{"id":116935,"date":"2024-07-04T15:05:10","date_gmt":"2024-07-04T13:05:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake"},"modified":"2024-07-04T15:05:10","modified_gmt":"2024-07-04T13:05:10","slug":"indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","title":{"rendered":"Indirector — nov\u00fd mikroarchitektonick\u00fd \u00fatok, kter\u00fd zasahuje CPU Intel Raptor Lake a Alder Lake","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdzkumn\u00edci z Kalifornsk\u00e9 univerzity v San Diegu p\u0159edstavili novou metodu \u00fatoku na mikroarchitektury procesor\u016f Intel, kter\u00e1 je pou\u017eiteln\u00e1 mimo jin\u00e9 pro CPU zalo\u017een\u00e9 na mikroarchitektur\u00e1ch Raptor Lake a Alder Lake. \u00datok, kter\u00fd nese k\u00f3dov\u00e9 jm\u00e9no Indirector, umo\u017e\u0148uje m\u011bnit b\u011bh spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed instrukc\u00ed v jin\u00fdch procesech a na jin\u00fdch privilegovan\u00fdch \u00farovn\u00edch (nap\u0159\u00edklad v j\u00e1d\u0159e nebo jin\u00e9m virtu\u00e1ln\u00edm stroji), spu\u0161t\u011bn\u00fdch v jednom CPU vl\u00e1kn\u011b s k\u00f3dem \u00fato\u010dn\u00edka. Jako demonstraci funk\u010dnosti metody byl p\u0159ipraven prototyp exploitu, kter\u00fd umo\u017e\u0148uje zjistit rozlo\u017een\u00ed adres pam\u011bti pro obch\u00e1zen\u00ed mechanismu ochrany ASLR (Address Space Layout Randomization). D\u00e1le byl pod licenc\u00ed MIT zve\u0159ejn\u011bn n\u00e1stroj ur\u010den\u00fd k anal\u00fdze a reverzn\u00edmu in\u017een\u00fdrstv\u00ed mikroarchitektonick\u00e9 logiky CPU. <\/p>\n

Byly navr\u017eeny dv\u011b metody organizace \u00fatoku. Prvn\u00ed metoda je zalo\u017eena na zkreslen\u00ed obsahu p\u0159edpov\u011bdn\u00edho bufferu pro nep\u0159\u00edm\u00e9 skoky IBP (Indirect Branch Predictor), kter\u00fd se pou\u017e\u00edv\u00e1 k p\u0159edpov\u011bdi nep\u0159\u00edm\u00fdch skok\u016f v situac\u00edch, kdy adresa nebo offset pro skok je\u0161t\u011b nejsou zn\u00e1my a vypo\u010d\u00edt\u00e1vaj\u00ed se v instrukc\u00edch p\u0159edch\u00e1zej\u00edc\u00edch instrukci skoku. Druh\u00e1 metoda se dot\u00fdk\u00e1 bufferu p\u0159edpov\u011bd\u00ed skok\u016f BTB (Branch Target Buffer), kter\u00fd obsahuje informace o ned\u00e1vn\u00fdch skoc\u00edch.<\/p>\n

\"Indirector<\/center><\/p>\n

\"Indirector<\/center><\/p>\n

Zji\u0161t\u011bn\u00e9 zranitelnosti \u00fato\u010dn\u00edkovi umo\u017e\u0148uj\u00ed ur\u010dit obsah z\u00e1znam\u016f v bufferech IBP a BTB, kter\u00e9 obsahuj\u00ed adresy skok\u016f pou\u017e\u00edvan\u00e9 v extern\u00edch procesech, a tak\u00e9 prov\u00e9st substituci libovoln\u00e9 adresy skoku v datov\u00fdch tabulk\u00e1ch buffer\u016f. V d\u016fsledku toho m\u016f\u017ee \u00fato\u010dn\u00edk dos\u00e1hnout p\u0159esm\u011brov\u00e1n\u00ed toku vykon\u00e1v\u00e1n\u00ed extern\u00edho procesu na po\u017eadovanou adresu v pam\u011bti b\u011bhem spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed instrukc\u00ed. Po ur\u010den\u00ed chybn\u00fdch p\u0159edpov\u011bd\u00ed bude v\u00fdsledek spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed odm\u00edtnut, ale adresy a data, kter\u00e1 byla p\u0159e\u010dtena z pam\u011bti b\u011bhem spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed instrukc\u00ed, z\u016fstanou v cache a mohou b\u00fdt extrahov\u00e1na pomoc\u00ed jednoho z metod ur\u010dov\u00e1n\u00ed obsahu cache na z\u00e1klad\u011b anal\u00fdzy zm\u011bn v \u010dase p\u0159\u00edstupu k vyrovnan\u00fdm a nevyrovnan\u00fdm dat\u016fm. Ur\u010den\u00ed p\u0159esn\u00fdch adres nep\u0159\u00edm\u00fdch skok\u016f m\u016f\u017ee b\u00fdt v praxi nap\u0159\u00edklad pou\u017eito k obch\u00e1zen\u00ed mechanismu ochrany ASLR.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u044b\u0439 \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043a CPU \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Raptor Lake \u0438 Alder Lake. \u0410\u0442\u0430\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Indirector, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0445\u043e\u0434\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445 \u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u044f\u0434\u0440\u0435 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":116936,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116935","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Indirector \u2014 nov\u00e1 mikroarchitektonick\u00e1 \u00fatok, kter\u00fd zasahuje CPU Intel Raptor Lake a Alder Lake | ProHoster","description":"V\u00fdzkumn\u00edci z Kalifornsk\u00e9 univerzity v San Diegu p\u0159edstavili novou metodu \u00fatoku na mikroarchitektonick\u00e9 struktury procesor\u016f Intel, pou\u017eitelnou mimo jin\u00e9 pro CPU zalo\u017een\u00e9 na mikroarchitektur\u00e1ch Raptor Lake a Alder.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Indirector \u2014 \u043d\u043e\u0432\u0430\u044f \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f CPU Intel Raptor Lake \u0438 Alder Lake | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u044b\u0439 \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043a CPU \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Raptor Lake \u0438 Alder.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-04T13:05:10+00:00","article:modified_time":"2024-07-04T13:05:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116935","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:28:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:28:22","updated":"2026-01-23 03:28:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/116935","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=116935"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/116935\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/116936"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=116935"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=116935"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=116935"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}