{"id":112094,"date":"2023-12-09T21:10:14","date_gmt":"2023-12-09T19:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish"},"modified":"2023-12-09T21:10:14","modified_gmt":"2023-12-09T19:10:14","slug":"uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","title":{"rendered":"Vulnerabilitate \u00een stivele Bluetooth Linux, macOS, Android \u0219i iOS, care permite substituirea ap\u0103s\u0103rilor de taste","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Marc Newlin, care acum \u0219apte ani a detectat vulnerabilitatea MouseJack, a dezv\u0103luit informa\u021bii despre o vulnerabilitate similar\u0103 (CVE-2023-45866) care afecteaz\u0103 stivele Bluetooth Android, Linux, macOS \u0219i iOS, permi\u021b\u00e2nd substituirea tast\u0103rilor prin simularea activit\u0103\u021bii unui dispozitiv de intrare conectat prin Bluetooth. Av\u00e2nd acces la intr\u0103rile de la tastatur\u0103, un atacator poate executa ac\u021biuni precum lansarea de comenzi \u00een sistem, instalarea de aplica\u021bii \u0219i redirec\u021bionarea mesajelor. <\/p>\n

Vulnerabilitatea este cauzat\u0103 de faptul c\u0103 driverele HID (Human Interface Device) gazd\u0103 pentru dispozitivele Bluetooth au un mod care permite unui dispozitiv periferic \u00eendep\u0103rtat s\u0103 creeze \u0219i s\u0103 stabileasc\u0103 conexiuni criptate f\u0103r\u0103 autentificare. Printre altele, dispozitivele conectate \u00een acest mod pot transmite mesaje de tastatur\u0103, iar stiva HID le va prelucra, ceea ce permite organizarea unui atac de substitu\u021bie HID la distan\u021b\u0103, efectuat f\u0103r\u0103 implicarea utilizatorului. Atacul poate fi realizat de c\u0103tre un atacator aflat la o distan\u021b\u0103 de p\u00e2n\u0103 la 100 de metri de victim\u0103. <\/p>\n

Mecanismul de asociere a dispozitivelor f\u0103r\u0103 autentificare este definit \u00een specifica\u021bia Bluetooth \u0219i, \u00een func\u021bie de set\u0103rile stivei Bluetooth, permite conectarea unui dispozitiv f\u0103r\u0103 confirmarea utilizatorului. \u00cen Linux, c\u00e2nd se utilizeaz\u0103 stiva Bluetooth BlueZ pentru asocierea ocult\u0103, adaptorul Bluetooth trebuie s\u0103 fie \u00een modul de descoperire \u0219i conectare. \u00cen Android, este suficient s\u0103 activa\u021bi suportul pentru Bluetooth. \u00cen iOS \u0219i macOS, pentru a efectua atacul, trebuie s\u0103 fie activat Bluetooth \u0219i s\u0103 fie conectat\u0103 o tastatur\u0103 wireless. <\/p>\n

Posibilitatea de substitu\u021bie a intr\u0103rii a fost demonstrat\u0103 \u00een Ubuntu 18.04, 20.04, 22.04 \u0219i 23.10 cu stiva Bluetooth bazat\u0103 pe pachetul Bluez. ChromeOS nu este vulnerabil, deoarece set\u0103rile stivei Bluetooth nu permit conexiuni f\u0103r\u0103 autentificare. \u00cen Android, vulnerabilitatea afecteaz\u0103 dispozitivele cu versiuni ale platformei de la 4.2.2 p\u00e2n\u0103 la 14. \u00cen macOS, vulnerabilitatea a fost demonstrat\u0103 pe MacBook Pro 2022 cu CPU Apple M2 \u0219i macOS 13.3.3 \u0219i MacBook Air 2017 cu CPU Intel \u0219i macOS 12.6.7. \u00cen iOS, vulnerabilitatea a fost demonstrat\u0103 pe iPhone SE cu iOS 16.6. Activarea modului Lockdown nu protejeaz\u0103 \u00eempotriva atacurilor pe macOS \u0219i iOS. <\/p>\n

\u00cen Linux, vulnerabilitatea a fost eliminat\u0103 \u00een baza de cod Bluez prin setarea op\u021biunii \"ClassicBondedOnly\" la \"true\", activ\u00e2nd modul sigur care permite stabilirea conexiunilor doar dup\u0103 asociere. Anterior, valoarea era setat\u0103 la \"false\", ceea ce, cu pre\u021bul unei reduceri a securit\u0103\u021bii, rezolva problemele de compatibilitate cu unele dispozitive de intrare. <\/p>\n

\u00cen stiva Bluetooth Fluoride, utilizat\u0103 \u00een cele mai recente versiuni de Android, vulnerabilitatea a fost remediat\u0103 prin aplicarea obligatorie a autentific\u0103rii pentru toate conexiunile criptate. Corec\u021biile pentru Android sunt disponibile doar pentru ramurile 11-14. Pentru dispozitivele Pixel, vulnerabilitatea a fost remediat\u0103 \u00een actualizarea firmware-ului din decembrie. Pentru versiunile Android de la 4.2.2 la 10, vulnerabilitatea r\u0103m\u00e2ne nerezolvat\u0103.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0432\u043e\u0434\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 Bluetooth. \u0418\u043c\u0435\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u043d\u043e\u043c\u0443 \u0432\u0432\u043e\u0434\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043a\u0430\u043a \u0437\u0430\u043f\u0443\u0441\u043a \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112094","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een stivele Bluetooth Linux, macOS, Android \u0219i iOS, care permite substituirea ap\u0103s\u0103rilor de taste | ProHoster","description":"Marc Newlin, care a descoperit vulnerabilitatea MouseJack acum \u0219apte ani, a dezv\u0103luit informa\u021bii despre o vulnerabilitate similar\u0103 (CVE-2023-45866) care afecteaz\u0103 stivele Bluetooth Android, Linux, macOS \u0219i iOS, permi\u021b\u00e2nd accesul.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0430\u0445 Linux, macOS, Android \u0438 iOS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 | ProHoster","og:description":"\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios-dopuskayushhaya-podstanovku-nazhatij-klavish","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-09T19:10:14+00:00","article:modified_time":"2023-12-09T19:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112094","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112094"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112094\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}