{"id":105506,"date":"2022-11-09T03:36:39","date_gmt":"2022-11-09T01:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-proshivkah-uefi-pozvolyayushhaya-vypolnit-kod-na-urovne-smm"},"modified":"2022-11-09T03:36:39","modified_gmt":"2022-11-09T01:36:39","slug":"uyazvimost-v-proshivkah-uefi-pozvolyayushhaya-vypolnit-kod-na-urovne-smm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-proshivkah-uefi-pozvolyayushhaya-vypolnit-kod-na-urovne-smm","title":{"rendered":"Vulnerabilitet n\u00eb firmware-t UEFI q\u00eb mund\u00ebson ekzekutimin e kodit n\u00eb nivelin SMM.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Informacioni mbi nj\u00eb dob\u00ebsi (CVE-2021-33164) n\u00eb firmware-t UEFI \u00ebsht\u00eb zbuluar, duke lejuar ekzekutimin e kodit n\u00eb nivelin SMM (System Management Mode), m\u00eb prioritar se niveli i hipervizorit dhe unaza e par\u00eb mbrojt\u00ebse, duke ofruar qasje t\u00eb pakufizuar n\u00eb t\u00eb gjith\u00eb memorjen e sistemit. Dob\u00ebsia, e njohur si RingHopper, \u00ebsht\u00eb e lidhur me mund\u00ebsin\u00eb e kryerjes s\u00eb nj\u00eb sulmi t\u00eb bazuar n\u00eb koh\u00eb p\u00ebrmes DMA (Direct Memory Access) p\u00ebr t\u00eb d\u00ebmtuar memorien n\u00eb kodin q\u00eb ekzekutohet n\u00eb nivelin SMM. Prania e dob\u00ebsis\u00eb \u00ebsht\u00eb konfirmuar n\u00eb firmware-t e Intel, Dell dhe Insyde Software (thuhet se problemi preke 8 prodhues, por 5 t\u00eb tjer\u00eb nuk jan\u00eb zbuluar ende). Firmware-t e AMD, Phoenix dhe Toshiba nuk jan\u00eb t\u00eb prekura nga problemi. <\/p>\n

Eksplorimi i dob\u00ebsive mund t\u00eb kryhet nga sistemi operativ, duke p\u00ebrdorur trajtesat e dob\u00ebta t\u00eb SMI (System Management Interrupt), p\u00ebr aksesin n\u00eb t\u00eb cilat k\u00ebrkohen t\u00eb drejta administratori. Nj\u00eb sulm gjithashtu mund t\u00eb kryhet n\u00ebse ka akses fizik n\u00eb faz\u00ebn e hershme t\u00eb ngarkimit, p\u00ebrpara inicializimit t\u00eb sistemit operativ. P\u00ebr t\u00eb bllokuar k\u00ebt\u00eb problem, p\u00ebrdoruesve t\u00eb Linux u rekomandohet t\u00eb p\u00ebrdit\u00ebsojn\u00eb firmware-n p\u00ebrmes sh\u00ebrbimit LVFS (Linux Vendor Firmware Service), duke p\u00ebrdorur mjetin fwupdmgr (fwupdmgr get-updates; fwupdmgr update) nga paketa fwupd. <\/p>\n

Nevoja p\u00ebr t\u00eb pasur t\u00eb drejtat e administratorit p\u00ebr t\u00eb kryer nj\u00eb sulm e kufizon rrezikun e problemit, por nuk pengon p\u00ebrdorimin e tij si nj\u00eb dob\u00ebsi n\u00eb nivelin e dyt\u00eb, p\u00ebr t\u00eb ruajtur pranin\u00eb e tij pas shfryt\u00ebzimit t\u00eb dob\u00ebsive t\u00eb tjera n\u00eb sistem ose p\u00ebr t\u00eb aplikuar metoda inxhinierie sociale. Q \uc811\uadfc \u0625\u0644\u0649 SMM (Ring -2) lejon ekzekutimin e kodit n\u00eb nj\u00eb nivel q\u00eb nuk kontrollohet nga sistemi operativ, \u00e7ka mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb modifikuar firmware dhe p\u00ebr t\u00eb vendosur n\u00eb SPI Flash kod t\u00eb fsheht\u00eb t\u00eb d\u00ebmsh\u00ebm ose rootkits, t\u00eb paidentifikuara nga sistemi operativ, si dhe p\u00ebr t\u00eb \u00e7aktivizuar verifikimin n\u00eb faz\u00ebn e ngarkimit (UEFI Secure Boot, Intel BootGuard) dhe sulmet ndaj hipervizor\u00ebve p\u00ebr t\u00eb anashkaluar mekanizmat e kontrollit t\u00eb integritetit t\u00eb ambientit virtual. <\/p>\n

Problemi shkaktohet nga nj\u00eb gjendje garash n\u00eb trajtuesin SMI (System Management Interrupt), q\u00eb ndodh n\u00eb momentin mes kontrollit t\u00eb aksesit dhe aksesit n\u00eb SMRAM. P\u00ebr t\u00eb p\u00ebrcaktuar momentin e duhur mes kontrollit t\u00eb gjendjes dhe p\u00ebrdorimit t\u00eb rezultatit t\u00eb kontrollit, mund t\u00eb p\u00ebrdoret analiz\u00eb p\u00ebrmes kanaleve t\u00eb jashtme me ndihm\u00ebn e DMA. Si rezultat, p\u00ebr shkak t\u00eb natyr\u00ebs asinkrone t\u00eb aksesit n\u00eb SMRAM p\u00ebrmes DMA, sulmuesi mund t\u00eb p\u00ebrcaktoj\u00eb momentin e duhur dhe t\u00eb rishkruaj\u00eb p\u00ebrmbajtjen e SMRAM, duke p\u00ebrdorur DMA p\u00ebr t\u00eb anashkaluar API-n\u00eb e trajtuesit SMI. Procesor\u00ebt q\u00eb mb\u00ebshtesin mekanizmat Intel-VT dhe Intel VT-d p\u00ebrfshijn\u00eb mbrojtje nga sulmet DMA, t\u00eb bazuara n\u00eb p\u00ebrdorimin e IOMMU (Input-Output Memory Management Unit), por kjo mbrojtje \u00ebsht\u00eb efektive p\u00ebr bllokimin e sulmeve hardware DMA, t\u00eb kryera me pajisje t\u00eb p\u00ebrgatitura nga sulmuesit, dhe nuk mbron nga sulmet p\u00ebrmes trajtuesve SMI.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-33164) \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 UEFI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM (System Management Mode), \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u043c, \u0447\u0435\u043c \u0440\u0435\u0436\u0438\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0435 \u043a\u043e\u043b\u044c\u0446\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f RingHopper, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 DMA (Direct Memory Access) \u0434\u043b\u044f \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105506","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet n\u00eb firmware UEFI, i cili lejon ekzekutimin e kodit n\u00eb nivelin SMM | ProHoster","description":"Informacioni mbi nj\u00eb vulnerabilitet (CVE-2021-33164) n\u00eb firmware UEFI \u00ebsht\u00eb zbuluar, i cili lejon ekzekutimin e kodit n\u00eb nivelin SMM (System Management Mode), m\u00eb prioritare se \u0440\u0435\u0436\u0438\u043c\u0430 e hipervizorit dhe rrethi zero i mbrojtjes, duke ofruar nj\u00eb akses t\u00eb pakufizuar n\u00eb t\u00eb gjith\u00eb memorin\u00eb sistemike. Vulnerabiliteti, i njohur si RingHopper, \u00ebsht\u00eb i lidhur me mund\u00ebsin\u00eb e kryerjes s\u00eb nj\u00eb sulmi n\u00eb koh\u00eb p\u00ebrmes DMA (Direct Memory Access) p\u00ebr t\u00eb d\u00ebmtuar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-proshivkah-uefi-pozvolyayushhaya-vypolnit-kod-na-urovne-smm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 UEFI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-33164) \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 UEFI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 SMM (System Management Mode), \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u043c, \u0447\u0435\u043c \u0440\u0435\u0436\u0438\u043c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0435 \u043a\u043e\u043b\u044c\u0446\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f RingHopper, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 DMA (Direct Memory Access) \u0434\u043b\u044f \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-proshivkah-uefi-pozvolyayushhaya-vypolnit-kod-na-urovne-smm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-09T01:36:39+00:00","article:modified_time":"2022-11-09T01:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105506"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105506\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}