{"id":110421,"date":"2023-10-04T09:10:18","date_gmt":"2023-10-04T07:10:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot"},"modified":"2023-10-04T09:10:18","modified_gmt":"2023-10-04T07:10:18","slug":"uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","title":{"rendered":"Cenueshm\u00ebri n\u00eb driverin NTFS t\u00eb p\u00ebrfshir\u00eb n\u00eb GRUB2, q\u00eb lejon ekzekutimin e kodit dhe anashkalimin e UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb drejtorin q\u00eb siguron funksionimin me sistemin e skedar\u00ebve NTFS n\u00eb bootloader-in GRUB2, \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi (CVE-2023-4692), e cila lejon ekzekutimin e kodit tuaj n\u00eb nivelin e bootloader-it kur lidhet me nj\u00eb imazh t\u00eb ve\u00e7ant\u00eb t\u00eb sistemit t\u00eb skedar\u00ebve. Kjo dob\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb anashkaluar mekanizmin e verifikimit t\u00eb ngarkes\u00ebs UEFI Secure Boot. <\/p>\n

Vulnerabiliteti shkaktohet nga nj\u00eb gabim n\u00eb kodin e analiz\u00ebs s\u00eb atributit NTFS \"$ATTRIBUTE_LIST\" (grub-core\/fs\/ntfs.c), i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shkruar informacion t\u00eb kontrolluar nga p\u00ebrdoruesi n\u00eb nj\u00eb hap\u00ebsir\u00eb kujtes\u00eb p\u00ebrtej buffer-it t\u00eb ndar\u00eb. Gjat\u00eb p\u00ebrpunimit t\u00eb nj\u00eb imazhi NTFS t\u00eb ve\u00e7uar, mbushja \u00e7on n\u00eb rinisjen e nj\u00eb pjese t\u00eb kujtes\u00ebs GRUB, si dhe, n\u00eb kushte t\u00eb caktuara, n\u00eb d\u00ebmtimin e hap\u00ebsir\u00ebs s\u00eb kujtes\u00ebs s\u00eb firmware UEFI, duke lejuar potencialisht ekzekutimin e kodit t\u00eb tij n\u00eb nivelin e ngarkuesit ose firmware-it. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, n\u00eb drejtuesin NTFS nga GRUB2 \u00ebsht\u00eb zbuluar edhe nj\u00eb vulnerabilitet tjet\u00ebr (CVE-2023-4693), q\u00eb lejon leximin e p\u00ebrmbajtjes s\u00eb nj\u00eb hap\u00ebsire t\u00eb \u00e7far\u00ebdoshme t\u00eb kujtes\u00ebs gjat\u00eb analiz\u00ebs s\u00eb atributit \"$DATA\" n\u00eb nj\u00eb imazh NTFS t\u00eb ve\u00e7uar. Nd\u00ebr t\u00eb tjera, vulnerabiliteti lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale, t\u00eb ruajtur n\u00eb memorje, ose p\u00ebrcaktimin e vlerave t\u00eb variablave EFI. <\/p>\n

Problemet jan\u00eb zgjidhur deri tani vet\u00ebm n\u00eb form\u00ebn e nj\u00eb patchi. Statusi i zgjidhjes s\u00eb dob\u00ebsive n\u00eb distribuimet mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE, RHEL, Fedora. P\u00ebr t\u00eb zgjidhur problemet n\u00eb GRUB2, thjesht p\u00ebrdit\u00ebsimi i paket\u00ebs nuk mjafton, gjithashtu k\u00ebrkohet formimi i n\u00ebnshkrimeve digjitale t\u00eb reja dhe p\u00ebrdit\u00ebsimi i instaluesve, bootloader-\u00ebve, paketimeve t\u00eb kernel-it, firmware-ve fwupd dhe shtres\u00ebs shim. <\/p>\n

N\u00eb shumic\u00ebn e distribucioneve Linux, p\u00ebr ngarkimin e verifikuar n\u00eb m\u00ebnyr\u00ebn UEFI Secure Boot p\u00ebrdoret nj\u00eb shtres\u00eb e vog\u00ebl shim, e \u00e7ertifikuar nga nj\u00eb n\u00ebnshkrim digjital i Microsoft. Kjo shtres\u00eb verifikon GRUB2 me \u00e7ertifikat\u00ebn e saj, duke lejuar zhvilluesit e distribucioneve q\u00eb t\u00eb mos e \u00e7ertifikojn\u00eb \u00e7do p\u00ebrdit\u00ebsim t\u00eb kernelit dhe GRUB n\u00eb Microsoft. Vulnerabilitetet n\u00eb GRUB2 lejojn\u00eb ekzekutimin e kodit t\u00eb tyre pas verifikimit t\u00eb suksessh\u00ebm t\u00eb shim, por para ngarkimit t\u00eb sistemit operativ, duke u futur n\u00eb zinxhirin e besueshm\u00ebris\u00eb gjat\u00eb operacionit t\u00eb aktivizuar t\u00eb Secure Boot dhe duke marr\u00eb kontroll t\u00eb plot\u00eb mbi procesin e ngarkimit, p\u00ebr shembull, p\u00ebr t\u00eb ngarkuar nj\u00eb OS tjet\u00ebr, modifikuar komponent\u00ebt e sistemit operativ dhe p\u00ebr t\u00eb anashkaluar mbrojtjen Lockdown. <\/p>\n

P\u00ebr t\u00eb bllokuar vulnerabilitetin pa anulluar n\u00ebnshkrimin digjital, shp\u00ebrndarjet mund t\u00eb p\u00ebrdorin mekanizmin SBAT (UEFI Secure Boot Advanced Targeting), mb\u00ebshtetje e t\u00eb cilit \u00ebsht\u00eb realizuar p\u00ebr GRUB2, shim dhe fwupd n\u00eb shumic\u00ebn e shp\u00ebrndarjeve t\u00eb njohura Linux. SBAT \u00ebsht\u00eb zhvilluar n\u00eb bashk\u00ebpunim me Microsoft dhe parashikon shtimin e metadatas n\u00eb skedar\u00ebt ekzekutiv\u00eb t\u00eb komponenteve UEFI, q\u00eb p\u00ebrfshin informacion mbi prodhuesin, produktin, komponentin dhe versionin. K\u00ebto metadata n\u00ebnshkruhen me nj\u00eb n\u00ebnshkrim digjital dhe mund t\u00eb p\u00ebrfshihen ve\u00e7mas n\u00eb listat e miratuara ose t\u00eb ndaluara p\u00ebr UEFI Secure Boot. <\/p>\n

SBAT lejon t\u00eb bllokoj\u00eb p\u00ebrdorimin e n\u00ebnshkrimit digjital p\u00ebr versione t\u00eb ve\u00e7anta t\u00eb komponimeve pa nevoj\u00ebn p\u00ebr t\u00eb t\u00ebrhequr \u00e7el\u00ebsat p\u00ebr Secure Boot. Bllokimi i dob\u00ebsive p\u00ebrmes SBAT nuk k\u00ebrkon p\u00ebrdorimin e list\u00ebs s\u00eb t\u00ebrhequr t\u00eb certifikatave UEFI (dbx), por b\u00ebhet n\u00eb nivelin e z\u00ebvend\u00ebsimit t\u00eb \u00e7el\u00ebsit t\u00eb brendsh\u00ebm p\u00ebr formimin e n\u00ebnshkrimeve dhe p\u00ebrdit\u00ebsimin e GRUB2, shim dhe artefakteve t\u00eb tjera t\u00eb boot-it t\u00eb shp\u00ebrndara nga distribucione. Para implementimit t\u00eb SBAT, p\u00ebrdit\u00ebsimi i list\u00ebs s\u00eb t\u00ebrhequr t\u00eb certifikatave (dbx, Lista e Revokimit UEFI) ishte nj\u00eb kusht i domosdosh\u00ebm p\u00ebr bllokimin e plot\u00eb t\u00eb dob\u00ebsive, pasi sulmuesi, pavar\u00ebsisht nga sistemi operativ i p\u00ebrdorur, mund t\u00eb p\u00ebrdorte boot-in p\u00ebr t\u00eb komprometuar UEFI Secure Boot.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4692), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 NTFS-\u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 «$ATTRIBUTE_LIST» (grub-core\/fs\/ntfs.c), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110421","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb NTFS-driv\u00ebn e pjes\u00ebs s\u00eb GRUB2, e cila lejon ekzekutimin e kodit dhe kalimin e UEFI Secure Boot | ProHoster","description":"N\u00eb driv\u00ebn q\u00eb siguron funksionimin me sistemin e skedave NTFS n\u00eb boot-in GRUB2, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2023-4692) q\u00eb lejon ekzekutimin e kodit t\u00eb tij n\u00eb nivelin e boot-it kur b\u00ebhet nj\u00eb thirrje t\u00eb ve\u00e7ant\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS-\u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0412 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4692), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ntfs-drajvere-iz-sostava-grub2-pozvolyayushhaya-vypolnit-kod-i-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-04T07:10:18+00:00","article:modified_time":"2023-10-04T07:10:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=110421"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110421\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=110421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=110421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=110421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}