{"id":36029,"date":"2019-10-31T22:09:14","date_gmt":"2019-10-31T19:09:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk\/"},"modified":"2019-10-31T22:09:14","modified_gmt":"2019-10-31T19:09:14","slug":"uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","title":{"rendered":"Vulnerabilidade do bloqueador de tela no Astra Linux Special Edition (Smolensk)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Neste artigo, vamos abordar uma vulnerabilidade muito interessante no sistema operacional \"nacional\" Astra Linux, e assim, vamos come\u00e7ar...<\/p>\n

\"Vulnerabilidade<\/a><\/noindex>
\nAstra Linux \u00e9 um sistema operacional de uso espec\u00edfico baseado no n\u00facleo Linux, criado para a prote\u00e7\u00e3o abrangente de informa\u00e7\u00f5es e a constru\u00e7\u00e3o de sistemas automatizados seguros.<\/p>\n

O fabricante desenvolve as vers\u00f5es b\u00e1sicas do Astra Linux \u2014 Common Edition (uso geral) e sua modifica\u00e7\u00e3o Special Edition (uso especial):<\/p>\n

    \n
  1. a edi\u00e7\u00e3o de uso geral \u2014 Common Edition \u2014 \u00e9 destinada a pequenas e m\u00e9dias empresas, institui\u00e7\u00f5es educacionais;<\/li>\n
  2. a edi\u00e7\u00e3o de uso especial \u2014 Special Edition \u2014 \u00e9 voltada para sistemas automatizados em execu\u00e7\u00e3o segura, processando informa\u00e7\u00f5es com classifica\u00e7\u00e3o de segredo \"absolutamente secreto\" inclusiva.<\/li>\n<\/ol>\n

    \nInicialmente, a vulnerabilidade no bloqueador de tela foi descoberta no sistema Astra Linux Common Edition v2.12, ela se manifesta quando o computador est\u00e1 em estado bloqueado e, se nesse momento for feita uma altera\u00e7\u00e3o na resolu\u00e7\u00e3o da tela. Em particular, em ambientes virtuais (VMware, Oracle VirtualBox), ocorre a exibi\u00e7\u00e3o completa do conte\u00fado da \u00e1rea de trabalho sem passar pela autoriza\u00e7\u00e3o. <\/p>\n

    Essa vulnerabilidade tamb\u00e9m foi apresentada com sucesso no Astra Linux Special Edition v1.5. \u00c9 poss\u00edvel que haja uma forma de obter informa\u00e7\u00f5es de m\u00e1quinas f\u00edsicas, utilizando v\u00e1rios monitores com diferentes resolu\u00e7\u00f5es.<\/p>\n

    Abaixo, est\u00e1 um v\u00eddeo com uma demonstra\u00e7\u00e3o no Astra Linux Special Edition v1.5 (a esta\u00e7\u00e3o foi bloqueada e a extens\u00e3o da janela foi alterada):<\/p>\n

    \"Vulnerabilidade
    \n
    \nCaptura de tela do v\u00eddeo (fragmento de dados na \u00e1rea de trabalho):<\/p>\n

    \"Vulnerabilidade
    \n
    \nEm conclus\u00e3o, pode-se afirmar que a explora\u00e7\u00e3o dessa brecha permitir\u00e1 acessar silenciosamente o conte\u00fado de documentos (inclusive de acesso restrito) abertos na \u00e1rea de trabalho da esta\u00e7\u00e3o bloqueada com Astra Linux, o que resultar\u00e1 no vazamento desse tipo de informa\u00e7\u00e3o.
    \n
    Fonte:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026 Astra Linux \u2014 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Astra Linux \u2014 Common Edition (\u043e\u0431\u0449\u0435\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f) \u0438 \u0435\u0451 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f Special Edition […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36029","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidade do bloqueador de tela no Astra Linux Special Edition (Smolensk) | ProHoster","description":"Neste artigo, vamos abordar uma vulnerabilidade muito interessante no sistema operacional \"nacional\" Astra Linux, e assim, vamos come\u00e7ar...","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u044d\u043a\u0440\u0430\u043d\u0430 \u0432 Astra Linux Special Edition (\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a) | ProHoster","og:description":"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:14+00:00","article:modified_time":"2019-10-31T19:09:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36029","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:43:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:52:24","updated":"2026-01-22 01:43:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=36029"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36029\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=36029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=36029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=36029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}