{"id":114268,"date":"2024-03-12T12:25:57","date_gmt":"2024-03-12T10:25:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-android-14-ekspluatiruemaya-cherez-bluetooth-le"},"modified":"2024-03-12T12:25:57","modified_gmt":"2024-03-12T10:25:57","slug":"uyazvimost-v-android-14-ekspluatiruemaya-cherez-bluetooth-le","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-android-14-ekspluatiruemaya-cherez-bluetooth-le","title":{"rendered":"Sebezhet\u0151s\u00e9g az Android 14-ben, amelyet Bluetooth LE-n kereszt\u00fcl lehet kihaszn\u00e1lni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A GrapheneOS projekt fejleszt\u0151i, akik a AOSP (Android Open Source Project) k\u00f3dalap biztons\u00e1gos \u00e1gazat\u00e1t fejlesztik, sebezhet\u0151s\u00e9get t\u00e1rtak fel az Android 14 Bluetooth stack-j\u00e9ben, amely potenci\u00e1lisan t\u00e1voli k\u00f3dv\u00e9grehajt\u00e1shoz vezethet. A probl\u00e9ma egy m\u00e1r felszabad\u00edtott mem\u00f3ria ter\u00fclet (use-after-free) el\u00e9r\u00e9s\u00e9b\u0151l ad\u00f3dik a Bluetooth LE-n kereszt\u00fcl tov\u00e1bb\u00edtott hang feldolgoz\u00f3 k\u00f3dj\u00e1ban. <\/p>\n

A sebezhet\u0151s\u00e9get a hardened_malloc h\u00edv\u00e1s\u00e1ba integr\u00e1lt tov\u00e1bbi v\u00e9delem r\u00e9v\u00e9n t\u00e1rt\u00e1k fel, amely az ARMv8.5 MTE (MemTag, Memory Tagging Extension) kiterjeszt\u00e9st haszn\u00e1lja, lehet\u0151v\u00e9 t\u00e9ve, hogy a c\u00edmk\u00e9k minden mem\u00f3riafoglal\u00e1s m\u0171velet\u00e9hez hozz\u00e1rendelhet\u0151k legyenek, \u00e9s ellen\u0151rz\u00e9seket v\u00e9gezzenek a mutat\u00f3k helyes haszn\u00e1lat\u00e1nak megakad\u00e1lyoz\u00e1s\u00e1ra, ezzel blokkolva a m\u00e1r felszabad\u00edtott mem\u00f3ria blokkjainak, a puffermel t\u00falcsordul\u00e1soknak, a inicializ\u00e1l\u00e1s el\u0151tti el\u00e9r\u00e9seknek \u00e9s a jelenlegi kontextuson k\u00edv\u00fcli haszn\u00e1latnak a sebezhet\u0151s\u00e9geit. <\/p>\n

A hiba az Android 14 QPR2 (Negyed\u00e9ves Platform Kiad\u00e1s) friss\u00edt\u00e9ssel kezd\u0151d\u0151en jelentkezik, amelyet m\u00e1rcius elej\u00e9n tettek k\u00f6zz\u00e9. Az Android 14 alap k\u00f3dalapj\u00e1ban az MTE mechanizmusa opci\u00f3k\u00e9nt el\u00e9rhet\u0151, \u00e9s jelenleg nem alkalmazz\u00e1k alap\u00e9rtelmezettk\u00e9nt, de a GrapheneOS m\u00e1r haszn\u00e1lja a tov\u00e1bbi v\u00e9delem \u00e9rdek\u00e9ben, ami lehet\u0151v\u00e9 tette a hiba diagnosztiz\u00e1l\u00e1s\u00e1t az Android 14 QPR2-re val\u00f3 friss\u00edt\u00e9s ut\u00e1n. A hiba v\u00e1ratlan le\u00e1ll\u00e1st okozott a Samsung Galaxy Buds2 Pro Bluetooth f\u00fclhallgat\u00f3 haszn\u00e1lata sor\u00e1n, amelynek firmware-j\u00e9ben az MTE alap\u00fa v\u00e9delem enged\u00e9lyezve volt. Az incidens elemz\u00e9se azt mutatta, hogy a probl\u00e9ma a Bluetooth LE kezel\u0151j\u00e9n\u00e9l l\u00e9v\u0151 m\u00e1r felszabad\u00edtott mem\u00f3ria el\u00e9r\u00e9s\u00e9vel volt \u00f6sszef\u00fcgg\u00e9sben, nem pedig MTE integr\u00e1l\u00e1s\u00e1b\u00f3l fakad\u00f3 hib\u00e1b\u00f3l. <\/p>\n

A sebezhet\u0151s\u00e9g a GrapheneOS 2024030900 kiad\u00e1s\u00e1ban lett kijav\u00edtva, \u00e9s azokat a telefonokat \u00e9rinti, amelyek nem rendelkeznek a MTE (Memory Tagging Extension) alap\u00fa hardveres v\u00e9delemmel. Az MTE jelenleg csak a Pixel 8 \u00e9s Pixel 8 Pro eszk\u00f6z\u00f6k\u00f6n \u00e9rhet\u0151 el. A sebezhet\u0151s\u00e9g a Google Pixel 8 okostelefonokon reproduk\u00e1lhat\u00f3, Android 14 QPR2 rendszerre \u00e9p\u00fcl\u0151 szoftverrel. A Pixel 8 sorozat\u00fa telefonokon az MTE m\u00f3dot a fejleszt\u0151i be\u00e1ll\u00edt\u00e1sokban lehet aktiv\u00e1lni («Be\u00e1ll\u00edt\u00e1sok \/ Rendszer \/ Fejleszt\u0151i opci\u00f3k \/ Mem\u00f3ria c\u00edmk\u00e9z\u00e9si kiterjeszt\u00e9sek»). Az MTE aktiv\u00e1l\u00e1sa k\u00f6r\u00fclbel\u00fcl 3%-kal n\u00f6veli a mem\u00f3riafogyaszt\u00e1st, de nem cs\u00f6kkenti a teljes\u00edtm\u00e9nyt.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 GrapheneOS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0435 \u043e\u0442\u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b AOSP (Android Open Source Project), \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android 14, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free) \u0432 \u043a\u043e\u0434\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0432\u0443\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 Bluetooth LE. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432 \u0432\u044b\u0437\u043e\u0432 hardened_malloc \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114268","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Android 14 s\u00e9r\u00fcl\u00e9kenys\u00e9g, amelyet a Bluetooth LE-n kereszt\u00fcl lehet kihaszn\u00e1lni | ProHoster","description":"A GrapheneOS projekt fejleszt\u0151i, akik a AOSP (Android Open Source Project) k\u00f3dalap biztons\u00e1gos \u00e1gazat\u00e1t fejlesztik, sebezhet\u0151s\u00e9get t\u00e1rtak fel az Android 14 Bluetooth stack-j\u00e9ben, amely potenci\u00e1lisan vezethet.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-android-14-ekspluatiruemaya-cherez-bluetooth-le","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android 14, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0447\u0435\u0440\u0435\u0437 Bluetooth LE | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 GrapheneOS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0435 \u043e\u0442\u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b AOSP (Android Open Source Project), \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android 14, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-android-14-ekspluatiruemaya-cherez-bluetooth-le","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-12T10:25:57+00:00","article:modified_time":"2024-03-12T10:25:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=114268"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114268\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=114268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=114268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=114268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}