{"id":120977,"date":"2024-12-13T21:46:00","date_gmt":"2024-12-13T19:46:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd"},"modified":"2024-12-13T21:46:00","modified_gmt":"2024-12-13T19:46:02","slug":"ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","title":{"rendered":"BadRAM r\u00fcnnak, mis v\u00f5imaldab \u00fcmber minna AMD CPU SEV-SNP autentimismehhanismile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Leuveni, L\u00fcbecki ja Birmingham'i \u00fclikoolide teadlaste r\u00fchm on v\u00e4lja t\u00f6\u00f6tanud BadRAM r\u00fcnnaku meetodi (CVE-2024-21944), mis v\u00f5imaldab \u00fcletada autentimise mehhanismi ja ohustada keskkondi, mis on kaitstud AMD protsessorites SEV-SNP laienduse kasutamisega. R\u00fcnnaku teostamiseks peab kurjategija, v\u00e4lja arvatud harvadel juhtudel, omama f\u00fc\u00fcsilist juurdep\u00e4\u00e4su m\u00e4lumoodulitele ning suutma k\u00e4ivitada koodi nullkaitsest tasandil (ring0) serveris, mis k\u00e4itab kaitstud k\u00fclgkeskkondi.    <\/p>\n<p>AMD SEV (Secure Encrypted Virtualization) laiendused on suunatud virtuaalmasinate m\u00e4lutegevuse terviklikkuse tagamisele ning nende kaitsmisele s\u00fcsteemi hosti administraatori sekkumise ja anal\u00fc\u00fcsi eest, kes v\u00f5ib h\u00fcperviisori tasemel koodi k\u00e4itada. Alguses piirdus AMD SEV kaitse k\u00fclaliss\u00fcsteemi m\u00e4lusisalduse kr\u00fcpteerimise ja registrite isoleerimisega, kuid hiljem rakendati AMD EPYC protsessorites t\u00e4iendavat SEV-SNP (Secure Nested Paging) laiendust m\u00e4lu pesatabelite turvaliseks haldamiseks, mis garanteerib m\u00e4lutegevuse terviklikkuse ja ei lubanud h\u00fcperviisoril teha muudatusi k\u00fclaliss\u00fcsteemi m\u00e4lus.     <\/p>\n<p>AMD SEV-SNP mehhanism loodi, et spioonid v\u00f5i andmekeskuste ja pilveteenuste t\u00f6\u00f6tajad, kus t\u00f6\u00f6tavad kaitstud k\u00fclgs\u00fcsteemid, ei saaks sekkuda k\u00fclgs\u00fcsteemi toimimisse. Pakutud BadRAM r\u00fcnnakutehnika v\u00f5imaldab \u00fcmber k\u00e4ia antud garantiidega, muutes DDR4 v\u00f5i DDR5 m\u00e4lumoodulite SPD (Serial Presence Detect) metaandmeid. Eduka r\u00fcnnaku korral saab k\u00fcberkurjategija \u00fcle kirjutada k\u00fclgs\u00fcsteemi m\u00e4lu kr\u00fcpteeritud andmed (\u0161ifrite tasemel, dekr\u00fcpteerimise v\u00f5imaluseta) ja m\u00f6\u00f6duda atesteerimismehhanismist, n\u00e4iteks peites tagaukse sisestamise kaitstud virtuaalmasinasse, kasutades SEV-SNP tehnoloogiat.        <\/p>\n<p>R\u00fcnnak p\u00f5hineb SPD vale m\u00e4lu parameetrite esitlemisel, mis sunnib protsessorit p\u00f6\u00f6rduma mitteeksisteerivatele aadressidele, mis kajastuvad olemasolevates m\u00e4lupiirkondades. R\u00fcndaja saab SPD-d kohandada nii, et m\u00e4lumoodul tagastab protsessorile suuruse, mis \u00fcletab m\u00e4lumooduli tegelikke omadusi. P\u00e4rast seda saab r\u00fcndaja luua kaardistuse v\u00e4lja m\u00f5eldud mitteeksisteerivast m\u00e4lust reaalsele alale DRAM-is, mis on juba kr\u00fcpteeritud kaitstud k\u00fclaliss\u00fcsteemides. Tulemuseks on olukord, kus erinevad aadressid viitavad \u00fchele ja samale f\u00fc\u00fcsilisele m\u00e4lule (kaks ala peegeldatakse \u00fchele alale DRAM-kiibil), st v\u00e4lja m\u00f5eldud peegelduse m\u00e4luaadressile p\u00e4\u00e4seb ligi juba kasutusel olevale reaalsele m\u00e4lule ja k\u00f5rvaldatakse protsessori m\u00e4lukaitse mehhanismid.    <center><img decoding=\"async\" alt=\"BadRAM r\u00fcnnak, mis v\u00f5imaldab \u00fcmber minna AMD CPU SEV-SNP autentimismehhanismile\" src=\"\/wp-content\/uploads\/2024\/12\/4713140e7aea99a59554abc7ddf71360.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>R\u00fcnnaku sooritamiseks piisab, kui kokku koguda lihtne programmeerija, mille maksumus on umbes 10 dollarit, ja mis koosneb Raspberry Pi Pico mikrokontrollerist, DDR4\/DDR5 moodulite pesast ja toiteallikast. R\u00fcnnaku teostamiseks kasutatavad t\u00f6\u00f6riistad, tuuma moodul ja ekspluateerimise protot\u00fc\u00fcbid on saadaval GitHubis.      <center><img decoding=\"async\" alt=\"BadRAM r\u00fcnnak, mis v\u00f5imaldab \u00fcmber minna AMD CPU SEV-SNP autentimismehhanismile\" src=\"\/wp-content\/uploads\/2024\/12\/d688956f05643a91bf1b5881d80af66a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>M\u00f5nede tootjate kiipide puhul, kus SPD \u00fcmberkirjutamine ei ole keelatud, on r\u00fcnnaku sooritamine v\u00f5imalik tarkvaraliselt, ilma f\u00fc\u00fcsilise juurdep\u00e4\u00e4suta serverile. N\u00e4iteks saab tarkvara abil muuta Corsairi RGB-valgustusega m\u00e4lu moodulite parameetreid. Kui rakendada t\u00e4ielikult tarkvaralist r\u00fcnnakut, v\u00f5ib s\u00fcsteem olla kompromiteeritud, n\u00e4iteks pahatahtliku BIOS-i uuenduse t\u00f5ttu v\u00f5i administraatorite sekkumise kaudu. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/\"   title=\"serverite\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1748\">serverite<\/a> pilveteenustes.      <center><img decoding=\"async\" alt=\"BadRAM r\u00fcnnak, mis v\u00f5imaldab \u00fcmber minna AMD CPU SEV-SNP autentimismehhanismile\" src=\"\/wp-content\/uploads\/2024\/12\/3ee9c7a2287c41ac8e0f237106f58e2c.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/p>\n<p>Meetodi t\u00f6\u00f6 t\u00f5endamiseks on esitatud kaks r\u00fcnnakut. Esimeses r\u00fcnnakus on n\u00e4idatud \u0161ifreeritud teksti korduvkasutamise v\u00f5imalust \u2014 AMD SEV kasutamisel salvestatakse andmed m\u00e4lu siseruumides kr\u00fcpteeritud kujul ja r\u00fcndaja ei saa sisu m\u00e4\u00e4rata, kuid tal on v\u00f5imalus lugeda kr\u00fcpteeritud andmeid ja seej\u00e4rel asendada need m\u00f5ne teise kr\u00fcpteeritud sisuga.     <\/p>\n<p>Teises r\u00fcnnakus parodiseeritakse SEV-SNP sertifitseerimismehhanismi \u00fcletamise v\u00f5imalust, mis pakub kr\u00fcptograafilist t\u00f5endit virtuaalmasina terviklikkuse kohta, mis t\u00f6\u00f6tab kaitstud keskkonnas. R\u00fcndaja saab kinni p\u00fc\u00fcda korrektse virtuaalmasina sertifitseerimisaruande ja seej\u00e4rel asendada selle kompromiteeritud virtuaalmasina jaoks, n\u00e4iteks peites tagaukse j\u00e4ljed.        <\/p>\n<p>Probleem m\u00f5jutab 3. ja 4. p\u00f5lvkonna AMD EPYC seeria protsessoreid, mille koodinimed on Milan, Milan-X, Genoa, Bergamo, Genoa-X ja Siena. AMD on juba v\u00e4lja andnud SEV-firmware'i v\u00e4rskenduse, milles on rakendatud ALIAS_CHECK kontroll, mis takistab m\u00e4lu manipuleerimist, mis on seotud k\u00e4sitletava r\u00fcnnakuga.         <\/p>\n<p>Inteli pakutavad tehnoloogiad Scalable SGX ja TDX on r\u00fcnnakute suhtes kaitstud, kuna vajalikud kontrollid on algselt olemas. Klassikaline tehnoloogia Intel SGX, mille Intel 2021. aastal aegunuks kuulutas, on osaliselt r\u00fcnnaku eeltingimustes (sarnaselt varem tuntud r\u00fcnnakule MemBuster, r\u00fcndaja v\u00f5ib anal\u00fc\u00fcsida kr\u00fcpteeritud m\u00e4lu juurdep\u00e4\u00e4se, st on v\u00f5imalik vaid kr\u00fcpteeritud teksti lugemine, kuid mitte selle \u00fcle kirjutamine). ARM-i protsessorite CCA (Confidential Compute Architecture) laienduste testimist ei ole l\u00e4bi viidud.            <\/p>\n<p>Lisaks teatatakse veel \u00fchest haavatavusest, mis on seotud AMD SEV-SNP-ga. Haavatavus tuvastati AMD arenduses oleva QEMU emulaatori forkis, mis on ette n\u00e4htud k\u00e4ivitamiseks <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/vps\/\"   title=\"virtuaalmasinad\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2193\">virtuaalmasinad<\/a> SEV-SNP. Probleem v\u00f5imaldab host- keskkonna administraatoril saada root-juurdep\u00e4\u00e4su k\u00fclalisoperatsioonis\u00fcsteemidele manipulatsioonide kaudu ACPI tabelitega. Haavatavus tuleneb sellest, et k\u00fclalisoperatsioonis\u00fcsteemi laadimisel viiakse l\u00e4bi Linuxi tuuma, algse RAM-diski ja tuuma parameetrite terviklikkuse kontrollimine, kuid ACPI tabeleid ei arvesse v\u00f5eta, mille kaudu h\u00fcpervisor v\u00f5ib esitada spetsiaalselt vormindatud AML (ACPI Masinakoodi) koodi, mis on m\u00f5eldud t\u00e4itmiseks k\u00fclalis keskkonnas. On v\u00e4idetud, et probleem ei ole QEMU-spetsiifiline ja avaldub igasugustes h\u00fcpervisorites ja emulaatorites, kuna Linuxi tuum usaldab igasuguseid ACPI andmeid, mis on saadud h\u00fcpervisorilt.            <center>  <div class=\"youtube-placeholder\" data-id=\"AUKR0Q5xWW8\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/AUKR0Q5xWW8\/hqdefault.jpg\" alt=\"Vaata videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center>  <center>  <div class=\"youtube-placeholder\" data-id=\"zhDACoigQ9M\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/zhDACoigQ9M\/hqdefault.jpg\" alt=\"Vaata videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62399\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0) [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120978,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0)\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 BadRAM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 SEV-SNP \u0432 CPU AMD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0)\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-13T19:46:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-13T19:46:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 BadRAM-i r\u00fcnnak, mis v\u00f5imaldab \u00fcletada SEV-SNP autentimise mehhanismi AMD protsessorites | ProHoster","description":"Leedu, L\u00fcbecki ja Birminghami \u00fclikooli teadlastest koosnev r\u00fchm on v\u00e4lja t\u00f6\u00f6tanud BadRAM-i r\u00fcnnakumeetodi (CVE-2024-21944), mis v\u00f5imaldab \u00fcletada autentimise mehhanismi ja kompromiteerida SEV-SNP laiendust kasutavad AMD protsessoritega kaitstud keskkonnad. R\u00fcnnaku sooritamiseks peab kurjategija, v\u00e4lja arvatud harvadel juhtudel, saama f\u00fc\u00fcsilise juurdep\u00e4\u00e4su m\u00e4lumoodulitele ning olema v\u00f5imeline k\u00e4ivitama koodi nulltaseme (ring0) kaitsel.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 BadRAM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 SEV-SNP \u0432 CPU AMD | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0)","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-13T19:46:02+00:00","article:modified_time":"2024-12-13T19:46:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:38:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:53:19","updated":"2026-02-09 17:38:18"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=120977"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120977\/revisions"}],"predecessor-version":[{"id":159437,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/120977\/revisions\/159437"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/120978"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=120977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=120977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=120977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}