{"id":110421,"date":"2023-10-04T09:10:18","date_gmt":"2023-10-04T07:10:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot"},"modified":"2023-10-04T09:10:18","modified_gmt":"2023-10-04T07:10:18","slug":"uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","title":{"rendered":"Dob\u00ebsia n\u00eb drejtuesin NTFS t\u00eb GRUB2, e cila lejon ekzekutimin e kodit dhe kalimin mbi UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb driverin q\u00eb siguron funksionimin me sistemin e skedar\u00ebve NTFS n\u00eb bootloader-in GRUB2, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2023-4692) q\u00eb lejon ekzekutimin e kodin t\u00eb vetin n\u00eb nivelin e bootloader-it kur drejtohet nj\u00eb imazh i hartuar posa\u00e7\u00ebrisht i sistemit t\u00eb skedar\u00ebve. Kjo dob\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb anashkaluar mekanizmin e ngarkes\u00ebs s\u00eb verifikuar UEFI Secure Boot. <\/p>\n

Vulnerabiliteti shkaktohet nga nj\u00eb gabim n\u00eb kodin e analizi t\u00eb atributit NTFS «$ATTRIBUTE_LIST» (grub-core\/fs\/ntfs.c), i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shkruar informacion t\u00eb kontrolluar nga p\u00ebrdoruesi n\u00eb nj\u00eb zon\u00eb t\u00eb memories jasht\u00eb tamponit t\u00eb alokuar. Kur p\u00ebrpunoni nj\u00eb imazh NTFS t\u00eb formatizuar me kujdes, mbushja e tejkalon rezulton n\u00eb rinovimin e nj\u00eb pjese t\u00eb memories GRUB, si dhe, n\u00ebn kushte t\u00eb caktuara, n\u00eb d\u00ebmtimin e zon\u00ebs s\u00eb memories s\u00eb firmware-it UEFI, \u00e7ka potencialisht lejon kryerjen e kodit tuaj n\u00eb nivelin e bootloaderit ose firmware-it. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, n\u00eb drejtuesin NTFS t\u00eb GRUB2 \u00ebsht\u00eb identifikuar nj\u00eb tjet\u00ebr vulnerabilitet (CVE-2023-4693) q\u00eb lejon leximin e p\u00ebrmbajtjes s\u00eb nj\u00eb zone t\u00eb rast\u00ebsishme t\u00eb memories gjat\u00eb analiz\u00ebs s\u00eb atributit «$DATA» n\u00eb nj\u00eb imazh NTFS t\u00eb formatizuar me kujdes. Nd\u00ebr t\u00eb tjera, vulnerabiliteti lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale, t\u00eb ruajtura n\u00eb memorie, ose t\u00eb p\u00ebrcaktoj\u00eb vlerat e variablave EFI. <\/p>\n

Problemet p\u00ebr momentin jan\u00eb rregulluar vet\u00ebm n\u00eb form\u00eb patch-i. Statusi i zgjidhjes s\u00eb dob\u00ebsive n\u00eb distribucione mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE, RHEL, Fedora. P\u00ebr t\u00eb zgjidhur problemet n\u00eb GRUB2, thjesht azhurnimi i paket\u00ebs nuk \u00ebsht\u00eb i mjaftuesh\u00ebm; \u00ebsht\u00eb gjithashtu e nevojshme t\u00eb krijonim n\u00ebnshkrime t\u00eb reja digjitale t\u00eb brendshme dhe t\u00eb azhurnonim instaluesit, bootloader-\u00ebt, paketat e b\u00ebrtham\u00ebs, firmat fwupd dhe shtres\u00ebn shim. <\/p>\n

N\u00eb shumic\u00ebn e distribucioneve Linux, p\u00ebr ngarkimin e verifikuar n\u00eb modalitetin UEFI Secure Boot p\u00ebrdoret nj\u00eb shtres\u00eb e vog\u00ebl shim, e verifikuar me n\u00ebnshkrim digjital nga Microsoft. Kjo shtres\u00eb vler\u00ebson GRUB2 me certifikat\u00ebn e vet, q\u00eb u lejon zhvilluesve t\u00eb distribucioneve t\u00eb mos e verifikojn\u00eb \u00e7do p\u00ebrdit\u00ebsim t\u00eb bllokut dhe GRUB n\u00eb Microsoft. Vulnerabilitetet n\u00eb GRUB2 lejojn\u00eb ekzekutimin e kodit t\u00eb tyre pas verifikimit t\u00eb suksessh\u00ebm t\u00eb shim, por para ngarkimit t\u00eb sistemit operacional, duke u futur n\u00eb zinxhirin e besimit me modulin Secure Boot aktiv dhe duke fituar kontroll t\u00eb plot\u00eb mbi procesin e ngarkimit, p\u00ebr shembull, p\u00ebr ngarkimin e nj\u00eb sistemi tjet\u00ebr operativ, modifikimin e komponenteve t\u00eb sistemit operativ dhe anashkalimin e mbrojtjes Lockdown. <\/p>\n

P\u00ebr t\u00eb bllokuar vulnerabilitetin pa t\u00ebrheqjen e n\u00ebnshkrimit dixhital, shp\u00ebrndarjet mund t\u00eb p\u00ebrdorin mekanizmin SBAT (UEFI Secure Boot Advanced Targeting), mb\u00ebshtetje e t\u00eb cilit \u00ebsht\u00eb zbatuar p\u00ebr GRUB2, shim dhe fwupd n\u00eb shumic\u00ebn e shp\u00ebrndarjeve t\u00eb njohura Linux. SBAT-u \u00ebsht\u00eb zhvilluar n\u00eb bashk\u00ebpunim me Microsoft dhe n\u00ebnkupton shtimin n\u00eb skedar\u00ebt ekzekutiv\u00eb t\u00eb komponent\u00ebve UEFI t\u00eb metadatat shtes\u00eb, t\u00eb cilat p\u00ebrfshijn\u00eb informacionin mbi prodhuesin, produktin, komponentin dhe versionin. Metaet e p\u00ebrmendura n\u00ebnshkruhen me nj\u00eb n\u00ebnshkrim dixhital dhe mund t\u00eb p\u00ebrfshihen ve\u00e7mas n\u00eb listat e lejuara ose t\u00eb ndaluara t\u00eb komponent\u00ebve p\u00ebr UEFI Secure Boot. <\/p>\n

SBAT lejon bllokimin e p\u00ebrdorimit t\u00eb n\u00ebnshkrimit digjital p\u00ebr numra t\u00eb ve\u00e7ant\u00eb versionesh t\u00eb komponent\u00ebve pa nevoj\u00ebn p\u00ebr t\u00eb t\u00ebrhequr \u00e7el\u00ebsat p\u00ebr Secure Boot. Bllokimi i dob\u00ebsive p\u00ebrmes SBAT nuk k\u00ebrkon p\u00ebrdorimin e list\u00ebs s\u00eb n\u00ebnshkrimeve t\u00eb anuluara UEFI (dbx), por b\u00ebhet n\u00eb nivelin e z\u00ebvend\u00ebsimit t\u00eb \u00e7el\u00ebsit t\u00eb brendsh\u00ebm p\u00ebr formimin e n\u00ebnshkrimeve dhe azhurnimin e GRUB2, shim dhe artefakteve t\u00eb tjera t\u00eb boot-it t\u00eb ofruara nga distribucionet. Deri n\u00eb zbatimin e SBAT, azhurnimi i list\u00ebs s\u00eb n\u00ebnshkrimeve t\u00eb anuluara (dbx, UEFI Revocation List) ishte nj\u00eb kusht i obliguesh\u00ebm p\u00ebr bllokimin e plot\u00eb t\u00eb dob\u00ebsis\u00eb, pasi sulmuesi, pavar\u00ebsisht nga sistemi operativ i p\u00ebrdorur, mund t\u00eb p\u00ebrdorte nj\u00eb mbushjen p\u00ebr t\u00eb komprometuar UEFI Secure Boot.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4692), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 NTFS-\u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 «$ATTRIBUTE_LIST» (grub-core\/fs\/ntfs.c), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110421","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Dob\u00ebsia n\u00eb driverin NTFS t\u00eb GRUB2, e cila lejon ekzekutimin e kodit dhe anashkalimin e UEFI Secure Boot | ProHoster","description":"N\u00eb driverin q\u00eb siguron funksionimin me sistemin e skedar\u00ebve NTFS n\u00eb bootloader-in GRUB2, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2023-4692) q\u00eb lejon ekzekutimin e kodit t\u00eb vet n\u00eb nivelin e bootloader-it kur drejtohet nj\u00eb imazh i hartuar posa\u00e7\u00ebrisht i sistemit t\u00eb skedar\u00ebve. Kjo dob\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb anashkaluar mekanizmin e ngarkes\u00ebs s\u00eb verifikuar UEFI Secure Boot. Dob\u00ebsia shkaktohet nga nj\u00eb gabim n\u00eb kodin e analiz\u00ebs s\u00eb atributit NTFS \"$ATTRIBUTE_LIST\" (grub-core\/fs\/ntfs.c), i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shkruar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS-\u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4692), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 NTFS-\u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 "$ATTRIBUTE_LIST" (grub-core\/fs\/ntfs.c), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-04T07:10:18+00:00","article:modified_time":"2023-10-04T07:10:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=110421"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110421\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=110421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=110421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=110421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}