{"id":99320,"date":"2021-03-03T16:22:39","date_gmt":"2021-03-03T14:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot"},"modified":"2021-03-03T16:22:39","modified_gmt":"2021-03-03T14:22:39","slug":"trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","title":{"rendered":"Tvrdo odstr\u00e1nite\u013en\u00e9 zranite\u013enosti v GRUB2, umo\u017e\u0148uj\u00face ob\u00eds\u0165 UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Bola odhalen\u00e1 inform\u00e1cia o 8 zranite\u013enostiach v na\u010d\u00edtava\u010di GRUB2, ktor\u00e9 umo\u017e\u0148uj\u00fa ob\u00eds\u0165 mechanizmus UEFI Secure Boot a dosiahnu\u0165 spustenie neoveren\u00e9ho k\u00f3du, napr\u00edklad implement\u00e1ciu malv\u00e9ru funguj\u00faceho na \u00farovni na\u010d\u00edtava\u010da alebo jadra.      <\/p>\n<p>Pripom\u00edname, \u017ee vo v\u00e4\u010d\u0161ine Linux distrib\u00faci\u00ed pre overen\u00fa bootovanie v re\u017eime UEFI Secure Boot sa pou\u017e\u00edva mal\u00e1 vrstva shim, overen\u00e1 digit\u00e1lnym podpisom spolo\u010dnosti Microsoft. T\u00e1to vrstva overuje GRUB2 vlastn\u00fdm certifik\u00e1tom, \u010do umo\u017e\u0148uje v\u00fdvoj\u00e1rom distrib\u00faci\u00ed neoverova\u0165 ka\u017ed\u00fa aktualiz\u00e1ciu jadra a GRUB v spolo\u010dnosti Microsoft. Zranite\u013enosti v GRUB2 umo\u017e\u0148uj\u00fa dosiahnu\u0165 vykon\u00e1vanie vlastn\u00e9ho k\u00f3du po \u00faspe\u0161nej verifik\u00e1cii shim, ale pred na\u010d\u00edtan\u00edm opera\u010dn\u00e9ho syst\u00e9mu, a vkliesni\u0165 sa do re\u0165azca d\u00f4very pri akt\u00edvnom re\u017eime Secure Boot, pri\u010dom z\u00edskaj\u00fa \u00fapln\u00fa kontrolu nad \u010fal\u0161\u00edm procesom bootovania, vr\u00e1tane na\u010d\u00edtania in\u00e9ho opera\u010dn\u00e9ho syst\u00e9mu, modifik\u00e1cie komponentov opera\u010dn\u00e9ho syst\u00e9mu a ob\u00eddenia ochrany Lockdown.     <\/p>\n<p>Tak ako v pr\u00edpade vla\u0148aj\u0161ej zranite\u013enosti BootHole, na blokovanie probl\u00e9mu nie je dostato\u010dn\u00e9 aktualizova\u0165 na\u010d\u00edtava\u010d, preto\u017ee \u00fato\u010dn\u00edk, bez oh\u013eadu na pou\u017e\u00edvan\u00fd opera\u010dn\u00fd syst\u00e9m, m\u00f4\u017ee na komprim\u00e1ciu UEFI Secure Boot pou\u017ei\u0165 bootovacie m\u00e9dium so starou zranite\u013enou verziou GRUB2, overenou digit\u00e1lnym podpisom. Probl\u00e9m sa rie\u0161i iba aktualiz\u00e1ciou zoznamu odvolan\u00fdch certifik\u00e1tov (dbx, zoznam odvolania UEFI), ale v tomto pr\u00edpade sa strat\u00ed mo\u017enos\u0165 pou\u017e\u00edva\u0165 star\u00e9 in\u0161tala\u010dn\u00e9 m\u00e9di\u00e1 s Linuxom.         <\/p>\n<p>Na syst\u00e9moch s firmv\u00e9rmi, v ktor\u00fdch bol aktualizovan\u00fd zoznam odvolan\u00fdch certifik\u00e1tov, v re\u017eime UEFI Secure Boot sa bud\u00fa da\u0165 na\u010d\u00edta\u0165 iba aktualizovan\u00e9 zostavy distrib\u00faci\u00ed Linux. Distrib\u00facie bud\u00fa musie\u0165 aktualizova\u0165 in\u0161tal\u00e1tory, na\u010d\u00edtava\u010de, bal\u00edky s jadrom, firmv\u00e9r fwupd a shim vrstvu, pri\u010dom pre nich vygeneruj\u00fa nov\u00e9 digit\u00e1lne podpisy. Pou\u017e\u00edvatelia bud\u00fa musie\u0165 aktualizova\u0165 in\u0161tala\u010dn\u00e9 obrazy a in\u00e9 bootovacie m\u00e9di\u00e1, ako aj na\u010d\u00edta\u0165 zoznam odvolan\u00fdch certifik\u00e1tov (dbx) do firmv\u00e9ru UEFI. Pred aktualiz\u00e1ciou dbx v UEFI zost\u00e1va syst\u00e9m zranite\u013en\u00fd bez oh\u013eadu na in\u0161tal\u00e1ciu aktualiz\u00e1ci\u00ed v OS. Stav odstr\u00e1nenia zranite\u013enost\u00ed je mo\u017en\u00e9 hodnoti\u0165 na t\u00fdchto str\u00e1nkach: Ubuntu, SUSE, RHEL, Debian.    <\/p>\n<p>Na vyrie\u0161enie probl\u00e9mov, ktor\u00e9 vznikaj\u00fa pri \u0161\u00edren\u00ed odvolan\u00fdch certifik\u00e1tov, sa v bud\u00facnosti pl\u00e1nuje implement\u00e1cia mechanizmu SBAT (UEFI Secure Boot Advanced Targeting), ktor\u00e9ho podpora je zabezpe\u010den\u00e1 pre GRUB2, shim a fwupd. Od nasleduj\u00facich aktualiz\u00e1ci\u00ed sa bude pou\u017e\u00edva\u0165 namiesto funkcionality poskytovanej bal\u00edkom dbxtool. SBAT bol vyvinut\u00fd v spolupr\u00e1ci s Microsoftom a predpoklad\u00e1 pridanie nov\u00fdch metad\u00e1t do vykonate\u013en\u00fdch s\u00faborov komponentov UEFI, ktor\u00e9 obsahuj\u00fa inform\u00e1cie o v\u00fdrobcovi, produkte, komponente a verzii. Tieto metad\u00e1ta s\u00fa digit\u00e1lne podp\u00edsan\u00e9 a m\u00f4\u017eu by\u0165 navy\u0161e zahrnut\u00e9 do zoznamov povolen\u00fdch alebo zak\u00e1zan\u00fdch komponentov pre UEFI Secure Boot. T\u00fdmto sp\u00f4sobom SBAT umo\u017en\u00ed manipul\u00e1ciu s \u010d\u00edslami verzi\u00ed komponentov pri ich odvolan\u00ed bez potreby regener\u00e1cie k\u013e\u00fa\u010dov pre Secure Boot a bez vytv\u00e1rania nov\u00fdch podpisov pre jadro, shim, grub2 a fwupd.             <\/p>\n<p>Odhalen\u00e9 zranite\u013enosti:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2020-14372 \u2014 pomocou pr\u00edkazu acpi v GRUB2 privilegovan\u00fd pou\u017e\u00edvate\u013e lok\u00e1lneho syst\u00e9mu m\u00f4\u017ee na\u010d\u00edta\u0165 modifikovan\u00e9 ACPI tabu\u013eky, umiestnen\u00edm SSDT (Secondary System Description Table) do adres\u00e1ra \/boot\/efi a zmenou nastaven\u00ed v grub.cfg. Napriek aktivite re\u017eimu Secure Boot bude navrhnut\u00fd SSDT vykonan\u00fd jadrom a m\u00f4\u017ee by\u0165 vyu\u017eit\u00fd na vypnutie ochrany LockDown, ktor\u00e1 blokuje obch\u00e1dzanie UEFI Secure Boot. V\u00fdsledkom m\u00f4\u017ee by\u0165, \u017ee \u00fato\u010dn\u00edk dosiahne na\u010d\u00edtanie svojho jadra modulu alebo spustenie k\u00f3du prostredn\u00edctvom mechanizmu kexec, bez overenia digit\u00e1lneho podpisu.\n<li class=\"l\"> CVE-2020-25632 \u2014 pr\u00edstup k u\u017e uvo\u013enenej oblasti pam\u00e4te (use-after-free) v implement\u00e1cii pr\u00edkazu rmmod, ktor\u00fd sa prejavuje pri pokuse o vylo\u017eenie ak\u00e9hoko\u013evek modulu bez oh\u013eadu na s\u00favisiace z\u00e1vislosti. Zranite\u013enos\u0165 nevylu\u010duje vytvorenie exploitu, ktor\u00fd m\u00f4\u017ee vies\u0165 k vykonaniu k\u00f3du mimo overenia Secure Boot.\n<li class=\"l\"> CVE-2020-25647 \u2014 z\u00e1pis mimo hranice bufferu vo funkcii grub_usb_device_initialize(), ktor\u00e1 sa vol\u00e1 pri inicializ\u00e1cii USB zariaden\u00ed. Probl\u00e9m m\u00f4\u017ee by\u0165 zneu\u017eit\u00fd pripojen\u00edm \u0161peci\u00e1lne pripraven\u00e9ho USB zariadenia, ktor\u00e9 vy\u017eaduje parametre, ktor\u00fdch ve\u013ekos\u0165 neodpoved\u00e1 ve\u013ekosti bufferu vyhraden\u00e9ho pre USB \u0161trukt\u00fary. \u00dato\u010dn\u00edk m\u00f4\u017ee dosiahnu\u0165 vykonanie k\u00f3du, neoveren\u00e9ho v Secure Boot, prostredn\u00edctvom manipul\u00e1ci\u00ed s USB zariadeniami.\n<li class=\"l\"> CVE-2020-27749 \u2014 prete\u010denie bufferu vo funkcii grub_parser_split_cmdline(), ktor\u00e9 m\u00f4\u017ee by\u0165 vyvolan\u00e9 uveden\u00edm v pr\u00edkazovom riadku GRUB2 premenn\u00fdch v\u00e4\u010d\u0161\u00edch ako 1 KB. Zranite\u013enos\u0165 umo\u017e\u0148uje dosiahnu\u0165 vykonanie k\u00f3du mimo Secure Boot.\n<li class=\"l\"> CVE-2020-27779 \u2014 pr\u00edkaz cutmem umo\u017e\u0148uje \u00fato\u010dn\u00edkovi odstr\u00e1ni\u0165 rozsah adries z pam\u00e4te pre ob\u00eddenie Secure Boot.\n<li class=\"l\"> CVE-2021-3418 \u2014 zmeny v shim_lock vytvorili \u010fal\u0161\u00ed vektor na vyu\u017eitie minuloro\u010dnej zranite\u013enosti CVE-2020-15705. Pri in\u0161tal\u00e1cii certifik\u00e1tu do dbx, ktor\u00fd sa pou\u017e\u00edva na podpisovanie GRUB2, GRUB2 umo\u017enil na\u010d\u00edta\u0165 ak\u00e9ko\u013evek jadro priamo bez overenia podpisu.\n<li class=\"l\"> CVE-2021-20225 \u2014 mo\u017enos\u0165 z\u00e1pisu d\u00e1t mimo bufferu pri sp\u00fa\u0161\u0165an\u00ed pr\u00edkazov s ve\u013emi ve\u013ek\u00fdm po\u010dtom volieb.\n<li class=\"l\"> CVE-2021-20233 \u2014 mo\u017enos\u0165 z\u00e1pisu d\u00e1t mimo hranice bufferu kv\u00f4li nespr\u00e1vnemu v\u00fdpo\u010dtu ve\u013ekosti bufferu pri pou\u017eit\u00ed \u00favodzoviek. Pri v\u00fdpo\u010dte ve\u013ekosti sa predpokladalo, \u017ee na escapeovanie jednej \u00favodzovky s\u00fa potrebn\u00e9 tri znaky, hoci v skuto\u010dnosti s\u00fa potrebn\u00e9 \u0161tyri.    <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54691\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 UEFI Secure Boot \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0430\u044f \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0430 shim, \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e Microsoft. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 GRUB2 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99320","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0422\u0440\u0443\u0434\u043d\u043e\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-03-03T14:22:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-03-03T14:22:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u0164a\u017eko odstr\u00e1nite\u013en\u00e9 zranite\u013enosti v GRUB2, ktor\u00e9 umo\u017e\u0148uj\u00fa ob\u00eds\u0165 UEFI Secure Boot | ProHoster","description":"Zverejnen\u00e9 inform\u00e1cie o 8 zranite\u013enostiach v sp\u00fa\u0161\u0165a\u010di GRUB2, ktor\u00e9 umo\u017e\u0148uj\u00fa ob\u00eds\u0165 mechanizmus UEFI Secure Boot a dosiahnu\u0165 spustenie neoveren\u00e9ho k\u00f3du, napr\u00edklad infikovanie malv\u00e9rom, ktor\u00fd funguje na \u00farovni.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0440\u0443\u0434\u043d\u043e\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-03T14:22:39+00:00","article:modified_time":"2021-03-03T14:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99320","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-03 14:35:57","updated":"2022-09-28 06:13:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=99320"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99320\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=99320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=99320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=99320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}