Compania ARM a dezv\u0103luit detalii despre trei vulnerabilit\u0103\u021bi \u00een driverele pentru GPU-urile sale, folosite \u00een Android, ChromeOS \u0219i distribu\u021biile Linux. Vulnerabilit\u0103\u021bile permit unui utilizator local, f\u0103r\u0103 privilegii, s\u0103 execute cod cu permisiuni de kernel. \u00cen raportul din octombrie despre problemele de securitate ale platformei Android se men\u021bioneaz\u0103 c\u0103, p\u00e2n\u0103 la apari\u021bia remedierii, una dintre vulnerabilit\u0103\u021bi (CVE-2023-4211) a fost deja exploatat\u0103 de atacatori \u00een exploit-uri de tip 0-day. De exemplu, vulnerabilitatea poate fi utilizat\u0103 \u00een aplica\u021bii malware distribuite prin surse dubioase pentru a ob\u021bine acces complet la sistem \u0219i pentru a instala componente care supravegheaz\u0103 utilizatorul. <\/p>\n
Vulnerabilit\u0103\u021bile g\u0103site: <\/p>\n
Remedierea este, de asemenea, propus\u0103 \u00een cadrul actualiz\u0103rilor din septembrie pentru versiunile Chrome OS 114\/115\/116 \u0219i actualizarea din octombrie pentru Android. Modelele vulnerabile de GPU sunt utilizate \u00een smartphone-urile Google Pixel 7, Samsung S20 \u0219i S21, Motorola Edge 40, OnePlus Nord 2, Asus ROG Phone 6, Redmi Note 11, 12, Honor 70 Pro, RealMe GT, Xiaomi 12 Pro, Oppo Find X5 Pro, Reno 8 Pro \u0219i unele dispozitive cu cipuri Mediatek. <\/p>\n
\u00cen total, raportul din octombrie despre vulnerabilit\u0103\u021bile din Android men\u021bioneaz\u0103 53 de vulnerabilit\u0103\u021bi, dintre care 5 au fost clasificate cu un nivel critic de gravitate, iar celelalte \u2014 cu un nivel \u00eenalt de gravitate. Problemele critice permit efectuarea unui atac la distan\u021b\u0103 pentru a rula codul dorit \u00een sistem. Problemele marcate ca fiind periculoase permit, prin manipularea aplica\u021biilor locale, executarea codului \u00een contextul unui proces privilegiat. Trei probleme critice (CVE-2023-24855, CVE-2023-28540 \u0219i CVE-2023-33028) au fost identificate \u00een componentele proprietare Qualcomm, iar dou\u0103 (CVE-2023-40129, CVE-2023-4863) \u00een sistem (\u00een libwebp \u0219i \u00een stiva Bluetooth). \u00cen total, au fost identificate 5 vulnerabilit\u0103\u021bi \u00een componentele ARM, 3 \u00een MediaTek, 1 \u00een Unisoc \u0219i 17 \u00een Qualcomm (raportul Qualcomm). Dou\u0103 vulnerabilit\u0103\u021bi (una \u00een GPU ARM \u0219i una \u00een libwebp) sunt marcate ca fiind deja utilizate de atacatori \u00een exploiturile lor (0-day). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ARM \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 GPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 Android, ChromeOS \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-4211) \u0443\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110410","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bi \u00een driverul GPU ARM, deja folosite pentru a efectua atacuri | ProHoster","description":"Compania ARM a dezv\u0103luit informa\u021bii despre trei vulnerabilit\u0103\u021bi \u00een driverele pentru GPU-urile sale, utilizate \u00een Android, ChromeOS \u0219i distribu\u021bii Linux.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-drajvere-k-gpu-arm-uzhe-primenyaemye-dlya-soversheniya-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043a GPU ARM, \u0443\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ARM \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 GPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 Android, ChromeOS \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-drajvere-k-gpu-arm-uzhe-primenyaemye-dlya-soversheniya-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-04T06:10:47+00:00","article:modified_time":"2023-10-04T06:10:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=110410"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110410\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=110410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=110410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=110410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"