{"id":111523,"date":"2023-11-15T15:10:13","date_gmt":"2023-11-15T13:10:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-cpu-amd-pozvolyayushhaya-obojti-mehanizm-zashhity-sev-secure-encrypted-virtualization"},"modified":"2023-11-15T15:10:13","modified_gmt":"2023-11-15T13:10:13","slug":"uyazvimost-v-cpu-amd-pozvolyayushhaya-obojti-mehanizm-zashhity-sev-secure-encrypted-virtualization","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-cpu-amd-pozvolyayushhaya-obojti-mehanizm-zashhity-sev-secure-encrypted-virtualization","title":{"rendered":"AMD CPU haavatavus, mis v\u00f5imaldab SEV (Secure Encrypted Virtualization) kaitses\u00fcsteemi rikkumist.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Helmholtzi Informatsiooniturbe Keskuse (CISPA) teadlased avaldasid uue r\u00fcnnakutehnika CacheWarp, mis v\u00f5imaldab kompromiteerida AMD SEV (Secure Encrypted Virtualization) kaitsemehhanismi, mida kasutatakse virtualiseerimiss\u00fcsteemides, et kaitsta virtuaalmasinaid h\u00fcperviisori v\u00f5i host-s\u00fcsteemi administraatori sekkumise eest. Ettepanek v\u00f5imaldab r\u00fcndajal, kellel on juurdep\u00e4\u00e4s h\u00fcperviisorile, saavutada kolmanda osapoole koodi t\u00e4itmine ja privileegide t\u00f5stmine virtuaalmasinas, mille kaitse on tagatud AMD SEV abil. <\/p>\n

R\u00fcnnak p\u00f5hineb haavatavusel (CVE-2023-20592), mis tuleneb vigasest k\u00e4itumisest vahem\u00e4luga processorite instruktsiooni INVD t\u00e4itmise ajal, mis v\u00f5imaldab andmete des\u00fcnkroniseerimist m\u00e4lus ja vahem\u00e4lus ning seadmete terviklikkuse s\u00e4ilitamise mehhanismide \u00fcletamist, mis on rakendatud SEV-ES ja SEV-SNP laienduste p\u00f5hjal. Haavatavus m\u00f5jutab AMD EPYC protsessoreid esimesest kuni kolmanda p\u00f5lvkonnani. <\/p>\n

AMD EPYC kolmandiku p\u00f5lvkonna (Zen 3) protsessorite probleem on lahendatud novembrikuu mikrokoodi uuenduses, mis ilmus eile, ning sellel on AMD v\u00e4itel m\u00f5ju j\u00f5udlusele. Esimese ja teise p\u00f5lvkonna AMD EPYC (Zen 1 ja Zen 2) puhul kaitset ei ole, kuna need protsessorid ei toeta SEV-SNP laiendust, mis tagab terviklikkuse kontrolli. virtuaalmasinad<\/a>. AMD EPYC «Genoa» neljanda p\u00f5lvkonna AMD protsessorid, mis p\u00f5hinevad mikroarhitektuuril «Zen 4», ei ole haavatavad. <\/p>\n

AMD SEV tehnoloogiat kasutatakse virtuaalsete masinate isoleerimiseks selliste pilveteenuste pakkujate nagu Amazon Web Services (AWS), Google Cloud, Microsoft Azure ja Oracle Compute Infrastructure (OCI) poolt. AMD SEV kaitse on ellu viidud virtuaalmasinate m\u00e4lu riistvaralise kr\u00fcptimise kaudu. T\u00e4iendavalt tagab SEV-ES (Encrypted State) laienduse kaudu CPU registerite kaitse. Dekr\u00fcpteeritud andmetele p\u00e4\u00e4seb ligi ainult k\u00e4ivitatav k\u00fclalisos\u00fcsteem, samas kui \u00fclej\u00e4\u00e4nud virtuaalmasinatele<\/a> ja h\u00fcperviisor saavad katsetades sellele m\u00e4lule juurdep\u00e4\u00e4su ainult kr\u00fcpteeritud andmestiku. <\/p>\n

Kolmandas p\u00f5lvkonnas AMD EPYC protsessorites on rakendatud lisanduv SEV-SNP (Secure Nested Paging) t\u00e4iendus, mis tagab turvalise t\u00f6\u00f6tamise m\u00e4lulehtede sisseviidud tabelitega. Lisaks \u00fcldisele m\u00e4lude kr\u00fcptimisele ja registrite eraldamisele sisaldab SEV-SNP t\u00e4iendavaid meetodeid m\u00e4lumahu terviklikkuse kaitseks, et v\u00e4ltida h\u00fcperviisori sekkumist VM-i. Kr\u00fcptimisv\u00f5tmete haldamine toimub eraldi protsessori PSP (Platform Security Processor) sees, mis on realiseeritud ARM arhitektuuril. <\/p>\n

Eesm\u00e4rk on pakkuda r\u00fcnnakumeetodit, kasutades k\u00e4su INVD abil m\u00e4\u00e4rdunud lehtede vahem\u00e4lu plokkide (ridade) kehtetuks kuulutamiseks, ilma et s\u00f5ltumatuks andmeid tagasi m\u00e4lu kirjutataks. Selliselt meetod v\u00f5imaldab v\u00e4lja viia muudetud andmed vahem\u00e4lust, muutes m\u00e4luseisundi. R\u00fcnnaku teostamiseks pakutakse v\u00e4lja programmeeritud erandeid (fault injection), et katkestada virtuaalmasina t\u00f6\u00f6 kahes kohas: esimeses kohas kutsub r\u00fcndaja v\u00e4lja k\u00e4su «wbnoinvd», et tagasi kirjutada k\u00f5ik vahem\u00e4lu salvestatud kirjutamistehingud m\u00e4lu, ja teises kohas kutsub v\u00e4lja k\u00e4su «invd», et naasta m\u00e4lu kajastamata kirjutamistehingud vanasse olekusse. <\/p>\n

S\u00fcsteemide haavatavuse kontrollimiseks on avalikustatud eksploiteerimise protot\u00fc\u00fcp, mis v\u00f5imaldab teha erandi asendamist virtuaalmasinas, mis on kaitstud AMD SEV kaudu, ning tagasi p\u00f6\u00f6rduda vana olekusse, et mitte taastatud m\u00e4lu muudatused VM-is. Muudatuste tagasip\u00f6\u00f6rdumist saab kasutada programmi teostuse muutmiseks, naastes vanale tagasik\u00f5ne aadressile virnas v\u00f5i kasutades vana seansi, millele oli eelnevalt autentimine tehtud, sisendparameetrite tagasitoomiseks autentimism\u00e4rgi v\u00e4\u00e4rtust. <\/p>\n

N\u00e4iteks on uurijad demonstreerinud CacheWarp meetodi rakendamise v\u00f5imalust Bellcore r\u00fcnnaku l\u00e4biviimiseks RSA-CRT algoritmi rakendusele ipp-crypto raamatukogus, mis v\u00f5imaldas taastada privaatv\u00f5tme digitaalallkirja arvutamisel tekkivate vigade asendamise kaudu. Samuti on n\u00e4idatud, kuidas saab OpenSSH seansi kontrolli parameetreid asendada kaug\u00fchenduse ajal k\u00fclalis\u00fcsteemile ning seej\u00e4rel muuta kontrolli seisu sudo utiliidi t\u00e4itmisel root-\u00f5iguste saamiseks Ubuntu 20.04-s. Eksploiteerimise t\u00f6\u00f6 on testitud AMD EPYC 7252, 7313P ja 7443 protsessoritega s\u00fcsteemidel.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 CacheWarp, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b AMD SEV (Secure Encrypted Virtualization), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043e\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0443, \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111523","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AMD CPU haavatavus, mis v\u00f5imaldab SEV (Secure Encrypted Virtualization) kaitsemehhanismi \u00fcletamist | ProHoster","description":"Helmholtz'i Infoturbe Kaitsuse Keskuse (CISPA) teadlased on v\u00e4lja t\u00f6\u00f6tanud uue r\u00fcnnetehnika nimega CacheWarp, mis v\u00f5imaldab kompromiteerida AMD SEV (Secure Encrypted Virtualization) kaitsemehhanismi, mida kasutatakse virtualiseerimiss\u00fcsteemides virtuaalmasinate kaitsmiseks h\u00fcperviisori v\u00f5i host-s\u00fcsteemi administraatori sekkumise eest. Pakutud meetod v\u00f5imaldab r\u00fcndajal, kellel on juurdep\u00e4\u00e4s h\u00fcperviisorile, saavutada kolmanda osapoole koodi k\u00e4ivitamist ja privileegide t\u00f5stmist virtuaalmasinas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-cpu-amd-pozvolyayushhaya-obojti-mehanizm-zashhity-sev-secure-encrypted-virtualization","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b SEV (Secure Encrypted Virtualization) | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 CacheWarp, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b AMD SEV (Secure Encrypted Virtualization), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043e\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0443, \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435,","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-cpu-amd-pozvolyayushhaya-obojti-mehanizm-zashhity-sev-secure-encrypted-virtualization","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-15T13:10:13+00:00","article:modified_time":"2023-11-15T13:10:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"111523","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 17:11:24","updated":"2026-02-09 17:11:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=111523"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111523\/revisions"}],"predecessor-version":[{"id":164098,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111523\/revisions\/164098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=111523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=111523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=111523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}