{"id":112103,"date":"2023-12-10T09:10:17","date_gmt":"2023-12-10T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios"},"modified":"2023-12-10T09:10:17","modified_gmt":"2023-12-10T07:10:17","slug":"uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","title":{"rendered":"Vulnerabilidade em pilhas Bluetooth Linux, macOS, Android e iOS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/p>\n

Marc Newlin, que descobriu a vulnerabilidade MouseJack<\/a> h\u00e1 sete anos, divulgou informa\u00e7\u00f5es sobre uma vulnerabilidade semelhante (CVE-2023-45866)<\/a>, que afeta as pilhas Bluetooth do Android, Linux, macOS e iOS. Essa vulnerabilidade permite a substitui\u00e7\u00e3o de pressionamentos de teclas simulando a atividade de um dispositivo de entrada conectado via Bluetooth. Com acesso \u00e0 entrada do teclado, um invasor pode executar v\u00e1rias a\u00e7\u00f5es, como executar comandos no sistema, instalar aplicativos e redirecionar mensagens.<\/p>\n

<\/noindex><\/noindex> <\/p>\n

A vulnerabilidade \u00e9 causada pelo fato de que os drivers host HID (Dispositivo de Interface Humana) para dispositivos Bluetooth t\u00eam um modo que permite a um dispositivo perif\u00e9rico remoto criar e estabelecer conex\u00f5es criptografadas sem autentica\u00e7\u00e3o. Dispositivos conectados podem transmitir mensagens de teclado, e a pilha HID as processa, abrindo a possibilidade de um ataque de substitui\u00e7\u00e3o de mensagens HID, realizado sem a participa\u00e7\u00e3o do usu\u00e1rio. Esse ataque pode ser realizado a at\u00e9 100 metros de dist\u00e2ncia da v\u00edtima.<\/p>\n

O mecanismo de emparelhamento de dispositivos sem autentica\u00e7\u00e3o \u00e9 definido na especifica\u00e7\u00e3o Bluetooth e, dependendo das configura\u00e7\u00f5es da pilha Bluetooth, permite conectar um dispositivo sem confirma\u00e7\u00e3o do usu\u00e1rio. Por exemplo, no Linux, ao usar a pilha Bluetooth BlueZ, o adaptador Bluetooth deve estar em modo de descoberta e conex\u00e3o para emparelhamento oculto. No Android, basta ativar o suporte ao Bluetooth. No iOS e no macOS, para um ataque bem-sucedido, o Bluetooth deve estar ativado, assim como um teclado sem fio conectado.<\/p>\n

A capacidade de substituir a entrada foi demonstrada no Ubuntu 18.04, 20.04, 22.04 e 23.10 com a pilha Bluetooth baseada no pacote BlueZ. O ChromeOS n\u00e3o \u00e9 vulner\u00e1vel, pois suas configura\u00e7\u00f5es da pilha Bluetooth n\u00e3o permitem conex\u00f5es sem autentica\u00e7\u00e3o. No Android, a vulnerabilidade afeta dispositivos com vers\u00f5es de plataforma de 4.2.2 a 14. No macOS, a vulnerabilidade foi demonstrada em um MacBook Pro 2022 com processador Apple M2 e macOS 13.3.3, bem como em um MacBook Air 2017 com processador Intel e macOS 12.6.7. No iOS, a vulnerabilidade foi demonstrada em um iPhone SE com iOS 16.6. Ativar o modo Lockdown n\u00e3o oferece prote\u00e7\u00e3o contra ataques no macOS e iOS.<\/p>\n

<\/p>\n

No Linux, a vulnerabilidade foi resolvida<\/a> Na base de c\u00f3digo do Bluez, configurando a op\u00e7\u00e3o «ClassicBondedOnly» para «true», \u00e9 poss\u00edvel ativar o modo seguro, que permite a cria\u00e7\u00e3o de conex\u00f5es somente ap\u00f3s o emparelhamento. Anteriormente, o valor estava definido como «false», o que, em nome da compatibilidade com alguns dispositivos de entrada, diminu\u00eda o n\u00edvel de seguran\u00e7a.<\/p>\n

<\/noindex> <\/p>\n

Na pilha Bluetooth Fluoride, utilizada nas \u00faltimas vers\u00f5es do Android, a vulnerabilidade foi corrigida<\/a> por meio da aplica\u00e7\u00e3o obrigat\u00f3ria de autentica\u00e7\u00e3o para todas as conex\u00f5es criptografadas. As corre\u00e7\u00f5es para o Android foram lan\u00e7adas apenas para as vers\u00f5es 11-14. Para dispositivos Pixel, a vulnerabilidade foi corrigida na atualiza\u00e7\u00e3o de firmware de dezembro. Para as vers\u00f5es do Android de 4.2.2 a 10, a vulnerabilidade permanece sem corre\u00e7\u00e3o.<\/p>\n

<\/noindex><\/p>\n

Fonte: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u043f\u0443\u0442\u0435\u043c \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0432\u043e\u0434\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e Bluetooth. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u043d\u043e\u043c\u0443 \u0432\u0432\u043e\u0434\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112103","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidade nas pilhas Bluetooth do Linux, macOS, Android e iOS | ProHoster","description":"Marc Newlin, que descobriu a vulnerabilidade MouseJack h\u00e1 sete anos, revelou informa\u00e7\u00f5es sobre","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0430\u0445 Linux, macOS, Android \u0438 iOS | ProHoster","og:description":"\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-10T07:10:17+00:00","article:modified_time":"2023-12-10T07:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/112103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=112103"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/112103\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=112103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=112103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=112103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}