{"id":119185,"date":"2024-08-08T09:43:01","date_gmt":"2024-08-08T07:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-ghostwrite-predostavlyayushhaya-polnyj-dostup-k-fizicheskoj-pamyati-na-cpu-risc-v-xuantie"},"modified":"2024-08-08T09:43:01","modified_gmt":"2024-08-08T07:43:01","slug":"uyazvimost-ghostwrite-predostavlyayushhaya-polnyj-dostup-k-fizicheskoj-pamyati-na-cpu-risc-v-xuantie","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-ghostwrite-predostavlyayushhaya-polnyj-dostup-k-fizicheskoj-pamyati-na-cpu-risc-v-xuantie","title":{"rendered":"GhostWrite haavatavus, mis annab t\u00e4ieliku juurdep\u00e4\u00e4su RISC-V XuanTie CPU f\u00fc\u00fcsilisele m\u00e4lule","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Helmholtz Cyber Security Center (CISPA) teadlased avaldasid uuringu tulemusi RISC-V arhitektuuril p\u00f5hinevate protsessorite turvalisuse osas ning paljastasid teavet haavatavuse kohta, mille koodnimeks on GhostWrite. See haavatavus m\u00f5jutab RISC-V protsessoreid XuanTie C910, mida toodab Hiina ettev\u00f5te T-Head (Alibaba t\u00fctarfirma) ja arendatakse avatud projektidena. Haavatavus v\u00f5imaldab r\u00fcndajal, kes omab \u00f5igusteta piiratud juurdep\u00e4\u00e4su s\u00fcsteemile, lugeda ja kirjutada \u00fcksk\u00f5ik millistesse f\u00fc\u00fcsilise m\u00e4lu piirkondadesse ning p\u00e4\u00e4seda ligi perifeersete seadmete, nagu v\u00f5rkaartide, haldamisele, kasutades MMIO (Memory-Mapped Input\/Output). <\/p>\n

Haavatavus on p\u00f5hjustatud protsessori arhitektuuri puuduj\u00e4\u00e4kidest, mis on seotud tootja lisatud protsessorijuhiste isolatsiooniga, mis laiendab RISC-V k\u00e4su kogumit ja v\u00f5imaldab otse juurdep\u00e4\u00e4su DRAM-ile, m\u00f6\u00f6da virtuaalse m\u00e4lu mehhanisme. Teatud laiendatud juhiste otsene t\u00f6\u00f6 f\u00fc\u00fcsilise m\u00e4luga saab \u00fcletada m\u00e4lu isolatsiooni protsesside vahel. <\/p>\n

R\u00fcnnatud r\u00fcnnakutehnika on 100% uuesti esitatav ja n\u00f5uab oma koodi t\u00e4itmist vaid m\u00f5ne mikrosekundi jooksul. Isolatsioonimeetodid, nagu konteinerid ja sandbox-keskkonnad, ei takista haavatavuse \u00e4rakasutamist. Haavatavuse blokeerimiseks aitab vaid vektori laienduste toe t\u00e4ielik v\u00e4ljal\u00fclitamine, mis v\u00e4hendab rvv-bench testide tulemuslikkust 33% (aruande m\u00e4rkuses on m\u00e4rgitud 77%, kuid kokkuv\u00f5tliku lehe peal \u2014 33%, samas detailides mainitakse, et memcpy tulemuslikkus v\u00e4heneb 33%, ja memset 8%), samuti v\u00e4hendab see ligikaudu kaks korda rakenduste jaoks kergesti saadaval olevate protsessori juhiste arvu. <\/p>\n

XuanTie C910 protsessorid on \u00fched k\u00f5ige k\u00f5rgema j\u00f5udlusega RISC-V kiibid, mis on turul saadaval ja juba aktiivselt kasutuses serverites<\/a> pilves\u00fcsteemide ja s\u00fclearvutite jaoks. N\u00e4iteks ilmneb probleem Scaleway Elastic Metal RV1 serverites, Lichee Cluster 4A klastrites, Lichee Book 4A s\u00fclearvutites, Lichee Console 4A m\u00e4ngukonsoolides, Lichee Pocket 4A kaasaskantavates arvutites, Sipeed Lichee Pi 4A, Milk-V Meles ja BeagleV-Ahead. <\/p>\n

Uurijad on valmistanud v\u00e4lja eksperdi, mis v\u00f5imaldab mittepriviligeeritud kasutajal saada root-\u00f5igused Linuxis. Ekspert muudab m\u00e4lu lehtede tabeli sisu, mida kasutatakse virtuaalsete aadresside t\u00f5lkimiseks f\u00fc\u00fcsilistele, et saada virtuaalseid aadresse, mis on seotud k\u00f5igi f\u00fc\u00fcsiliste aadressidega. Samuti on koostatud n\u00e4ide eksperdist, mis loeb tuuma ja teiste protsesside m\u00e4lu sisu, v\u00f5imaldades v\u00e4lja v\u00f5tta m\u00e4lus hoitud kr\u00fcpteerimisv\u00f5tmed ja paroolid.

T\u00e4psemalt on uurijad tuvastanud kaks v\u00e4hem ohtlikku arhitektuurilist haavatavust \u2014 \u00fcks m\u00f5jutab T-Head XuanTie C906 protsessoreid ja teine T-Head XuanTie C908. M\u00f5lemad haavatavused piirduvad teenuse katkestamise t\u00f5demisega CPU peatamise t\u00f5ttu. Haavatavused v\u00f5ivad ohustada pilveplatvorme, mis on \u00fcles ehitatud T-Head XuanTie kiipidele, kuna pilves olevate koodide t\u00e4itmise juures on v\u00f5imalik peatada ka teiste kasutajate teenindamist, kes jagavad sama... serveris<\/a>. <\/p>\n

Probleeme tuvastati RISCVuzz raamistiku abil, mis on loodud CPU fuzzing-testimiseks. Raamistik tuvastab erinevused sama laiendatud juhiste rakendustes erinevates CPU-des, l\u00e4htudes oletusest, et RISC-V k\u00e4su komplekti \u00fchtse registri puudumise t\u00f5ttu v\u00f5ivad sama koodiga juhised erinevate tootjate kiipides p\u00f5hjustada erinevaid toiminguid. Kontrollimine koosnes RISC-V erinevate CPU-de k\u00e4itlusv\u00e4\u00e4rtuste v\u00f5rdlemisest ja v\u00f5imalike haavatavuste anal\u00fc\u00fcsist olukordades, kus oli m\u00e4rgata k\u00e4itluslike lahknevusi.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b RISC-V \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f GhostWrite. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 RISC-V-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b XuanTie C910, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 T-Head (\u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 Alibaba) \u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432 \u0444\u043e\u0440\u043c\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119185","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GhostWrite haavatavus, mis pakub t\u00e4ielikku ligip\u00e4\u00e4su f\u00fc\u00fcsilisele m\u00e4lule RISC-V XuanTie CPU-s | ProHoster","description":"Helmholzi Infoturbe Keskuse (CISPA) teadlased avaldasid uuringu tulemused RISC-V arhitektuuril p\u00f5hinevate protsessorite turvalisuse osas ja avalikustasid andmed haavatavuse kohta, mis sai koodikoodiks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-ghostwrite-predostavlyayushhaya-polnyj-dostup-k-fizicheskoj-pamyati-na-cpu-risc-v-xuantie","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c GhostWrite, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 CPU RISC-V XuanTie | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b RISC-V \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-ghostwrite-predostavlyayushhaya-polnyj-dostup-k-fizicheskoj-pamyati-na-cpu-risc-v-xuantie","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-08T07:43:01+00:00","article:modified_time":"2024-08-08T07:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119185","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:01:06","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 05:35:19","updated":"2026-02-09 22:01:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119185"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119185\/revisions"}],"predecessor-version":[{"id":164438,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119185\/revisions\/164438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}