{"id":33659,"date":"2019-10-31T21:53:59","date_gmt":"2019-10-31T18:53:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlen-novyj-klass-uyazvimostej-v-protsessorah-intel\/"},"modified":"2019-10-31T21:53:59","modified_gmt":"2019-10-31T18:53:59","slug":"predstavlen-novyj-klass-uyazvimostej-v-protsessorah-intel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlen-novyj-klass-uyazvimostej-v-protsessorah-intel","title":{"rendered":"Esitletud on uus klass Intel'i protsessorite haavatavustest.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Intel <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00233.html\">avalikustasin<\/a><\/noindex> teave uuest <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/architecture-and-technology\/mds.html\">haavatavuste klassist<\/a><\/noindex> oma protsessorites &#8212; <noindex><a rel=\"nofollow\" href=\"https:\/\/mdsattacks.com\/\">MDS<\/a><\/noindex> (Microarchitectural Data Sampling). Nagu ka varasemad Spectre klassi r\u00fcnnakud, v\u00f5ivad uued probleemid viia operatsioonis\u00fcsteemi, virtuaalmasinate ja teiste protsesside tundlike andmete lekkimiseni. Teadaolevalt avastasid probleemid esmalt Intel'i t\u00f6\u00f6tajad ja partnerid sisemise auditi k\u00e4igus, millele j\u00e4rgnes teave sarnaste probleemide kohta Intel'ile, mida jagasid s\u00f5ltumatud teadlased. AMD ja ARM protsessorid ei ole probleemiga seotud.<\/p>\n<p>Graz'i tehnika\u00fclikooli teadlaste avastatud probleemide p\u00f5hjal <noindex><a rel=\"nofollow\" href=\"https:\/\/cpu.fail\/\">on v\u00e4lja t\u00f6\u00f6tatud<\/a><\/noindex> mitu praktilist r\u00fcnnakut k\u00f5rvalkanalite kaudu:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/zombieloadattack.com\/\">ZombieLoad<\/a><\/noindex>  (<noindex><a rel=\"nofollow\" href=\"https:\/\/zombieloadattack.com\/zombieload.pdf\">PDF<\/a><\/noindex>) &#8212; v\u00f5imaldab v\u00e4lja t\u00f5mmata konfidentsiaalset teavet teistest protsessidest, operatsioonis\u00fcsteemist, virtuaalmasinatest ja kaitstud keskkondadest (TEE, Trusted Execution Environment). N\u00e4iteks on demonstreeritud v\u00f5imalus m\u00e4\u00e4rata Tor brauseris avatud lehtede ajalugu, mis t\u00f6\u00f6tab teises virtuaalmasinas, samuti tuvastada rakendustes kasutatavaid juurdep\u00e4\u00e4suees\u00fcsteeme ja paroole;\n<p><center><br \/>\n<video controls=\"\" style=\"width: 720px; max-width:100%\" poster=\"https:\/\/zombieloadattack.com\/public\/images\/demo.jpg\"  src=\"https:\/\/zombieloadattack.com\/public\/videos\/demo_720.mp4\"><source src=\"https:\/\/zombieloadattack.com\/public\/videos\/demo_720.mp4\" type=\"video\/mp4\" label=\"720p\"><\/video><\/center><\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/mdsattacks.com\/\">RIDL<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/mdsattacks.com\/files\/ridl.pdf\">PDF<\/a><\/noindex>) &#8212; v\u00f5imaldab korraldada teabe leket erinevate isoleeritud alade vahel Intel protsessorites, nagu t\u00e4itmispufferid, salvestuspufferid ja laadimisportid. R\u00fcnnaku n\u00e4iteid on n\u00e4idatud teabe lekkimise korraldamiseks teistest protsessidest, operatsioonis\u00fcsteemist, virtuaalmasinatest ja kaitstud keskkondadest. N\u00e4iteks on n\u00e4idatud, kuidas teada saada root parooli h\u00e4\u00e4letust sisu failist \/etc\/shadow perioodiliselt autentimiskatsete k\u00e4igus (r\u00fcnnak kestis 24 tundi);\n<p><center><div class=\"youtube-placeholder\" data-id=\"JXPebaGY8RA\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/JXPebaGY8RA\/hqdefault.jpg\" alt=\"Vaata videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>Lisaks on toodud n\u00e4ide r\u00fcnnaku l\u00e4biviimisest JavaScript'i ja WebAssembly kaudu kahjuliku lehe avamisel SpiderMonkey mootoris (kaasaegsetes t\u00e4ielikes brauserites on selline r\u00fcnnak ebat\u00f5en\u00e4oline t\u00e4nu taimeri t\u00e4psuse piirangutele ja Spectre'i vastastele meetmetele);<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"KAgoDQmod1Y\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/KAgoDQmod1Y\/hqdefault.jpg\" alt=\"Vaata videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/mdsattacks.com\/\">Fallout<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/mdsattacks.com\/files\/fallout.pdf\">PDF<\/a><\/noindex>) &#8212; annab v\u00f5imaluse lugeda andmeid, mis on hiljuti operatsioonis\u00fcsteemi poolt salvestatud, ja m\u00e4\u00e4rata OS m\u00e4lu paigutust teiste r\u00fcnnakute lihtsustamiseks;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/cpu.fail\/store_to_leak_forwarding.pdf\">Store-To-Leak Forwarding<\/a><\/noindex> &#8212; kasutab CPU optimiseerimist m\u00e4lubuffers t\u00f6\u00f6tlemiseks ning seda saab kasutada tuumade aadressiruumi randomiseerimise mehhanismi (KASLR) m\u00f6\u00f6damiseks, operatsioonis\u00fcsteemi oleku j\u00e4lgimiseks v\u00f5i <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cyberus-technology.de\/posts\/2019-05-14-zombieload.html\">korraldamiseks<\/a><\/noindex> lekke, mis on seotud Spectre'i meetoditele p\u00f5hinevate seadmete kombineerimisega.\n<\/ul>\n<p>Tuvastatud <noindex><a rel=\"nofollow\" href=\"https:\/\/software.intel.com\/security-software-guidance\/software-guidance\/microarchitectural-data-sampling\">haavatavusest<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> CVE-2018-12126 &#8212; MSBDS (Microarchitectural Store Buffer Data Sampling), m\u00e4lu buffer'i sisu taastamine. Kasutatakse Fallout r\u00fcndes. Ohtlikkuse aste on m\u00e4\u00e4ratud 6.5 punkti (CVSS);\n<li class=\"l\"> CVE-2018-12127 &#8212; MLPDS (Microarchitectural Load Port Data Sampling), laadimisportide sisu taastamine. Kasutatakse RIDL r\u00fcndes. CVSS 6.5;\n<li class=\"l\"> CVE-2018-12130 &#8212; MFBDS (Microarchitectural Fill Buffer Data Sampling), t\u00e4itebuffer'i sisu taastamine. Kasutatakse ZombieLoad ja RIDL r\u00fcnnakutes. CVSS 6.5;\n<li class=\"l\"> CVE-2019-11091 &#8212; MDSUM (Microarchitectural Data Sampling Uncacheable Memory), nekashitava m\u00e4lu sisu taastamine. Kasutatakse RIDL r\u00fcndes. CVSS 3.8.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/software.intel.com\/security-software-guidance\/insights\/deep-dive-intel-analysis-microarchitectural-data-sampling\">T\u00fchi<\/a><\/noindex> tuvastatud probleemid anal\u00fc\u00fcsimeetodite rakendamisv\u00f5imekuses k\u00fclgkanalite kaudu andmetele mikroarhitektuursete struktuuride suhtes, millele rakendused ei p\u00e4\u00e4se otse ligi. Jutt k\u00e4ib madala taseme struktuuridest, nagu t\u00e4itepuffer (Line Fill Buffer), salvestuspuffer (Store Buffer) ja laadimisport (Load Port), mis on v\u00e4iksemad koostisosad kui esimese taseme vahem\u00e4lu (L1D), andme laadimise vahem\u00e4lu (RDCL) v\u00f5i L1TF (L1 Terminal Fault) ning seega sisaldavad v\u00e4hem teavet ja uuendatakse sagedamini.<br \/>\n<center><img decoding=\"async\" alt=\"Esitletud on uus klass Intel&#039;i protsessorite haavatavustest.\" src=\"\/wp-content\/uploads\/2019\/05\/205ff034e070b8b057f01c02d6381c2a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<p>K\u00fclgkanali r\u00fcnnakud mikroarhitektuursetele struktuuridele on m\u00e4rksa keerulisemad kui vahem\u00e4lu sisu taastamise meetodid ja n\u00f5uavad m\u00e4rkimisv\u00e4\u00e4rsete andmemahtude j\u00e4lgimist ja anal\u00fc\u00fcsimist, et m\u00e4\u00e4rata nende seos kindlate aadressidega m\u00e4lus (tegelikult ei saa r\u00fcndaja sihip\u00e4raselt kinni p\u00fc\u00fcda teatud andmeid, vaid v\u00f5ib pikka aega koguda lekkeid ja rakendada statistilisi meetodeid teatud t\u00fc\u00fcpi andmete rekonstrueerimiseks). Lisaks m\u00f5jutab r\u00fcnnak ainult andmeid samas f\u00fc\u00fcsilises CPU tuumas, kus ka r\u00fcndaja kood asub.<\/p>\n<p>Mikroarhitektuuri struktuuride sisu m\u00e4\u00e4ramise ettepanekud p\u00f5hinevad sellel, et neid struktuure kasutatakse spekulatiivsete vigade (fault) t\u00f6\u00f6tlemisel v\u00f5i load ja store operatsioonides.<br \/>\nSpekulatiivse t\u00e4itmise korral suunatakse sisemise struktuuri sisu edasiseks t\u00f6\u00f6tlemiseks registritesse v\u00f5i vahem\u00e4llu. Spekulatiivsed operatsioonid ei l\u00f5peta ja tulemus k\u00f5rvaldatakse, kuid suunatud sisu on v\u00f5imalik m\u00e4\u00e4rata vahem\u00e4lu anal\u00fc\u00fcsi meetodite abil k\u00f5rvaliste kanalite kaudu.<\/p>\n<p>Laadimisportide \u00fclesanne on toita andmeid m\u00e4lust v\u00f5i sisend-\/v\u00e4ljundis\u00fcsteemist CPU-le ning edastada saadud teave CPU registritesse. Tehnoloogia t\u00f5ttu j\u00e4\u00e4vad vanad laadimisoperatsioonide andmed portidesse kuni nende \u00fclekirjutamiseni, mis v\u00f5imaldab kaudselt m\u00e4\u00e4rata laadimisporti andmete olekut, kasutades veateateid ning SSE\/AVX\/AVX-512 k\u00e4ske, mis laadivad rohkem kui 64 bitti andmeid. Sellistes tingimustes spekuleerivad laadimisoperatsioonid aegunud andmeid sisemistest struktuuridest s\u00f5ltuvatesse operatsioonidesse. Sarnane protsess toimub ka m\u00e4lupuhvri kaudu, mis kiirendab CPU vahem\u00e4lu kirjutamist ning sisaldab aadresside, v\u00e4\u00e4rtuste ja lipufunktsioonide tabelit, samuti t\u00e4itmispuhvrit, mis hoiab andmeid, mis on puudu L1 vahem\u00e4lust (cache-miss), kuni need laaditakse teistest vahem\u00e4lutasanditest.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/pics_base\/0_1557869220.png\"><img decoding=\"async\" alt=\"Esitletud on uus klass Intel&#039;i protsessorite haavatavustest.\" src=\"\/wp-content\/uploads\/2019\/05\/1f8bf290cd6ecbec5a5f17cc3103010d.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Probleem <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/architecture-and-technology\/engineering-new-protections-into-hardware.html\">puudutab<\/a><\/noindex> Intel'i protsessorimudelid, mis on toodetud alates 2011. aastast (alates 6. p\u00f5lvkonnast). Samuti blokeeritakse riistvaravead alates m\u00f5nest 8. ja 9. p\u00f5lvkonna Intel Core mudelist ning 2. p\u00f5lvkonna Intel Xeon Scalable mudelist (kontrollimiseks v\u00f5ib kasutada bitti ARCH_CAP_MDS_NO IA32_ARCH_CAPABILITIES MSR-is). Vead on samuti parandatud <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/architecture-and-technology\/mds.html\">likvideeritud<\/a><\/noindex> tarkvara, mikrokoodi ja operatsioonis\u00fcsteemide tasandil. Intel'i hinnangul ei \u00fcleta enamikul kasutajatest j\u00f5udluse kadu p\u00e4rast paranduse aktiveerimist <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/architecture-and-technology\/mds.html\">3%. Kui Hyper-Threading tehnoloogia on v\u00e4lja l\u00fclitatud, v\u00f5ib j\u00f5udlus v\u00e4heneda kuni 9% SPECint_rate_base testis, kuni 11% t\u00e4isarvuliste arvutuste k\u00e4igus ja kuni 19% serveripoolsete Java rakenduste t\u00e4itmisel (HT lubamisel on j\u00f5udluse kadu peaaegu olematu). Parandused ei m\u00f5juta praktiliselt sisendi\/-v\u00e4ljundi operatsioonide j\u00f5udlust.<\/a><\/noindex> 3%. Kui keela Hyper-Threading tehnoloogia, v\u00f5ib j\u00f5udluse langus kuna 9% SPECint_rate_base testis, kuni 11% t\u00e4isarvutehingute puhul ja kuni 19% serverip\u00f5histe Java rakenduste k\u00e4itamisel (HT lubamisel on j\u00f5udluse langus praktiliselt olematu). Parandused ei m\u00f5juta praktiliselt sisendi\/ v\u00e4ljundi operatsioonide j\u00f5udlust.<\/p>\n<p>Linuxi tuumas on MDS kaitse <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=fa4bff165070dc40a3de35b78e4f8da8e8d85ec5\">on lisatud<\/a><\/noindex> t\u00e4na <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/\">uuendustes<\/a><\/noindex>  \t5.1.2, 5.0.16,<br \/>\n4.19.43, 4.14.119 ja 4.9.176. Kaitsemeetod <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/x86\/mds.html#mds\">p\u00f5hineb<\/a><\/noindex> mikroarhitektuursete puhvertoonide sisu kustutamise protsessis, kui naaseb tuuma kasutajaruumi v\u00f5i edastab juhtimise k\u00fclgs\u00fcsteemile, kasutatakse k\u00e4sku VERW. K\u00e4ideldatavate kaitsete t\u00f6\u00f6ks on vajalik MD_CLEAR re\u017eiimi tugi, mis on rakendatud uusimas mikrokoodi v\u00e4rskenduses. T\u00e4iendava kaitse tagamiseks soovitatakse v\u00e4lja l\u00fclitada Hyper-Threading. Haavatavuse kontrollimiseks Linuxi tuumas. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/admin-guide\/hw-vuln\/mds.html\">lisatud<\/a><\/noindex> t\u00f6\u00f6tlija &#171;\/sys\/devices\/system\/cpu\/vulnerabilities\/mds&#187;. Mitmete haavatavuste blokeerimise re\u017eiimide lubamise juhtimiseks on k\u00e4rgesse lisatud parameeter &#171;mds=&#187;, mis v\u00f5ib omada v\u00e4\u00e4rtusi &#171;full&#187;, &#171;full,nosmt&#187; (Hyper-Threads'i v\u00e4lja l\u00fclitamine), &#171;vmwerv&#187; ja &#171;off&#187;.<\/p>\n<p> Pakettide v\u00e4rskendused on juba v\u00e4lja antud <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=CVE-2018-12127\">RHEL<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/people.canonical.com\/~ubuntu-security\/cve\/2018\/CVE-2018-12127.html\">Ubuntu<\/a><\/noindex>, kuid on endiselt k\u00e4ttesaamatud <noindex><a rel=\"nofollow\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2018-12130\">Debian<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/bodhi.fedoraproject.org\/updates\/?releases=F30&#038;type=security\">Fedora<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.suse.com\/security\/cve\/CVE-2018-12127\/\">SUSE<\/a><\/noindex>.<br \/>\nAndmete lekkimise blokeerimise parandused virtuaalmasinatest on samuti <noindex><a rel=\"nofollow\" href=\"https:\/\/xenbits.xen.org\/xsa\/advisory-297.html\">on loodud<\/a><\/noindex> Xeni h\u00fcperviisori jaoks. Virtuaalsete s\u00fcsteemide kaitseks, mis teevad L1D_FLUSH k\u00e4su enne juhtimise edastamist teisele virtuaalmasinale, ja Intel SGX kapslite kaitseks piisab mikrokoodi v\u00e4rskendamisest.  <\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50684\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 &#8212; MDS (Microarchitectural Data Sampling). \u041a\u0430\u043a \u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u0447\u0443\u0436\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u043f\u0435\u0440\u0432\u0430 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0430\u043c\u0438 Intel \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430, \u043f\u043e\u043b\u0435 \u0447\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25348,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33659","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 - MDS (Microarchitectural Data Sampling). \u041a\u0430\u043a \u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u0447\u0443\u0436\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u043f\u0435\u0440\u0432\u0430 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0430\u043c\u0438 Intel \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430, \u043f\u043e\u043b\u0435 \u0447\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlen-novyj-klass-uyazvimostej-v-protsessorah-intel\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 - MDS (Microarchitectural Data Sampling). \u041a\u0430\u043a \u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u0447\u0443\u0436\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u043f\u0435\u0440\u0432\u0430 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0430\u043c\u0438 Intel \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430, \u043f\u043e\u043b\u0435 \u0447\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlen-novyj-klass-uyazvimostej-v-protsessorah-intel\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:53:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:53:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uue klassi haavatavused Intel'i protsessorites | ProHoster","description":"Intel on avaldanud teavet uue klassi haavatavuste kohta oma protsessorites - MDS (Microarchitectural Data Sampling). Nagu eelnevad Spectre klassi r\u00fcnnakud, v\u00f5ivad ka uued probleemid viia operatsioonis\u00fcsteemi, virtuaalmasinate ja teiste protsesside konfidentsiaalsete andmete lekkeni. Teatatakse, et probleemid tuvastasid esmakordselt Intel'i t\u00f6\u00f6tajad ja partnerid sisemise auditi k\u00e4igus, millele j\u00e4rgnes teabe edastamine.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlen-novyj-klass-uyazvimostej-v-protsessorah-intel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 - MDS (Microarchitectural Data Sampling). \u041a\u0430\u043a \u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u0447\u0443\u0436\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u043f\u0435\u0440\u0432\u0430 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0430\u043c\u0438 Intel \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430, \u043f\u043e\u043b\u0435 \u0447\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlen-novyj-klass-uyazvimostej-v-protsessorah-intel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:59+00:00","article:modified_time":"2019-10-31T18:53:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33659","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 16:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:36:34","updated":"2026-01-21 16:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33659"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33659\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25348"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}