{"id":105525,"date":"2022-11-11T21:36:51","date_gmt":"2022-11-11T19:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana"},"modified":"2022-11-11T21:36:51","modified_gmt":"2022-11-11T19:36:51","slug":"uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","title":{"rendered":"Vulnerabilidade no Android que permite contornar o bloqueio de tela","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Uma vulnerabilidade foi identificada na plataforma Android (CVE-2022-20465), permitindo desativar a bloqueio de tela ao trocar o cart\u00e3o SIM e inserir o c\u00f3digo PUK. A possibilidade de desativar a bloqueio foi demonstrada em dispositivos Google Pixel, mas como a corre\u00e7\u00e3o afeta a base de c\u00f3digo principal do Android, \u00e9 prov\u00e1vel que o problema tamb\u00e9m se aplique a firmwares de outros fabricantes. O problema foi corrigido no pacote de atualiza\u00e7\u00f5es de seguran\u00e7a de novembro para Android. O pesquisador que destacou a quest\u00e3o recebeu uma recompensa de 70 mil d\u00f3lares da Google. <\/p>\n

O problema \u00e9 causado pelo tratamento inadequado da desbloqueio ap\u00f3s a inser\u00e7\u00e3o do c\u00f3digo PUK (Personal Unblocking Key), utilizado para restaurar o funcionamento do cart\u00e3o SIM bloqueado ap\u00f3s m\u00faltiplas tentativas incorretas de inser\u00e7\u00e3o do PIN. Para desativar o bloqueio de tela, basta colocar seu cart\u00e3o SIM no telefone, que est\u00e1 protegido por um c\u00f3digo PIN. Ap\u00f3s trocar para um cart\u00e3o SIM protegido por PIN, uma solicita\u00e7\u00e3o de PIN \u00e9 exibida na tela. Se o PIN for inserido incorretamente tr\u00eas vezes, o cart\u00e3o SIM ser\u00e1 bloqueado, ap\u00f3s o que ser\u00e1 poss\u00edvel inserir o c\u00f3digo PUK para desbloquear. Foi constatado que a inser\u00e7\u00e3o correta do c\u00f3digo PUK n\u00e3o apenas desbloqueia o cart\u00e3o SIM, mas tamb\u00e9m permite o acesso \u00e0 interface principal, contornando o bloqueador de tela, sem confirma\u00e7\u00e3o de acesso por meio da senha principal ou de um padr\u00e3o gr\u00e1fico.

\r\n \"Por\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

A vulnerabilidade \u00e9 causada por um erro na l\u00f3gica de verifica\u00e7\u00e3o dos c\u00f3digos PUK no controlador KeyguardSimPukViewController, que \u00e9 respons\u00e1vel pela exibi\u00e7\u00e3o da tela adicional de autentica\u00e7\u00e3o. O Android usa v\u00e1rios tipos de telas de autentica\u00e7\u00e3o (para PIN, PUK, senha, padr\u00e3o gr\u00e1fico, autentica\u00e7\u00e3o biom\u00e9trica) e essas telas s\u00e3o chamadas sequencialmente quando m\u00faltiplas verifica\u00e7\u00f5es s\u00e3o necess\u00e1rias, por exemplo, quando tanto o PIN quanto o padr\u00e3o gr\u00e1fico s\u00e3o necess\u00e1rios. <\/p>\n

Com a inser\u00e7\u00e3o correta do c\u00f3digo PIN, inicia-se a segunda fase de verifica\u00e7\u00e3o, que exige a entrada do c\u00f3digo principal de desbloqueio, mas ao inserir o c\u00f3digo PUK, esta fase \u00e9 pulada e o acesso \u00e9 concedido sem solicitar a senha principal ou o padr\u00e3o gr\u00e1fico. A omiss\u00e3o da pr\u00f3xima etapa de desbloqueio ocorre porque, ao chamar o KeyguardSecurityContainerController#dismiss(), n\u00e3o h\u00e1 compara\u00e7\u00e3o entre o m\u00e9todo de verifica\u00e7\u00e3o esperado e o passado, ou seja, o manipulador considera que n\u00e3o houve mudan\u00e7a no m\u00e9todo de verifica\u00e7\u00e3o e a conclus\u00e3o da verifica\u00e7\u00e3o do c\u00f3digo PUK indica uma valida\u00e7\u00e3o bem-sucedida das credenciais. <\/p>\n

A vulnerabilidade foi descoberta acidentalmente \u2014 o telefone do usu\u00e1rio descarregou e, ap\u00f3s a recarga e lig\u00e1-lo novamente, ele errou algumas vezes ao digitar o PIN. Depois, desbloqueou com o c\u00f3digo PUK e ficou surpreso ao perceber que o sistema n\u00e3o solicitou a senha principal usada para criptografar os dados, com isso travou com a mensagem \u201ePixel is starting\u2026\u201d. O usu\u00e1rio, sendo curioso, decidiu investigar o que estava acontecendo e come\u00e7ou a experimentar de diferentes maneiras com a entrada dos c\u00f3digos PIN e PUK, at\u00e9 que acidentalmente esqueceu de reiniciar o dispositivo ap\u00f3s a troca do chip SIM e, em vez de travar, obteve acesso ao ambiente. <\/p>\n

A rea\u00e7\u00e3o do Google \u00e0 notifica\u00e7\u00e3o da vulnerabilidade \u00e9 especialmente interessante. A informa\u00e7\u00e3o sobre o problema foi enviada em junho, mas at\u00e9 setembro o pesquisador n\u00e3o conseguiu obter uma resposta clara. Ele acreditava que esse comportamento se devia ao fato de que n\u00e3o era o primeiro a relatar esse erro. Suspeitas de que algo estava errado surgiram em setembro, quando o problema permaneceu sem corre\u00e7\u00e3o ap\u00f3s a instala\u00e7\u00e3o da atualiza\u00e7\u00e3o de firmware, liberada ap\u00f3s 90 dias, quando j\u00e1 havia expirado o per\u00edodo de divulga\u00e7\u00e3o declarado. <\/p>\n

Como todas as tentativas de descobrir o estado da mensagem enviada sobre o problema resultaram apenas em respostas automatizadas e padronizadas, o pesquisador tentou entrar em contato pessoalmente com funcion\u00e1rios do Google para esclarecer a situa\u00e7\u00e3o sobre a prepara\u00e7\u00e3o da corre\u00e7\u00e3o e at\u00e9 demonstrou a vulnerabilidade no escrit\u00f3rio do Google em Londres. Somente depois disso, o trabalho para corrigir a vulnerabilidade come\u00e7ou a avan\u00e7ar. Durante a an\u00e1lise, ficou claro que algu\u00e9m j\u00e1 havia relatado o problema antes, mas o Google decidiu fazer uma exce\u00e7\u00e3o e pagar uma recompensa por um novo relato do problema, pois somente gra\u00e7as \u00e0 insist\u00eancia do autor a quest\u00e3o foi finalmente notada.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-20465), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0443\u0442\u0451\u043c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u0438 \u0432\u0432\u043e\u0434\u0430 PUK-\u043a\u043e\u0434\u0430. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Google Pixel, \u043d\u043e \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 Android, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f Android. \u041e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0439 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105525","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidade no Android que permite contornar o bloqueio de tela | ProHoster","description":"Foi descoberta uma vulnerabilidade na plataforma Android (CVE-2022-20465) que permite desativar o bloqueio de tela atrav\u00e9s da troca do cart\u00e3o SIM e da inser\u00e7\u00e3o do c\u00f3digo PUK.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 | ProHoster","og:description":"\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-20465), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0443\u0442\u0451\u043c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u0438 \u0432\u0432\u043e\u0434\u0430 PUK-\u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-11T19:36:51+00:00","article:modified_time":"2022-11-11T19:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=105525"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105525\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=105525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=105525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=105525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}