{"id":182817,"date":"2026-08-10T19:49:35","date_gmt":"2026-08-10T17:49:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2"},"modified":"2026-08-10T19:49:35","modified_gmt":"2026-08-10T17:49:35","slug":"tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","title":{"rendered":"TONTOU \u2014 r\u00fcnnak Intel ja AMD CPU-dele, mis v\u00f5imaldab Spectre v2 haavatavuste kaitse \u00fcletamist.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Massachusetts Institute of Technology teadlased tuvastasid TONTOU (Time-of-Neutralization to Time-of-Use) r\u00fcnnetehnika, mis pakub uut viisi Spectre v2 klassi mikroarhitektuuri haavatavuste \u00e4ra kasutamiseks. See haavatavus v\u00f5imaldab m\u00e4\u00e4rata tuumam\u00e4lu sisu, kui eksploiti k\u00e4itatakse kasutaja ruumis. Kood haavatavuse \u00e4ra kasutamise blokeerimiseks lisati Linuxi tuumasse 5. augustil ning see on sisaldatud versioonides 7.1.7, 6.18.43, 6.12.102, 6.6.149, 6.1.181, 5.15.214 ja 5.10.263. <\/p>\n

Teadlased demonstreerisid, et kohalik alaliselt privileege mitteomav kasutaja v\u00f5ib r\u00fcnnata, et m\u00e4\u00e4rata tuumkasutaja root parooli hash, mis on salvestatud failis \/etc\/shadow ja laetud m\u00e4llu autentimise k\u00e4igus. Teadlastele \u00f5nnestus saada haavatavustest tuumam\u00e4lust andmete lekkimist kiirusel 5.47 baiti sekundis ja t\u00e4psusega 91.97%. 10 testimise k\u00e4ivitamisest keskmiselt 18 minuti jooksul, \u00f5nnestus pooltes katsetes edukalt kindlaks teha, et fail \/etc\/shadow on m\u00e4lu olemas ning selle sisu v\u00e4lja t\u00f5mmata. <\/p>\n

Eksploit on demonstreeritud AMD protsessoritega s\u00fcsteemidel ja seda saab kasutada AMD Zen 1-4 protsessorite peredes. Intel s\u00fcsteemidel on r\u00fcnne samuti teostatav, kuid eksploiteerimine on keerulisem. Stack'i tagasijaotamise \u00fclevoolu ja SRSO (Speculative Return Stack Overflow) haavatavuse kaitsmiseks kasutavad AMD protsessorid Safe-RET kaitsemehhanismi, mis puhastab haruprogrammi puhver p\u00e4rast iga kasutamist ja kitsendab r\u00fcnnaku ajalimiiti kahele instruktsioonile, mis teostatakse m\u00f5ne k\u00fcmnendi nanosekundi jooksul. <\/p>\n

Selle kaitse meelevalda ja r\u00fcnnaku akna laiendamiseks on rakendatud protsessori aeglustamise tehnikat, v\u00f5imaldades h\u00e4iret asendada \u00f5igeaegselt, et suunata t\u00e4itmisvoog tuumas ja kasutada h\u00e4ire t\u00f6\u00f6tlejat k\u00e4itumise moonutamiseks s\u00f5ltumatute kontekstide prognoosimisaparaadis. Kreedit\u00e4psuse \u00e4rakasutamiseks saab r\u00fcndaja luua tingimusi, kus spekuleeriv haru bloki k\u00e4ivitamine teeb arvatust palju vale prognoosi CALL kutseid, mis on piisav, et \u00fcletada tagastusadresside sihtm\u00e4rkide virn ja kirjutada \u00f5igesti prognoositud tagastuspunktid, mis asuvad virna alguses. Tulemuseks saavad virna algse elemendi v\u00e4\u00e4rtused, mille r\u00fcndaja valis, \u00fcle kirjutatuks, mis p\u00f5hjustab nende asendatud v\u00e4\u00e4rtuste kasutamise spekuleeriva RET k\u00e4su t\u00e4itmiseks teise protsessi kontekstis. <\/p>\n

Protsessor m\u00e4\u00e4rab, et haru prognoos ei \u00f5igustanud end ja tagastab operatsiooni algseisundisse, kuid spekuleerimise k\u00e4igus t\u00f6\u00f6deldud andmed j\u00e4\u00e4vad m\u00e4llu ja mikroarhitektuursetesse puhverdesse. Kui vale prognoositud blokil on m\u00e4lu aadress, viib selle spekuleerimine \u00fcldisesse m\u00e4llu ja andmete lugemiseni m\u00e4lust. Kelmuse sattumiste m\u00e4\u00e4ramiseks vahem\u00e4llu v\u00f5ib kasutada \u00fchte meetodit, mis p\u00f5hineb puhversisu muutmise ajanal\u00fc\u00fcsil joogitaseme ja mittejoogitaseme andmetele.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 TONTOU (Time-of-Neutralization to Time-of-Use), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre v2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041a\u043e\u0434 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u044f\u0442 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux 5 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 7.1.7, 6.18.43, 6.12.102, 6.6.149, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182817","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47TONTOU \u2014 r\u00fcnnak Intel ja AMD protsessoritele, mis v\u00f5imaldab v\u00e4ltida Spectre v2 haavatavuse kaitset | ProHoster","description":"Massachusettsi Tehnoloogiainstituudi uurijad on avastanud TONTOU (Time-of-Neutralization to Time-of-Use) r\u00fcnnakutehnikate, mis pakuvad uut viisi mikroarhitektuursete haavatavuste, sealhulgas Spectre, \u00e4ra kasutamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47TONTOU \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 CPU Intel \u0438 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre v2 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 TONTOU (Time-of-Neutralization to Time-of-Use), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre.","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-10T17:49:35+00:00","article:modified_time":"2026-08-10T17:49:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182817","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182817"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182817\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182817"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182817"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}