Informa\u021biile privind vulnerabilitatea (CVE-2023-4001) \u00een patch-urile pentru bootloaderul GRUB2, preg\u0103tite de Red Hat, au fost dezv\u0103luite. Vulnerabilitatea permite, pe multe sisteme cu UEFI, ocolirea verifica\u0306rii parolei stabilite \u00een GRUB2 pentru a restric\u021biona accesul la meniul de \u00eenc\u0103rcare sau la linia de comand\u0103 a bootloader-ului. Aceast\u0103 vulnerabilitate este cauzat\u0103 de o modificare ad\u0103ugat\u0103 de Red Hat \u00een pachetul GRUB2 livrat cu RHEL \u0219i Fedora Linux. Problema nu exist\u0103 \u00een proiectul principal GRUB2 \u0219i afecteaz\u0103 doar distribu\u021biile care au aplicat patch-uri suplimentare de la Red Hat. <\/p>\n
Problema este cauzat\u0103 de o eroare \u00een logica utiliz\u0103rii UUID pentru a g\u0103si bootloaderul dispozitivului cu fi\u0219ierul de configurare (de exemplu, \"\/boot\/efi\/EFI\/fedora\/grub.cfg\"), care con\u021bine hash-ul parolei. Pentru a ocoli autentificarea, un utilizator cu acces fizic la computer poate conecta un dispozitiv de stocare extern, cum ar fi un USB Flash, set\u00e2ndu-i UUID-ul s\u0103 corespund\u0103 identificatorului parti\u021biei de boot \\\/boot al sistemului atacat. <\/p>\n
Multe sisteme UEFI trateaz\u0103 mai \u00eent\u00e2i dispozitivele externe \u0219i le plaseaz\u0103 pe lista de dispozitive detectate \u00eenaintea unit\u0103\u021bilor interne, astfel c\u0103 partici\u021bia \\\/boot preg\u0103tit\u0103 de atacator va avea prioritate \u00een procesare \u0219i, \u00een consecin\u021b\u0103, din aceast\u0103 parti\u021bie GRUB2 va \u00eencerca s\u0103 \u00eencarce fi\u0219ierul de configurare. \u00cen procesul de c\u0103utare a parti\u021biei folosind comanda \"search\" \u00een GRUB2 se determin\u0103 doar prima coresponden\u021b\u0103 a UUID-ului, dup\u0103 care c\u0103utarea se opre\u0219te. Dac\u0103 fi\u0219ierul principal de configurare nu este g\u0103sit \u00een partici\u021bia specificat\u0103, GRUB2 va afi\u0219a un prompt de comand\u0103, permi\u021b\u00e2nd controlul complet asupra procesului de boot subsequent. <\/p>\n
Pentru a determina UUID-ul unei parti\u021bii, un utilizator local f\u0103r\u0103 privilegii poate folosi utilitarul \"lsblk\", dar un utilizator extern, f\u0103r\u0103 acces la sistem, dar capabil s\u0103 observe procesul de boot, \u00een unele distribu\u021bii poate determina UUID-ul din mesajele de diagnostic afi\u0219ate \u00een timpul \u00eenc\u0103rc\u0103rii. Vulnerabilitatea a fost remediat\u0103 de Red Hat prin ad\u0103ugarea unei noi argumenta\u021bii la comanda \"search\", care leag\u0103 opera\u021biunea de scanare a UUID-ului doar de dispozitivele de stocare folosite pentru a lansa bootloader-ul (adic\u0103 parti\u021bia \\\/boot trebuie s\u0103 fie pe acela\u0219i disk cu parti\u021bia EFI de sistem). \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-4001) \u0432 \u043f\u0430\u0442\u0447\u0430\u0445 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443 GRUB2, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Red Hat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 UEFI \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432 GRUB2 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u043c\u0443 \u043c\u0435\u043d\u044e \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Red Hat \u0432 \u043f\u0430\u043a\u0435\u0442 \u0441 GRUB2, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u0432 RHEL \u0438 Fedora Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112924","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een patch-urile Red Hat pentru bootloader-ul GRUB2, care permite ocolirea verific\u0103rii parolei | ProHoster","description":"Informa\u021biile despre vulnerabilitatea (CVE-2023-4001) \u00een patch-urile pentru bootloader-ul GRUB2, preg\u0103tite de compania Red Hat, au fost dezv\u0103luite.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-patchah-red-hat-k-zagruzchiku-grub2-pozvolyayushhaya-obojti-proverku-parolya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u0442\u0447\u0430\u0445 Red Hat \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0430\u0440\u043e\u043b\u044f | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-4001) \u0432 \u043f\u0430\u0442\u0447\u0430\u0445 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443 GRUB2, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Red Hat.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-patchah-red-hat-k-zagruzchiku-grub2-pozvolyayushhaya-obojti-proverku-parolya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-15T15:28:03+00:00","article:modified_time":"2024-01-15T15:28:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112924"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112924\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"