{"id":73756,"date":"2020-03-11T20:42:30","date_gmt":"2020-03-11T17:42:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lvi-novyj-klass-atak-na-mehanizm-spekulyativnogo-vypolneniya-v-cpu"},"modified":"2020-03-11T20:42:30","modified_gmt":"2020-03-11T17:42:30","slug":"lvi-novyj-klass-atak-na-mehanizm-spekulyativnogo-vypolneniya-v-cpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lvi-novyj-klass-atak-na-mehanizm-spekulyativnogo-vypolneniya-v-cpu","title":{"rendered":"LVI &#8212; uus r\u00fcnnakute klass spekulatiivse t\u00e4itmise mehhanismile CPU-s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00334.html\">Avalikustatud<\/a><\/noindex> infod uue r\u00fcnnakute klassi kohta <noindex><a rel=\"nofollow\" href=\"https:\/\/lviattack.eu\/\">LVI<\/a><\/noindex> (Load Value Injection, <noindex><a rel=\"nofollow\" href=\"https:\/\/software.intel.com\/security-software-guidance\/software-guidance\/load-value-injection\">CVE-2020-0551<\/a><\/noindex>) spekulatiivse t\u00e4itmise mehhanismile Intel CPU-s, mida saab kasutada v\u00f5tmete ja salajaste andmete lekke korraldamiseks Intel SGX-enklavides ja teistes protsessides.<\/p>\n<p>Uus r\u00fcnnakute klass p\u00f5hineb manipulatsioonidel samade mikroarhitektuursete struktuuridega, nagu ka r\u00fcnnakutes <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50684\">MDS<\/a><\/noindex> (Mikroarhitektuurilised andmete prooviv\u00f5tud), <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49608\">Spectre ja Meltdown<\/a><\/noindex>. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 Meltdown, Spectre, MDS \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 LVI \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 CPU. \u041f\u0440\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043f\u0443\u0442\u0451\u043c, \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 LFENCE \u043f\u043e\u0441\u043b\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0437\u0430\u043c\u0435\u043d\u0443 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 RET \u043d\u0430 POP, LFENCE \u0438 JMP, \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0435 \u0440\u0430\u0441\u0445\u043e\u0434\u044b &#8212; \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u043b\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 2-19 \u0440\u0430\u0437. <\/p>\n<p>Osaliselt, probleemide blokeerimise raskust kompenseerib see, et praegu on r\u00fcnnak rohkem teoreetiline kui praktiline (r\u00fcnnak on teoreetiliselt v\u00f5imalik, kuid v\u00e4ga keeruline ellu viia ja reprodutseeritav ainult s\u00fcnteetilistes testides).<br \/>\nIntel <noindex><a rel=\"nofollow\" href=\"https:\/\/blogs.intel.com\/technology\/2020\/03\/ipas-security-advisories-for-march-2020\/\">omistas<\/a><\/noindex> probleemile m\u00f5\u00f5duka ohu taseme (5,6 skaalal 10) ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00334.html\">v\u00e4lja andnud<\/a><\/noindex> firmaregi v\u00e4rskendamise ja SDK SGX keskkonnas, kus p\u00fc\u00fcti r\u00fcnnakut ringi minna blokeerida. Pakutud r\u00fcnnakumeetodid kehtivad praegu ainult Intel'i protsessoritele, kuid LVI kohandamise v\u00f5imalus muudele protsessoritele, mille suhtes kehtivad Meltdown r\u00fcnnakud, ei ole v\u00e4listatud.<\/p>\n<p>Probleemi tuvastas aprillis eelmise aasta uurija Jo Van Bulck Leuven'i \u00fclikoolist, seej\u00e4rel t\u00f6\u00f6tasid koos 9 uurijaga teistest \u00fclikoolidest v\u00e4lja viis p\u00f5him\u00f5ttelist r\u00fcnnakumeetodit, millest iga\u00fchel on v\u00f5imalus eksisteerida spetsiifilisemate <noindex><a rel=\"nofollow\" href=\"https:\/\/transient.fail\/\">variantide<\/a><\/noindex>. Iseseisvalt tuvastasid veebruaris selle aasta uurijad ettev\u00f5ttest Bitdefender ka <noindex><a rel=\"nofollow\" href=\"https:\/\/businessinsights.bitdefender.com\/bitdefender-researchers-discover-new-side-channel-attack\">leidnud<\/a><\/noindex> \u00fcks r\u00fcnnakuv\u00f5imalus LVI ja teavitati sellest Intelit. R\u00fcnnakuv\u00f5imalused erinevad erinevate mikroarhitektuuriliste struktuuride kasutamise j\u00e4rgi, nagu salvestusbuffer (SB, Store Buffer), t\u00fc\u00fcbi t\u00e4itmise buffer (LFB, Line Fill Buffer), konteksti vahetuse buffer FPU ja esimese taseme vahem\u00e4lu (L1D), mida on varem kasutatud sellistes r\u00fcnnakutes nagu  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">ZombieLoad<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52260\">RIDL<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50684\">Fallout<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48775\">LazyFP<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49134\">Foreshadow<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47856\">Meltdown<\/a><\/noindex>.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/lviattack.eu\/lvi.pdf\"><img decoding=\"async\" alt=\"LVI - uus r\u00fcnnakute klass spekulatiivse t\u00e4itmise mehhanismile CPU-s\" src=\"\/wp-content\/uploads\/2020\/03\/c367a275f86969b470990eb458ec6875.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p> Peamine <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/articles\/load-value-injection-flaw\">erinevus<\/a><\/noindex> LVI ja MDS r\u00fcnnakute vahel on see, et MDS manipuleerib mikroarhitektuuriliste struktuuride sisu m\u00e4\u00e4ratlemisega, mis j\u00e4\u00e4vad vahem\u00e4lusse p\u00e4rast spekulatiivset t\u00f6\u00f6tlemist vigade (fault) v\u00f5i laadimise ja salvestamise operatsioonide ajal, samas kui<br \/>\nLVI r\u00fcnnakud v\u00f5imaldavad sissetungijatel asendada andmeid mikroarhitektuurilistes struktuurides, et m\u00f5jutada j\u00e4rgmiste r\u00fcnnakute spekulatiivset koodi t\u00e4itmist ohvri poolt. Nende manipuleerimiste abil saab sissetungija v\u00e4lja v\u00f5tta kinnipeetud andmed teiste protsesside andmestruktuuridest, kui teatud kood joonealusel CPU tuumal.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/lviattack.eu\/lvi.pdf\"><img decoding=\"async\" alt=\"LVI - uus r\u00fcnnakute klass spekulatiivse t\u00e4itmise mehhanismile CPU-s\" src=\"\/wp-content\/uploads\/2020\/03\/164558b64621d92b32eb40245f7014e6.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Kuna <noindex><a rel=\"nofollow\" href=\"https:\/\/lviattack.eu\/lvi.pdf\">probleemi \u00e4ra kasutamisel<\/a><\/noindex> ohvri protsessi koodis <noindex><a rel=\"nofollow\" href=\"https:\/\/software.intel.com\/security-software-guidance\/insights\/deep-dive-load-value-injection\">peavad olema<\/a><\/noindex> spetsiaalsed koodij\u00e4rjestused (vidinad), kuhu laaditakse r\u00fcndaja kontrollitud v\u00e4\u00e4rtus, ja selle v\u00e4\u00e4rtuse laadimine toob kaasa erandeid (fault, abort v\u00f5i assist), mis viskavad tulemuse v\u00e4lja ja kordavad k\u00e4sku. Erandi t\u00f6\u00f6tlemise ajal tekib spekulatiivne aken, mille jooksul lekib vidinas t\u00f6\u00f6deldud andmed. Eelk\u00f5ige hakkab protsessor spekulatiivsetes tingimustes k\u00e4itama koodil\u00f5iku (vidinat), seej\u00e4rel m\u00e4\u00e4rab, et eeldus ei \u00f5igustanud end ja tagastab toimingud algsesse olekusse, kuid spekulatiivse t\u00e4itmise k\u00e4igus t\u00f6\u00f6deldud andmed j\u00e4\u00e4vad L1D vahem\u00e4lu ja mikroarhitektuuri puhverdamisse ning on kergesti k\u00e4tte saadavad tuntud j\u00e4\u00e4kandmete m\u00e4\u00e4ramise meetodite kaudu k\u00f5rvalkanalite kaudu.<\/p>\n<p>\u0418\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 &#171;assist&#187;, \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 &#171;fault&#187;, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u0431\u0435\u0437 \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. Assist \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442\u044c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u0433\u0434\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0438\u0442 A (Accessed) \u0438\u043b\u0438 D (Dirty) \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438. \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 assist, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430\u0434\u0451\u0436\u043d\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e, \u043d\u043e \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0445 \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043a\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u0432 \u0441\u0438\u043d\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u0434 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432)<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/lviattack.eu\/lvi.pdf\"><img decoding=\"async\" alt=\"LVI - uus r\u00fcnnakute klass spekulatiivse t\u00e4itmise mehhanismile CPU-s\" src=\"\/wp-content\/uploads\/2020\/03\/25916ac2d7df502276a5feaa50deda57.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/lviattack.eu\/lvi.pdf\"><img decoding=\"async\" alt=\"LVI - uus r\u00fcnnakute klass spekulatiivse t\u00e4itmise mehhanismile CPU-s\" src=\"\/wp-content\/uploads\/2020\/03\/57202000ccc222ee6cd4404406f4b2c0.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>V\u00f5imalikud r\u00fcnnaku vektori:<\/p>\n<ul>\n<li class=\"l\"> Andmeleke tuum struktuuridest kasutaja taseme protsessidesse. Linuxi tuumas olemasolev kaitse Spectre 1 r\u00fcnnakute vastu ning SMAP (Supervisor Mode Access Prevention) kaitsemehhanism v\u00e4hendavad oluliselt LVI r\u00fcnnaku t\u00f5en\u00e4osust. Tulevikus v\u00f5ib osutuda vajalikuks tuuma t\u00e4iendav kaitse, kui tulevikus avastatakse lihtsamaid LVI r\u00fcnnaku viise.\n<li class=\"l\"> Andmete leke erinevate protsesside vahel. R\u00fcnnaku teostamiseks on vajalik teatud koodifragmente rakenduses ja erandi genereerimise meetodi m\u00e4\u00e4ratlemine sihtprotsessis.\n<li class=\"l\"> Andmete leke host-keskkonnast k\u00fclalis\u00fcsteemi. R\u00fcnnak on klassifitseeritud liiga keeruliseks, vajades mitmesuguste keeruliste sammude ja s\u00fcsteemi aktiivsuse ennustamise rakendamist.\n<li class=\"l\"> Andmete leke protsesside vahel erinevates k\u00fclalis\u00fcsteemides. R\u00fcnnaku vektor on sarnane andmete lekke korraldamisele erinevate protsesside vahel, kuid lisaks n\u00f5uab see keerukate manipulatsioonide teostamist k\u00fclalis\u00fcsteemide vahelise isoleerimise \u00fcletamiseks.\n<\/ul>\n<p>Uurijad on avaldanud <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bitdefender\/lvi-lfb-attack-poc\">mitu<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jovanbulck\/sgx-step\/tree\/master\/app\/lvi\">protot\u00fc\u00fcpe<\/a><\/noindex> r\u00fcnnaku l\u00e4biviimise p\u00f5him\u00f5tete demonstreerimiseks, kuid need ei ole veel reaalseid r\u00fcnnakuid teostamiseks sobivad. Esimene n\u00e4ide v\u00f5imaldab suunata spekulatiivset koodi t\u00e4itmist ohvri protsessis sarnaselt tagasivaatleva programmeerimisega (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48730#rop\">ROP<\/a><\/noindex>, Return-Oriented Programming). Selles n\u00e4ites on ohvriks spetsiaalselt ette valmistatud protsess, mis sisaldab vajalikke seadmeid (r\u00fcnnaku rakendamine reaalsele kolmanda osapoole protsessile on keeruline). Teine n\u00e4ide v\u00f5imaldab sekkuda arvutustesse AES-i kr\u00fcpteerimise ajal Intel SGX-i anklavis ja korraldada andmeleke spekulatiivsete k\u00e4skude t\u00e4itmise ajal, et taastada kasutatava kr\u00fcpteerimisv\u00f5tme v\u00e4\u00e4rtus.<\/p>\n<p><center><br \/>\n<div class=\"youtube-placeholder\" data-id=\"goy8XRXFlh4\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/goy8XRXFlh4\/hqdefault.jpg\" alt=\"Vaata videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52517\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0430\u0442\u0430\u043a LVI (Load Value Injection, CVE-2020-0551) \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 CPU Intel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u0445 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438, \u0447\u0442\u043e \u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 MDS (Microarchitectural Data Sampling), Spectre [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":73757,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-73756","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0430\u0442\u0430\u043a LVI (Load Value Injection, CVE-2020-0551) \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 CPU Intel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u0445 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438, \u0447\u0442\u043e \u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 MDS (Microarchitectural Data Sampling), Spectre\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lvi-novyj-klass-atak-na-mehanizm-spekulyativnogo-vypolneniya-v-cpu\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47LVI \u2014 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 CPU | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0430\u0442\u0430\u043a LVI (Load Value Injection, CVE-2020-0551) \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 CPU Intel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u0445 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438, \u0447\u0442\u043e \u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 MDS (Microarchitectural Data Sampling), Spectre\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lvi-novyj-klass-atak-na-mehanizm-spekulyativnogo-vypolneniya-v-cpu\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-11T17:42:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-11T17:42:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47LVI \u2014 uus r\u00fcnnakute klass spekulatiivse t\u00e4itmise mehhanismile CPU-s | ProHoster","description":"Avalikustatud teave uue r\u00fcnnakute klassi LVI (Load Value Injection, CVE-2020-0551) kohta spekulatiivse t\u00e4itmise mehhanismile Intel CPU-des, mida saab kasutada v\u00f5tmete ja salajaste andmete lekete korraldamiseks Intel SGX anklavist ja muudest protsessidest. Uus r\u00fcnnakute klass p\u00f5hineb manipuleerimisel samade mikroarhitektuuriliste struktuuridega nagu MDS (Microarchitectural Data Sampling) ja Spectre r\u00fcnnakutes.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lvi-novyj-klass-atak-na-mehanizm-spekulyativnogo-vypolneniya-v-cpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47LVI \u2014 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 CPU | ProHoster","og:description":"\u041e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u0435 \u0430\u0442\u0430\u043a LVI (Load Value Injection, CVE-2020-0551) \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 CPU Intel, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u0445 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438, \u0447\u0442\u043e \u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 MDS (Microarchitectural Data Sampling), Spectre","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/lvi-novyj-klass-atak-na-mehanizm-spekulyativnogo-vypolneniya-v-cpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-11T17:42:30+00:00","article:modified_time":"2020-03-11T17:42:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"73756","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:27:32","updated":"2022-10-05 20:14:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/73756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=73756"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/73756\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/73757"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=73756"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=73756"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=73756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}