{"id":117002,"date":"2024-07-06T21:43:04","date_gmt":"2024-07-06T19:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan"},"modified":"2024-07-06T21:43:04","modified_gmt":"2024-07-06T19:43:04","slug":"v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","title":{"rendered":"\u00cen dark web a ap\u0103rut informa\u021bia c\u0103 GRUB a fost compromis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"\u00cen <\/p>\n

Exploatul pentru vulnerabilitatea 0day este deja disponibil pe forumurile corespunz\u0103toare.<\/p>\n

Pe 21 iunie, pe unul dintre forumuri, a ap\u0103rut informa\u021bia despre v\u00e2nzarea unui exploit pentru vulnerabilitatea de tip zero-day \u00een bootloaderul GRUB de Linux, care permite cre\u0219terea privilegiilor locale (LPE).<\/p>\n

Potrivit Dark Web Intelligence, infractorul sus\u021bine c\u0103 a descoperit o vulnerabilitate \u00een GRUB, care permite ocolirea mecanismelor de autentificare \u0219i ob\u021binerea drepturilor de root \u00een sistem.<\/p>\n

Conform unui mesaj al unui participant pe un forum de dark web sub numele de \u201eCas\u201d, vulnerabilitatea afecteaz\u0103 GRUB \u2014 un component critic al majorit\u0103\u021bii sistemelor Linux, care gestioneaz\u0103 procesul de bootare, permi\u021b\u00e2nd atacatorilor s\u0103 instaleze malware ascuns \u0219i persistent, a c\u0103rui descoperire \u0219i eliminare poate fi foarte problematica. Exploatul este v\u00e2ndut la pre\u021bul de 90.000 de dolari.<\/p>\n

Este demn de remarcat c\u0103 GRUB a fost deja \u021binta atacurilor \u00een trecut. De exemplu, \u00een 2015 a fost descoperit\u0103 vulnerabilitatea CVE-2015-8370, care permitea ocolirea autentific\u0103rii prin ap\u0103sarea tastei backspace de 28 de ori \u00een timpul introducerii numelui utilizatorului \u00een GRUB. Aceast\u0103 vulnerabilitate a afectat versiunile GRUB de la 1.98 la 2.02 \u0219i a fost utilizat\u0103 pe scar\u0103 larg\u0103 p\u00e2n\u0103 la lansarea unei corec\u021bii. Iar \u00een 2020 a fost descoperit\u0103 o alt\u0103 vulnerabilitate \u2014 CVE-2020-10713, cunoscut\u0103 \u0219i sub numele de BootHole, care permitea instalarea de malware \u00een timpul procesului de bootare.<\/p>\n

Distribu\u021biile principale de Linux, cum ar fi Debian, RedHat \u0219i Ubuntu, au emis rapid recomand\u0103ri \u0219i corec\u021bii pentru vulnerabilit\u0103\u021bile anterioare GRUB \u0219i, probabil, vor ac\u021biona similar \u0219i de aceast\u0103 dat\u0103, \u00eens\u0103 problema este agravat\u0103 de faptul c\u0103 vulnerabilitatea a fost descoperit\u0103 de infractori, nu de hackeri etici. Aceasta \u00eenseamn\u0103 c\u0103 identificarea \u0219i corectarea ei de c\u0103tre cercet\u0103torii de securitate ar putea dura semnificativ mai mult.<\/p>\n

Sursa: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0434\u0430\u0451\u0442\u0441\u044f \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445. 21 \u0438\u044e\u043d\u044f \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0444\u043e\u0440\u0443\u043c\u043e\u0432 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 GRUB-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE). \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Dark Web Intelligence, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GRUB, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":117003,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117002","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen dark web a ap\u0103rut informa\u021bia c\u0103 GRUB a fost compromis | ProHoster","description":"Exploatul pentru vulnerabilitatea 0day este deja.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f, \u0447\u0442\u043e GRUB \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d | ProHoster","og:description":"\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-06T19:43:04+00:00","article:modified_time":"2024-07-06T19:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117002","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:39:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:39:19","updated":"2026-01-23 03:39:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/117002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=117002"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/117002\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/117003"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=117002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=117002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=117002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}