{"id":112103,"date":"2023-12-10T09:10:17","date_gmt":"2023-12-10T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios"},"modified":"2023-12-10T09:10:17","modified_gmt":"2023-12-10T07:10:17","slug":"uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","title":{"rendered":"Vulnerabilitate \u00een stivele Bluetooth de Linux, macOS, Android \u0219i iOS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/p>\n

Marc Newlin, care a descoperit vulnerabilitatea MouseJack<\/a> cu \u0219apte ani \u00een urm\u0103, a dezv\u0103luit informa\u021bii despre o vulnerabilitate similar\u0103 (CVE-2023-45866)<\/a>, care afecteaz\u0103 stivele Bluetooth pentru Android, Linux, macOS \u0219i iOS. Aceast\u0103 vulnerabilitate permite falsificarea ap\u0103s\u0103rilor de taste prin simularea activit\u0103\u021bii unui dispozitiv de intrare conectat prin Bluetooth. Odat\u0103 ce are acces la intrarea de la tastatur\u0103, un atacator poate efectua diverse ac\u021biuni, cum ar fi rularea de comenzi \u00een sistem, instalarea de aplica\u021bii \u0219i redirec\u021bionarea mesajelor.<\/p>\n

<\/noindex><\/noindex> <\/p>\n

Vulnerabilitatea este cauzat\u0103 de faptul c\u0103 driverele gazdelor HID (Dispozitiv de Interfa\u021b\u0103 Uman\u0103) pentru dispozitivele Bluetooth au un mod care permite unui dispozitiv periferic la distan\u021b\u0103 s\u0103 creeze \u0219i s\u0103 stabileasc\u0103 conexiuni criptate f\u0103r\u0103 autentificare. Dispozitivele conectate pot transmite mesaje de tastatur\u0103, iar stiva HID le proceseaz\u0103, ceea ce deschide posibilitatea unei atacuri de falsificare a mesajelor HID, realizate f\u0103r\u0103 implicarea utilizatorului. Aceast\u0103 atac\u0103 poate fi realizat\u0103 de la o distan\u021b\u0103 de p\u00e2n\u0103 la 100 de metri de victim\u0103.<\/p>\n

Mecanismul de asociere a dispozitivelor f\u0103r\u0103 autentificare este definit \u00een specifica\u021bia Bluetooth \u0219i, \u00een func\u021bie de set\u0103rile stivei Bluetooth, permite conectarea unui dispozitiv f\u0103r\u0103 confirmarea utilizatorului. De exemplu, \u00een Linux, utiliz\u00e2nd stiva Bluetooth BlueZ, pentru asocierea din umbr\u0103, adaptorul Bluetooth trebuie s\u0103 fie \u00een modul de descoperire \u0219i conectare. \u00cen Android, este suficient s\u0103 activezi suportul Bluetooth. \u00cen iOS \u0219i macOS, pentru o atac\u0103 reu\u0219it\u0103, Bluetooth trebuie s\u0103 fie activat \u0219i un keyboard wireless s\u0103 fie conectat.<\/p>\n

Posibilitatea de falsificare a intr\u0103rii a fost demonstrat\u0103 \u00een Ubuntu 18.04, 20.04, 22.04 \u0219i 23.10 cu stiva Bluetooth bazat\u0103 pe pachetul BlueZ. ChromeOS nu este vulnerabil, deoarece set\u0103rile sale de stiv\u0103 Bluetooth nu permit conexiuni f\u0103r\u0103 autentificare. \u00cen Android, vulnerabilitatea afecteaz\u0103 dispozitive cu versiuni ale platformei de la 4.2.2 la 14. \u00cen macOS, vulnerabilitatea a fost demonstrat\u0103 pe MacBook Pro 2022 cu procesor Apple M2 \u0219i macOS 13.3.3, precum \u0219i pe MacBook Air 2017 cu procesor Intel \u0219i macOS 12.6.7. \u00cen iOS, vulnerabilitatea a fost demonstrat\u0103 pe iPhone SE cu iOS 16.6. Activarea modului Lockdown nu ofer\u0103 protec\u021bie \u00eempotriva atacului pe macOS \u0219i iOS.<\/p>\n

<\/p>\n

\u00cen Linux, vulnerabilitatea a fost remediat\u0103<\/a> \u00een codul surs\u0103 Bluez prin setarea op\u021biunii «ClassicBondedOnly» la «true», activ\u00e2nd modul sigur, care permite stabilirea conexiunilor doar dup\u0103 asociere. Anterior, a fost setat la «false», ceea ce, pentru a asigura compatibilitatea cu unele dispozitive de intrare, a redus nivelul de securitate.<\/p>\n

<\/noindex> <\/p>\n

\u00cen stiva Bluetooth Fluoride, utilizat\u0103 \u00een versiunile recente de Android, vulnerabilitatea a fost eliminat\u0103<\/a> prin aplicarea obligatorie a autentific\u0103rii pentru toate conexiunile criptate. Corec\u021biile pentru Android au fost lansate numai pentru ramurile 11-14. Pentru dispozitivele Pixel, vulnerabilitatea a fost eliminat\u0103 \u00een actualizarea firmware-ului din decembrie. Pentru versiuni Android de la 4.2.2 la 10, vulnerabilitatea r\u0103m\u00e2ne nerezolvat\u0103.<\/p>\n

<\/noindex><\/p>\n

Sursa: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-45866), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Bluetooth-\u0441\u0442\u0435\u043a\u0438 Android, Linux, macOS \u0438 iOS. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u043f\u0443\u0442\u0435\u043c \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0432\u043e\u0434\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e Bluetooth. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u043d\u043e\u043c\u0443 \u0432\u0432\u043e\u0434\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112103","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een stivele Bluetooth Linux, macOS, Android \u0219i iOS | ProHoster","description":"Marc Newlin, care a descoperit vulnerabilitatea MouseJack acum \u0219apte ani, a dezv\u0103luit informa\u021bii despre","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0430\u0445 Linux, macOS, Android \u0438 iOS | ProHoster","og:description":"\u041c\u0430\u0440\u043a \u041d\u044c\u044e\u043b\u0438\u043d (Marc Newlin), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MouseJack \u0441\u0435\u043c\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-bluetooth-stekah-linux-macos-android-i-ios","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-10T07:10:17+00:00","article:modified_time":"2023-12-10T07:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112103"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112103\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}