{"id":184024,"date":"2026-10-28T23:40:36","date_gmt":"2026-10-28T21:40:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/udalyonnaya-uyazvimost-v-servernyh-uefi-proshivkah-ekspluatiruemaya-cherez-otpravku-icmp-paketa"},"modified":"2026-10-28T23:40:41","modified_gmt":"2026-10-28T21:40:41","slug":"remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","title":{"rendered":"Vulnerabilitet i larguar n\u00eb firmware-t UEFI t\u00eb server\u00ebve, i shfryt\u00ebzuar p\u00ebrmes d\u00ebrgimit t\u00eb packets ICMP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb TianoCore EDK II (EFI Development Kit II), nj\u00eb implementim t\u00eb hapur referenc\u00eb t\u00eb UEFI, i p\u00ebrdorur n\u00eb shumic\u00ebn e pllakave n\u00ebn\u00ebs s\u00eb server\u00ebve, \u00ebsht\u00eb eliminuar nj\u00eb vulnerabilitet kritik (CVE-2026-97631). Vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm n\u00eb drejtuesin PXE dhe mund t\u00eb eksplorohet p\u00ebrmes d\u00ebrgimit t\u00eb paketimeve ICMP t\u00eb dizajnuara posa\u00e7\u00ebrisht gjat\u00eb ngarkimit n\u00eb rrjet n\u00eb rrjetet IPv4 ose IPv6. Sulmi nuk k\u00ebrkon identifikim dhe lejon nj\u00eb sulmues t\u00eb ekzekutoj\u00eb kodin e tij me privilegje UEFI firmware n\u00eb faz\u00ebn para dor\u00ebzimit t\u00eb kontrollit tek sistemi operativ, gj\u00eb q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb anashkaluar mekanizmin e verifikimit t\u00eb ngarkes\u00ebs UEFI Secure Boot dhe p\u00ebr t\u00eb z\u00ebvend\u00ebsuar komponent\u00ebt e d\u00ebmsh\u00ebm n\u00eb faz\u00ebn e ngarkes\u00ebs.<\/p>\n

Problemi shkaktohet nga teprica e buffer-it n\u00eb trajtuesin e mesazheve ICMP n\u00eb drejtuesin UefiPxeBcDxe, i cili p\u00ebrdoret p\u00ebr ngarkimin PXE dhe pranon paketa ICMP gjat\u00eb ngarkimit n\u00eb rrjet p\u00ebr t\u00eb regjistruar gabime n\u00eb rrjet. Teprica ndodh p\u00ebr shkak t\u00eb vendosjes s\u00eb mesazheve t\u00eb marra t\u00eb gabimeve n\u00eb nj\u00eb buffer t\u00eb fiksuar, me madh\u00ebsi 504 byte, pa kontrolluar madh\u00ebsin\u00eb reale t\u00eb t\u00eb dh\u00ebnave t\u00eb marra. N\u00eb rastin e d\u00ebrgimit t\u00eb m\u00eb shum\u00eb se 504 byte n\u00eb paket\u00ebn ICMP, pjesa q\u00eb nuk ka vend shkruhet p\u00ebrtej buffer-it dhe mbivendoset mbi strukturat pasuese. <\/p>\n

Sulmi mund t\u00eb realizohet nga rrjeti global \u2014 sufiton t\u00eb dihet adresa IP e viktim\u00ebs dhe t\u00eb jet\u00eb n\u00eb gjendje t\u00eb p\u00ebrcaktoj\u00eb momentin e ngarkes\u00ebs PXE. Duke ditur se cila sakt\u00ebsisht \u00ebsht\u00eb firmware-i i p\u00ebrdorur n\u00eb server<\/a> viktim\u00ebn, sulmuesi mund t\u00eb p\u00ebrgatis\u00eb nj\u00eb eksploat p\u00ebrve\u00e7 vendosjes s\u00eb strukturave n\u00eb memorien e nj\u00eb versioni t\u00eb caktuar t\u00eb firmware dhe t\u00eb eksploroj\u00eb vulnerabilitetin p\u00ebr t\u00eb ekzekutuar kod n\u00eb nivelin DXE (Mjedisi i Ekzekutimit t\u00eb Drejtorit), q\u00eb ekzekutohet n\u00eb nivelin zero t\u00eb mbrojtjes. <\/p>\n

Projekti EDK II u hap n\u00eb vitin 2004 nga kompania Intel dhe p\u00ebrdoret nga t\u00eb gjith\u00eb prodhuesit e m\u00ebdhenj t\u00eb firmware p\u00ebr sisteme server\u00ebsh, qendrat e t\u00eb dh\u00ebnave dhe ofruesit e sh\u00ebrbimeve n\u00eb re. Nd\u00ebr t\u00eb tjera, ai p\u00ebrdoret n\u00eb firmware-t AMI, Insyde dhe Phoenix. Vulnerabilitetet jan\u00eb t\u00eb pranishme gjithashtu n\u00eb firmware-t e bazuara n\u00eb platform\u00ebn Mu nga kompania Microsoft, e cila \u00ebsht\u00eb nj\u00eb forks i EDK II.<\/p>\n

Problemi u identifikuar nga p\u00ebrfaq\u00ebsuesit e kompanive Anthropic dhe Google, dhe ishte planifikuar p\u00ebr nj\u00eb shpallje publike t\u00eb koordinuar n\u00eb janar 2027. Por ndarja e informacionit u b\u00eb m\u00eb her\u00ebt, pasi nj\u00eb inxhinier nga kompania AMI aksidentalisht shkel embargo-n dhe publikoi nj\u00eb pull-request publik me nj\u00eb rregullim, mbi baz\u00ebn e t\u00eb cilit mund t\u00eb kuptohej natyra e dob\u00ebsis\u00eb.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 PXE \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 ICMP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 IPv4 \u0438\u043b\u0438 IPv6. \u0410\u0442\u0430\u043a\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184024","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia e larg\u00ebt n\u00eb firmware-t UEFI t\u00eb server\u00ebve, e shfryt\u00ebzuar p\u00ebrmes d\u00ebrgimit t\u00eb paketave ICMP | ProHoster","description":"N\u00eb TianoCore EDK II (EFI Development Kit II), implementimi i hapur referues i UEFI, i p\u00ebrdorur n\u00eb shumic\u00ebn e pllakave am\u00eb t\u00eb server\u00ebve, \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi kritike (CVE-2026-97631).","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 ICMP-\u043f\u0430\u043a\u0435\u0442\u0430 | ProHoster","og:description":"\u0412 TianoCore EDK II (EFI Development Kit II), \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 UEFI, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-97631).","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/remote-vulnerability-in-server-uefi-firmware-exploitable-by-sending-an-icmp-packet","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-28T21:40:36+00:00","article:modified_time":"2026-10-28T21:40:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/184024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=184024"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/184024\/revisions"}],"predecessor-version":[{"id":184025,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/184024\/revisions\/184025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=184024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=184024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=184024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}