\u00e9gek blokkol\u00e1sa nem ig\u00e9nyli a visszavont UEFI tan\u00fas\u00edtv\u00e1nyok list\u00e1j\u00e1nak (dbx) haszn\u00e1lat\u00e1t, hanem a bels\u0151 kulcs cser\u00e9j\u00e9nek szintj\u00e9n t\u00f6rt\u00e9nik az al\u00e1\u00edr\u00e1sok kialak\u00edt\u00e1s\u00e1hoz \u00e9s a GRUB2, shim \u00e9s m\u00e1s sz\u00e1ll\u00edt\u00f3kt\u00f3l \u00e9rkez\u0151 boot artefaktumok friss\u00edt\u00e9s\u00e9hez. A SBAT bevezet\u00e9se el\u0151tt a visszavont tan\u00fas\u00edtv\u00e1nyok list\u00e1j\u00e1nak (dbx, UEFI Visszavon\u00e1si Lista) friss\u00edt\u00e9se k\u00f6telez\u0151 felt\u00e9tele volt a sebezhet\u0151s\u00e9gek teljes blokkol\u00e1s\u00e1nak, mivel a t\u00e1mad\u00f3, f\u00fcggetlen\u00fcl a haszn\u00e1lt oper\u00e1ci\u00f3s rendszert\u0151l, k\u00e9pes volt a bootloader haszn\u00e1lat\u00e1val kompromitt\u00e1lni az UEFI Secure Boot-ot. \u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4692), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 NTFS-\u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 «$ATTRIBUTE_LIST» (grub-core\/fs\/ntfs.c), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110421","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sebezhet\u0151s\u00e9g az NTFS meghajt\u00f3ban a GRUB2 r\u00e9szek\u00e9nt, amely lehet\u0151v\u00e9 teszi k\u00f3d v\u00e9grehajt\u00e1s\u00e1t \u00e9s az UEFI Secure Boot megker\u00fcl\u00e9s\u00e9t | ProHoster","description":"A GRUB2 bootloader NTFS f\u00e1jlrendszerrel foglalkoz\u00f3 meghajt\u00f3j\u00e1ban egy sebezhet\u0151s\u00e9g (CVE-2023-4692) ker\u00fclt felfedez\u00e9sre, amely lehet\u0151v\u00e9 teszi, hogy a t\u00e1mad\u00f3 saj\u00e1t k\u00f3dj\u00e1t hajtsa v\u00e9gre a bootloader szintj\u00e9n egy k\u00fcl\u00f6n\u00f6s h\u00edv\u00e1s sor\u00e1n.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS-\u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4692), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-04T07:10:18+00:00","article:modified_time":"2023-10-04T07:10:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/110421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=110421"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/110421\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=110421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=110421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=110421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"