{"id":84776,"date":"2020-06-11T01:41:55","date_gmt":"2020-06-10T23:41:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-vo-freebsd-ekspluatiruemaya-cherez-vredonosnoe-usb-ustrojstvo"},"modified":"2020-06-11T01:41:55","modified_gmt":"2020-06-10T23:41:55","slug":"uyazvimost-vo-freebsd-ekspluatiruemaya-cherez-vredonosnoe-usb-ustrojstvo","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-vo-freebsd-ekspluatiruemaya-cherez-vredonosnoe-usb-ustrojstvo","title":{"rendered":"Vulnerabiliteti n\u00eb FreeBSD, i shfryt\u00ebzuar p\u00ebrmes nj\u00eb pajisjeje USB t\u00eb keqe","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb FreeBSD i eliminuar<\/a><\/noindex> nj\u00eb dob\u00ebsi n\u00eb stakun USB (CVE-2020-7456) e cila lejon ekzekutimin e kodit n\u00eb nivelin e b\u00ebrtham\u00ebs ose n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit kur lidhet nj\u00eb pajisje USB e d\u00ebmshme me sistemin. Descriptor\u00ebt e pajisjeve USB HID (Dispositiv Nd\u00ebrfaqe Njer\u00ebzore) mund t\u00eb vendosin dhe t\u00eb nxjerrin gjendjen aktuale, duke lejuar p\u00ebrfshirjen e p\u00ebrshkrimeve t\u00eb elementeve n\u00eb grupe shum\u00eb-niveli. FreeBSD mb\u00ebshtet deri n\u00eb 4 nivele t\u00eb tilla t\u00eb nxjerrjes. N\u00ebse niveli nuk \u00ebsht\u00eb rikuperuar gjat\u00eb p\u00ebrpunimit t\u00eb po t\u00eb nj\u00ebjtit element HID, b\u00ebhet nj\u00eb k\u00ebrkes\u00eb n\u00eb nj\u00eb zon\u00eb t\u00eb pavlefshme t\u00eb memories. Problemi \u00ebsht\u00eb zgjidhur n\u00eb azhurnimet FreeBSD 11.3-RELEASE-p10 dhe 12.1-RELEASE-p6. Si nj\u00eb anashkalim mbrojt\u00ebs, rekomandohet t\u00eb vendosni parametrin «sysctl hw.usb.disable_enumeration=1».<\/p>\n

Dob\u00ebsia u zbulua nga Andy Nguyen nga kompania Google dhe nuk nd\u00ebrthuret me nj\u00eb problem tjet\u00ebr, s\u00eb fundmi t\u00eb njoftuar<\/a><\/noindex> nga hulumtuesit e Universitetit Purdue dhe Shkolla Federal Politeknike e Lozan\u00ebs. K\u00ebta hulumtues kan\u00eb zhvilluar nj\u00eb mjet USBFuzz, q\u00eb simullon nj\u00eb pajisje USB me funksionim t\u00eb pavlefsh\u00ebm p\u00ebr testimin e fuzzing t\u00eb drejtorive USB. USBFuzz pritet t\u00eb jet\u00eb n\u00eb dispozicion s\u00eb shpejti. t\u00eb publikohet n\u00eb GitHub<\/a><\/noindex>. Me k\u00ebt\u00eb mjet t\u00eb ri jan\u00eb zbuluar 26 dob\u00ebsi, nga t\u00eb cilat 18 n\u00eb Linux, 4 n\u00eb Windows, 3 n\u00eb macOS dhe nj\u00eb n\u00eb FreeBSD. Detajet p\u00ebr k\u00ebto probleme ende nuk jan\u00eb zbuluar, vet\u00ebm \u00ebsht\u00eb p\u00ebrmendur se p\u00ebr 10 dob\u00ebsi jan\u00eb marr\u00eb identifikues CVE, dhe 11 probleme q\u00eb shfaqen n\u00eb Linux jan\u00eb tashm\u00eb korrigjuar. Nj\u00eb teknik\u00eb e ngjashme e testimit fuzzing p\u00ebrdor<\/a><\/noindex> Andrey Konovalov nga Google, i cili n\u00eb vitet e fundit identifikuar<\/a><\/noindex> 44<\/a><\/noindex> dob\u00ebsin\u00eb<\/a><\/noindex> ka punuar mbi USB stack n\u00eb Linux.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 USB-\u0441\u0442\u0435\u043a\u0435 (CVE-2020-7456), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0414\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 USB HID (Human Interface Device) \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043c\u0435\u0449\u0430\u0442\u044c \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0442\u0435\u043a\u0443\u0449\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0442\u044c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 \u043c\u043d\u043e\u0433\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b. FreeBSD \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0434\u043e 4 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f. \u0415\u0441\u043b\u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043d\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84776","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb FreeBSD, e shfryt\u00ebzuar p\u00ebrmes nj\u00eb pajisjeje USB t\u00eb keqe | ProHoster","description":"N\u00eb FreeBSD \u00ebsht\u00eb rregulluar nj\u00eb dob\u00ebsi n\u00eb stek\u00ebn USB (CVE-2020-7456), e cila lejon organizimin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-vo-freebsd-ekspluatiruemaya-cherez-vredonosnoe-usb-ustrojstvo","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e FreeBSD, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 USB-\u0441\u0442\u0435\u043a\u0435 (CVE-2020-7456), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-vo-freebsd-ekspluatiruemaya-cherez-vredonosnoe-usb-ustrojstvo","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-10T23:41:55+00:00","article:modified_time":"2020-06-10T23:41:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84776","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:51:42","updated":"2022-10-05 06:24:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84776"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84776\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84776"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}