{"id":31914,"date":"2019-10-31T21:43:56","date_gmt":"2019-10-31T18:43:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimosti-v-drajverah-k-wifi-chipam-broadcom-pozvolyayushhie-udalyonno-atakovat-sistemu\/"},"modified":"2019-10-31T21:43:56","modified_gmt":"2019-10-31T18:43:56","slug":"uyazvimosti-v-drajverah-k-wifi-chipam-broadcom-pozvolyayushhie-udalyonno-atakovat-sistemu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-drajverah-k-wifi-chipam-broadcom-pozvolyayushhie-udalyonno-atakovat-sistemu","title":{"rendered":"Dob\u00ebsi n\u00eb driverat e \u00e7ipave WiFi Broadcom, q\u00eb lejojn\u00eb sulme t\u00eb larg\u00ebta n\u00eb sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb drejtuesit p\u00ebr \u00e7ipat wireless Broadcom identifikuar<\/a><\/noindex> kat\u00ebr dob\u00ebsin\u00eb<\/a><\/noindex>. N\u00eb rastin m\u00eb t\u00eb thjesht\u00eb, dob\u00ebsit\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb shkaktuar nj\u00eb r\u00ebnie t\u00eb sh\u00ebrbimit n\u00eb distanc\u00eb, por nuk p\u00ebrjashtohen skenar\u00eb ku mund t\u00eb zhvillohen eksploite q\u00eb lejojn\u00eb nj\u00eb sulmues t\u00eb paautorizuar t\u00eb ekzekutoj\u00eb kodin e tij me privilegje t\u00eb b\u00ebrtham\u00ebs Linux p\u00ebrmes d\u00ebrgimit t\u00eb pacit t\u00eb strukturuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb.<\/p>\n

Problemet u identifikuan gjat\u00eb inxhinieris\u00eb s\u00eb revers n\u00eb firmuer\u00ebt e Broadcom. \u00c7ipat e ndjesh\u00ebm ndaj dob\u00ebsive p\u00ebrdoren gjer\u00ebsisht n\u00eb laptop\u00eb, smartphone dhe pajisje t\u00eb ndryshme konsumator\u00ebsh, nga SmartTV deri n\u00eb pajisje t\u00eb Internetit t\u00eb Gj\u00ebrave. N\u00eb ve\u00e7anti, \u00e7ipat Broadcom p\u00ebrdoren n\u00eb smartphone t\u00eb prodhuesve si Apple, Samsung dhe Huawei. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb p\u00ebrmendet se kompanis\u00eb Broadcom i \u00ebsht\u00eb njoftuar p\u00ebr dob\u00ebsit\u00eb q\u00eb n\u00eb shtator 2018, por p\u00ebr t\u00eb l\u00ebshuar rregullime t\u00eb koordinuara me prodhuesit e pajisjeve k\u00ebrkohej rreth 7 muaj.<\/p>\n

Dy dob\u00ebsi p\u00ebrfshijn\u00eb firmuer\u00ebt e brendsh\u00ebm dhe potencialisht lejojn\u00eb ekzekutimin e kodit n\u00eb ambientin e sistemit operativ t\u00eb p\u00ebrdorur n\u00eb \u00e7ipat Broadcom, duke lejuar sulmet ndaj ambienteve q\u00eb nuk p\u00ebrdorin Linux (p\u00ebr shembull, \u00ebsht\u00eb konfirmuar mund\u00ebsia e sulmit ndaj pajisjeve Apple, CVE-2019-8564<\/a><\/noindex>). T\u00eb kujtojm\u00eb se disa \u00e7ipa Wi-Fi Broadcom p\u00ebrb\u00ebjn\u00eb nj\u00eb procesor t\u00eb specializuar (ARM Cortex R4 ose M3), mbi t\u00eb cilin ekzekutohet nj\u00eb analog i sistemit t\u00eb tij operacional me implementimin e stakut t\u00eb tij wireless 802.11 (FullMAC). N\u00eb k\u00ebta \u00e7ipa, drejtuesi siguron nd\u00ebrveprimin e sistemit kryesor me firmuerin e \u00e7ipit Wi-Fi. P\u00ebr t\u00eb fituar kontroll t\u00eb plot\u00eb mbi sistemin kryesor pas kompromitimit t\u00eb FullMAC, propozohet p\u00ebrdorimi i dob\u00ebsive shtes\u00eb ose n\u00eb disa \u00e7ipa mund t\u00eb shfryt\u00ebzohet qasja e plot\u00eb n\u00eb memorien sistemit. N\u00eb \u00e7ipat me SoftMAC, staku wireless 802.11 implementohet nga drejtuesi dhe ekzekutohet duke p\u00ebrdorur CPU-n\u00eb sistemore.<\/p>\n

\"Dob\u00ebsi<\/a><\/noindex><\/center><\/p>\n

N\u00eb drejtuesit, vulnerabilitetet shfaqen si n\u00eb drejtuesin pronar wl (SoftMAC dhe FullMAC), ashtu edhe n\u00eb at\u00eb t\u00eb hapur brcmfmac (FullMAC). N\u00eb drejtuesin wl jan\u00eb identifikuar dy mbingarkesa t\u00eb buffers, q\u00eb shfryt\u00ebzohen gjat\u00eb transferimit nga pika e akseseve t\u00eb mesazheve EAPOL t\u00eb dizajnuara posa\u00e7\u00ebrisht n\u00eb procesin e negocimit t\u00eb lidhjes (sulmi mund t\u00eb realizohet gjat\u00eb lidhjes me nj\u00eb pik\u00eb aksesi t\u00eb d\u00ebmshme). N\u00eb rastin e \u00e7ipit me SoftMAC, vulnerabilitetet shkaktojn\u00eb kompromitimin e b\u00ebrtham\u00ebs s\u00eb sistemit, nd\u00ebrsa n\u00eb rastin e FullMAC, kodi mund t\u00eb ekzekutohet n\u00eb an\u00ebn e firmware-it. N\u00eb brcmfmac ka nj\u00eb mbingarkes\u00eb buffer dhe nj\u00eb gabim verifikimi t\u00eb kuadrove t\u00eb p\u00ebrpunuara, q\u00eb shfryt\u00ebzohen p\u00ebrmes d\u00ebrgimit t\u00eb kuadrove menaxhuese. N\u00eb b\u00ebrtham\u00ebn Linux, problemet jan\u00eb n\u00eb drejtuesin brcmfmac. kan\u00eb<\/a><\/noindex> jan\u00eb zgjidhur<\/a><\/noindex> n\u00eb shkurt.<\/p>\n

Vulnerabilitetet e identifikuara:<\/p>\n