{"id":39040,"date":"2019-10-31T22:27:31","date_gmt":"2019-10-31T19:27:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek\/"},"modified":"2019-10-31T22:27:31","modified_gmt":"2019-10-31T19:27:31","slug":"udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","title":{"rendered":"Fj\u00e4rrutnyttjad s\u00e5rbarhet i Linux-drivrutinen f\u00f6r Realtek-chip","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I Linux-k\u00e4rnan ing\u00e5ende drivrutin rtlwifi<\/a><\/noindex> f\u00f6r tr\u00e5dl\u00f6sa adaptrar baserade p\u00e5 Realtek-chips uppt\u00e4cktes<\/a><\/noindex> s\u00e5rbarhet (CVE-2019-17666<\/a><\/noindex>), som potentiellt kan utnyttjas f\u00f6r att k\u00f6ra kod i k\u00e4rnkontesten genom att skicka specifikt utformade paket.<\/p>\n

S\u00e5rbarheten orsakas av en buffert\u00f6verskridning i koden som implementerar P2P-l\u00e4get (Wifi-Direct). Vid tolkning av paket NoA<\/a><\/noindex> (Notice of Absence) saknas kontroll av storleken p\u00e5 ett av v\u00e4rdena, vilket till\u00e5ter att data skrivs utanf\u00f6r bufferten och skriver \u00f6ver information i f\u00f6ljande k\u00e4rnstrukturer.<\/p>\n

En attack kan utf\u00f6ras genom att skicka specifikt utformade paket till ett system med en aktiv n\u00e4tverksadapter baserad p\u00e5 Realtek-chips som st\u00f6der Wi-Fi Direct<\/a><\/noindex>, vilket till\u00e5ter tv\u00e5 tr\u00e5dl\u00f6sa adaptrar att ansluta direkt utan en \u00e5tkomstpunkt. F\u00f6r att utnyttja problemet kr\u00e4vs ingen anslutning till angriparens tr\u00e5dl\u00f6sa n\u00e4tverk, och inga \u00e5tg\u00e4rder beh\u00f6ver vidtas av anv\u00e4ndaren, det r\u00e4cker med att angriparen befinner sig inom r\u00e4ckvidden f\u00f6r det tr\u00e5dl\u00f6sa signalen. <\/p>\n

Den fungerande prototypen till exploiten \u00e4r f\u00f6r n\u00e4rvarande begr\u00e4nsad till en fj\u00e4rrkrasch av k\u00e4rnan, men s\u00e5rbarheten utesluter potentiellt m\u00f6jligheten att k\u00f6ra kod (antagandet \u00e4r fortfarande endast teoretiskt, eftersom det \u00e4nnu inte finns en prototyp f\u00f6r att k\u00f6ra kod, men den forskare som identifierade problemet har redan p\u00e5 att implementera protokollet ActivityPub.<\/a><\/noindex> arbetat p\u00e5 att skapa den).<\/p>\n

Problemet b\u00f6rjar visa sig fr\u00e5n k\u00e4rnan 3.12<\/a><\/noindex> (enligt andra uppgifter b\u00f6rjar problemet fr\u00e5n k\u00e4rnan 3.10<\/a><\/noindex>), som sl\u00e4pptes 2013. \u00c5tg\u00e4rden finns f\u00f6r n\u00e4rvarande endast tillg\u00e4nglig i form av en patch<\/a><\/noindex>. I distributionerna kvarst\u00e5r problemet ouppklarat.
\nF\u00f6lj uppdateringen av s\u00e5rbarheter i distributionerna p\u00e5 f\u00f6ljande sidor: Debian<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex>, RHEL<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, Fedora<\/a><\/noindex>. Det \u00e4r troligt att s\u00e5rbarheten \u00e4ven l\u00f6sningar baserade p\u00e5 det \u00f6ppna UPnP-stacket<\/a><\/noindex> och Android-plattformen.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 rtlwifi \u0434\u043b\u044f \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u0432 \u043d\u0430 \u0447\u0438\u043f\u0430\u0445 Realtek \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-17666), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u0434\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0435 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0435\u0436\u0438\u043c\u0430 P2P (Wifi-Direct). \u041f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043a\u0430\u0434\u0440\u043e\u0432 NoA (Notice of Absence) \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-39040","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Fj\u00e4rrutnyttjad s\u00e5rbarhet i Linux-drivrutinen f\u00f6r Realtek-chips | ProHoster","description":"I Linux-k\u00e4rnan ing\u00e5ende drivrutin rtlwifi f\u00f6r tr\u00e5dl\u00f6sa adaptrar baserade p\u00e5 chips.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux-\u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Realtek | ProHoster","og:description":"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 rtlwifi \u0434\u043b\u044f \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u0432 \u043d\u0430 \u0447\u0438\u043f\u0430\u0445.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-linux-drajvere-dlya-chipov-realtek","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:27:31+00:00","article:modified_time":"2019-10-31T19:27:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39040","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 00:30:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:58:37","updated":"2026-01-24 00:30:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/39040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=39040"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/39040\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=39040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=39040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=39040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}