{"id":31914,"date":"2019-10-31T21:43:56","date_gmt":"2019-10-31T18:43:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimosti-v-drajverah-k-wifi-chipam-broadcom-pozvolyayushhie-udalyonno-atakovat-sistemu\/"},"modified":"2019-10-31T21:43:56","modified_gmt":"2019-10-31T18:43:56","slug":"uyazvimosti-v-drajverah-k-wifi-chipam-broadcom-pozvolyayushhie-udalyonno-atakovat-sistemu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-drajverah-k-wifi-chipam-broadcom-pozvolyayushhie-udalyonno-atakovat-sistemu","title":{"rendered":"Vulnerabilitetet n\u00eb driver\u00ebt e \u00e7ipave WiFi Broadcom, q\u00eb lejojn\u00eb sulmin e sistemit nga larg","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb driverat p\u00ebr \u00e7ipat e wireless Broadcom u identifikua<\/a><\/noindex> kat\u00ebr mang\u00ebsive<\/a><\/noindex>. N\u00eb rastin m\u00eb t\u00eb thjesht\u00eb, dob\u00ebsit\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb shkaktuar nj\u00eb refuzim sh\u00ebrbimi n\u00eb distanc\u00eb, por nuk p\u00ebrjashtohen skenar\u00eb ku mund t\u00eb zhvillohen eksploit\u00eb q\u00eb lejojn\u00eb nj\u00eb sulmues t\u00eb paautorizuar t\u00eb ekzekutoj\u00eb kod me privilegje t\u00eb b\u00ebrtham\u00ebs Linux duke d\u00ebrguar paketa t\u00eb formatuara n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb.<\/p>\n

Problemet u identifikuan gjat\u00eb inxhinieris\u00eb nga prapa e firmware-ve t\u00eb Broadcom. \u00c7ipat e prekur nga dob\u00ebsit\u00eb p\u00ebrdoren gjer\u00ebsisht n\u00eb laptop\u00eb, smartphone dhe disa pajisje t\u00eb tjera p\u00ebr konsumator\u00ebt, nga SmartTV deri te pajisjet e internetit t\u00eb gj\u00ebrave. N\u00eb ve\u00e7anti, \u00e7ipat Broadcom p\u00ebrdoren n\u00eb smartphone t\u00eb prodhuesve si Apple, Samsung dhe Huawei. Sh\u00ebnim, kompania Broadcom u njoftua p\u00ebr dob\u00ebsit\u00eb q\u00eb n\u00eb Shtator 2018, por p\u00ebr t\u00eb l\u00ebshuar patches t\u00eb koordinuara me prodhuesit e pajisjeve duheshin rreth 7 muaj.<\/p>\n

Dy dob\u00ebsi prekin firmware-in e brendsh\u00ebm dhe potencialisht lejojn\u00eb ekzekutimin e kodit n\u00eb mjedisin e sistemit operativ t\u00eb p\u00ebrdorur n\u00eb \u00e7ipat Broadcom, duke sulmuar mjedise q\u00eb nuk p\u00ebrdorin Linux (p.sh., \u00ebsht\u00eb e konfirmuar mund\u00ebsia e sulmit n\u00eb pajisjet Apple, CVE-2019-8564<\/a><\/noindex>). T\u00eb kujtojm\u00eb se disa \u00e7ipa Wi-Fi t\u00eb Broadcom p\u00ebrb\u00ebjn\u00eb nj\u00eb procesor t\u00eb specializuar (ARM Cortex R4 ose M3), mbi t\u00eb cilin operohet nj\u00eb lloj sistemi operativ me realizimin e grumbullit t\u00eb vet wireless 802.11 (FullMAC). N\u00eb k\u00ebta \u00e7ipa, driveri siguron nd\u00ebrveprimin e sistemit kryesor me firmware-n e \u00e7ipit Wi-Fi. P\u00ebr t\u00eb fituar kontroll t\u00eb plot\u00eb mbi sistemin kryesor pas kompromitimit t\u00eb FullMAC, propozohet q\u00eb t\u00eb p\u00ebrdoren dob\u00ebsi t\u00eb tjera ose n\u00eb disa \u00e7ipa t\u00eb p\u00ebrfitohet nga mund\u00ebsia e aksesit t\u00eb plot\u00eb n\u00eb memorien sistemike. N\u00eb \u00e7ipat me SoftMAC, grumbulli wireless 802.11 \u00ebsht\u00eb realizuar n\u00eb an\u00ebn e driverit dhe ekzekutohet duke p\u00ebrdorur CPU-n\u00eb sistemike.<\/p>\n

\"Vulnerabilitetet<\/a><\/noindex><\/center><\/p>\n

N\u00eb drejtor\u00ebt, dob\u00ebsit\u00eb shfaqen si n\u00eb drejtorin proprietary wl (SoftMAC dhe FullMAC), ashtu edhe n\u00eb drejtorin e hapur brcmfmac (FullMAC). N\u00eb drejtorin wl jan\u00eb identifikuar dy tejkalime t\u00eb bufer\u00ebve, q\u00eb shfryt\u00ebzohen gjat\u00eb d\u00ebrgimit t\u00eb mesazheve EAPOL t\u00eb formuluara posa\u00e7\u00ebrisht n\u00eb procesin e negociat\u00ebs s\u00eb lidhjes (sulmi mund t\u00eb kryhet duke u lidhur me nj\u00eb pik\u00eb akses t\u00eb keqe). N\u00eb rastin e \u00e7ipit me SoftMAC, dob\u00ebsit\u00eb \u00e7ojn\u00eb n\u00eb kompromitimin e kernelit t\u00eb sistemit, nd\u00ebrsa n\u00eb rastin e FullMAC kodi mund t\u00eb ekzekutohet n\u00eb an\u00ebn e firmuerit. N\u00eb brcmfmac jan\u00eb t\u00eb pranishme tejkalimi i bufer\u00ebve dhe nj\u00eb gabim verifikimi i kornizave t\u00eb p\u00ebrpunuara, q\u00eb shfryt\u00ebzohen p\u00ebrmes d\u00ebrgimit t\u00eb kornizave t\u00eb menaxhimit. N\u00eb kernelin Linux ka probleme n\u00eb drejtorin brcmfmac. isht\u00eb<\/a><\/noindex> jan\u00eb eliminuar<\/a><\/noindex> n\u00eb shkurt.<\/p>\n

Vulnerabilitetet e identifikuara:<\/p>\n