{"id":105601,"date":"2022-11-16T21:37:02","date_gmt":"2022-11-16T19:37:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dve-uyazvimosti-v-grub2-pozvolyayushhie-obojti-zashhitu-uefi-secure-boot"},"modified":"2022-11-16T21:37:02","modified_gmt":"2022-11-16T19:37:02","slug":"dve-uyazvimosti-v-grub2-pozvolyayushhie-obojti-zashhitu-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dve-uyazvimosti-v-grub2-pozvolyayushhie-obojti-zashhitu-uefi-secure-boot","title":{"rendered":"Dy vulnerabilitete n\u00eb GRUB2, q\u00eb lejojn\u00eb anashkalimin e mbrojtjes UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>jan\u00eb zbuluar informacione rreth dy vulnerabiliteteve n\u00eb nguluesin GRUB2, t\u00eb cilat mund t\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit kur p\u00ebrdoren fonte t\u00eb ve\u00e7anta dhe p\u00ebrpunohen disa sekuenca Unicode. Vulnerabilitetet mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb anashkaluar mekanizmin e verifikimit t\u00eb ngarkes\u00ebs UEFI Secure Boot.        <\/p>\n<p>Vulnerabilitetet e identifikuara:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2022-2601 &#8212; mbushja e buffer-it n\u00eb funksionin grub_font_construct_glyph() gjat\u00eb p\u00ebrpunimit t\u00eb font\u00ebve t\u00eb formatuar posa\u00e7\u00ebrisht n\u00eb formatin pf2, q\u00eb ndodh p\u00ebr shkak t\u00eb llogaritjes s\u00eb gabuar t\u00eb parametrave max_glyph_size dhe alokimit t\u00eb nj\u00eb zone memorje, q\u00eb \u00ebsht\u00eb duksh\u00ebm m\u00eb e vog\u00ebl se ajo q\u00eb nevojitet p\u00ebr vendosjen e glyph-eve.\n<li class=\"l\"> CVE-2022-3775 &#8212; shkruarja p\u00ebrtej zon\u00ebs s\u00eb alokuar t\u00eb memories gjat\u00eb vizatimit t\u00eb disa sekuencave Unicode me nj\u00eb font t\u00eb formatuar posa\u00e7\u00ebrisht. Problemi \u00ebsht\u00eb i pranish\u00ebm n\u00eb kodin p\u00ebrpunues t\u00eb font\u00ebve dhe shkaktohet nga mungesa e verifikimeve t\u00eb duhura p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb e gjer\u00ebssis\u00eb dhe lart\u00ebsis\u00eb s\u00eb glyph-it me madh\u00ebsin\u00eb e bitmap-it t\u00eb disponuesh\u00ebm. Nj\u00eb sulmues mund t\u00eb p\u00ebrshtat\u00eb hyrjen n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb shkaktoj\u00eb shkruarjen e t\u00eb dh\u00ebnave jasht\u00eb kufijve t\u00eb buffer-it t\u00eb alokuar. V\u00ebrehet se, p\u00ebrkund\u00ebr v\u00ebshtir\u00ebsive n\u00eb shfryt\u00ebzimin e k\u00ebsaj cenueshm\u00ebrie, nuk p\u00ebrjashtohet mund\u00ebsia e ekzekutimit t\u00eb kodit.                <\/ul>\n<p> Nj\u00eb rregullim \u00ebsht\u00eb publikuar n\u00eb form\u00ebn e nj\u00eb patch. Statusi i eliminimit t\u00eb vulnerabiliteteve n\u00eb shp\u00ebrndarjet mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Ubuntu, SUSE, RHEL, Fedora, Debian. P\u00ebr t\u00eb zgjidhur problemet n\u00eb GRUB2, thjesht azhurnimi i paket\u00ebs nuk \u00ebsht\u00eb i mjaftuesh\u00ebm; gjithashtu do t\u00eb k\u00ebrkohet krijimi i n\u00ebnshkrimeve t\u00eb reja digjitale t\u00eb brendshme dhe azhurnimi i instalueseve, ngul\u00ebsve, paketave t\u00eb kernel-it, firmware fwupd dhe shim.       <\/p>\n<p>N\u00eb shumic\u00ebn e shp\u00ebrndarjeve Linux, p\u00ebr ngarkimin e verifikuar n\u00eb m\u00ebnyr\u00ebn UEFI Secure Boot p\u00ebrdoret nj\u00eb shtres\u00eb e vog\u00ebl shim, e cila \u00ebsht\u00eb n\u00ebnshkruar me nj\u00eb n\u00ebnshkrim digjital nga Microsoft. Kjo shtres\u00eb verifikon GRUB2 me certifikat\u00ebn e saj, duke lejuar zhvilluesit e shp\u00ebrndarjeve t\u00eb mos n\u00ebnshkruajn\u00eb \u00e7do p\u00ebrdit\u00ebsim t\u00eb b\u00ebrtham\u00ebs dhe GRUB n\u00eb Microsoft. Dob\u00ebsit\u00eb n\u00eb GRUB2 lejojn\u00eb ekzekutimin e kodit t\u00eb tyre n\u00eb nj\u00eb faz\u00eb pas verifikimit t\u00eb suksessh\u00ebm t\u00eb shim, por para se t\u00eb ngarkohet sistemi operativ, duke nd\u00ebrhyr\u00eb n\u00eb zinxhirin e besimit n\u00eb nj\u00eb m\u00ebnyr\u00eb aktive t\u00eb Secure Boot dhe duke marr\u00eb kontrollin e plot\u00eb mbi procesin e m\u00ebtejsh\u00ebm t\u00eb ngarkimit, p\u00ebrfshir\u00eb ngarkimin e nj\u00eb OS tjet\u00ebr, modifikimin e komponent\u00ebve t\u00eb sistemit operativ dhe kalimin e mbrojtjes Lockdown.     <\/p>\n<p>P\u00ebr t\u00eb bllokuar vulnerabilitetin pa t\u00ebrheqjen e n\u00ebnshkrimit dixhital, shp\u00ebrndarjet mund t\u00eb p\u00ebrdorin mekanizmin SBAT (UEFI Secure Boot Advanced Targeting), mb\u00ebshtetje e t\u00eb cilit \u00ebsht\u00eb zbatuar p\u00ebr GRUB2, shim dhe fwupd n\u00eb shumic\u00ebn e shp\u00ebrndarjeve t\u00eb njohura Linux. SBAT-u \u00ebsht\u00eb zhvilluar n\u00eb bashk\u00ebpunim me Microsoft dhe n\u00ebnkupton shtimin n\u00eb skedar\u00ebt ekzekutiv\u00eb t\u00eb komponent\u00ebve UEFI t\u00eb metadatat shtes\u00eb, t\u00eb cilat p\u00ebrfshijn\u00eb informacionin mbi prodhuesin, produktin, komponentin dhe versionin. Metaet e p\u00ebrmendura n\u00ebnshkruhen me nj\u00eb n\u00ebnshkrim dixhital dhe mund t\u00eb p\u00ebrfshihen ve\u00e7mas n\u00eb listat e lejuara ose t\u00eb ndaluara t\u00eb komponent\u00ebve p\u00ebr UEFI Secure Boot.      <\/p>\n<p>SBAT lejon q\u00eb t\u00eb bllokoni p\u00ebrdorimin e n\u00ebnshkrimit digjital p\u00ebr numra t\u00eb ve\u00e7ant\u00eb versioni t\u00eb komponenteve pa pasur nevoj\u00eb t\u00eb revokoni \u00e7el\u00ebsat p\u00ebr Secure Boot. Bllokimi i dob\u00ebsive p\u00ebrmes SBAT nuk k\u00ebrkon p\u00ebrdorimin e listes s\u00eb certifikatatve t\u00eb revokuara UEFI (dbx), dhe realizohet n\u00eb nivelin e nd\u00ebrrimit t\u00eb \u00e7el\u00ebsit t\u00eb brendsh\u00ebm p\u00ebr formimin e n\u00ebnshkrimeve dhe p\u00ebrdit\u00ebsimin e GRUB2, shim dhe artefakteve t\u00eb ngarkes\u00ebs t\u00eb ofruara nga shp\u00ebrndarjet e tjera. Para zbatimit t\u00eb SBAT, p\u00ebrdit\u00ebsimi i listes s\u00eb certifikatatve t\u00eb revokuara (dbx, UEFI Revocation List) ishte nj\u00eb kusht i domosdosh\u00ebm p\u00ebr bllokimin e plot\u00eb t\u00eb dob\u00ebsis\u00eb, pasi nj\u00eb sulmues, pavar\u00ebsisht sistemit operativ t\u00eb p\u00ebrdorur, mund t\u00eb p\u00ebrdorte nj\u00eb media ngarkese me nj\u00eb version t\u00eb vjet\u00ebr dhe t\u00eb dob\u00ebt t\u00eb GRUB2, t\u00eb v\u00ebrtetuar me n\u00ebnshkrim digjital.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58130\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Unicode-\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2022-2601 &#8212; \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 grub_font_construct_glyph() \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pf2, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0447\u0451\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105601","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Unicode-\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2022-2601 - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 grub_font_construct_glyph() \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pf2, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0447\u0451\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dve-uyazvimosti-v-grub2-pozvolyayushhie-obojti-zashhitu-uefi-secure-boot\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 UEFI Secure Boot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Unicode-\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2022-2601 - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 grub_font_construct_glyph() \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pf2, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0447\u0451\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dve-uyazvimosti-v-grub2-pozvolyayushhie-obojti-zashhitu-uefi-secure-boot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-11-16T19:37:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-11-16T19:37:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dy vulnerabilitete n\u00eb GRUB2, q\u00eb lejojn\u00eb anashkalimin e mbrojtjes UEFI Secure Boot | ProHoster","description":"jan\u00eb zbuluar informacione rreth dy vulnerabiliteteve n\u00eb ngul\u00ebsin GRUB2, t\u00eb cilat mund t\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit kur p\u00ebrdoren fonte t\u00eb ve\u00e7anta dhe p\u00ebrpunohen disa sekuenca Unicode. Vulnerabilitetet mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb anashkaluar mekanizmin e verifikimit t\u00eb ngarkes\u00ebs UEFI Secure Boot. Vulnerabilitetet e zbuluara: CVE-2022-2601 - mbushje e buffer-it n\u00eb funksionin grub_font_construct_glyph() gjat\u00eb p\u00ebrpunimit t\u00eb fonteve t\u00eb ve\u00e7anta n\u00eb formatin pf2, q\u00eb ndodh p\u00ebr shkak t\u00eb llogaritjes s\u00eb gabuar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dve-uyazvimosti-v-grub2-pozvolyayushhie-obojti-zashhitu-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 UEFI Secure Boot | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Unicode-\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2022-2601 - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 grub_font_construct_glyph() \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 pf2, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0447\u0451\u0442\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dve-uyazvimosti-v-grub2-pozvolyayushhie-obojti-zashhitu-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-16T19:37:02+00:00","article:modified_time":"2022-11-16T19:37:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105601"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105601\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}