{"id":84664,"date":"2020-06-10T01:42:18","date_gmt":"2020-06-09T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami"},"modified":"2020-06-10T01:42:18","modified_gmt":"2020-06-09T23:42:18","slug":"crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","title":{"rendered":"CROSSTalk \u2014 CPU Intel'iga seotud haavatavus, mis p\u00f5hjustab andmeleke tuumade vahel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Amsterdam Free University uurimist\u00f6\u00f6de grupp avastas uue haavatavus<\/a><\/noindex> (CVE-2020-0543) Intel'i protsessorite mikroarhitektuuriliste struktuuride, mis on t\u00e4helepanuv\u00e4\u00e4rne seet\u00f5ttu, et see v\u00f5imaldab taastada teatud k\u00e4skude t\u00e4itmise tulemusi, mis on teisel CPU tuumal. See on esimene spetsiifiliste k\u00e4skude t\u00e4itmise mehhanismi haavatavus, mis v\u00f5imaldab andmete lekkeid eraldi CPU tuumade vahel (varem olid leked piiratud sama tuuma erinevate l\u00f5imudega). Uurijad nimetasid selle probleemi CROSSTalk, kuid Intel'i dokumentides<\/a><\/noindex> on haavatavus tuntud kui SRBDS (Special Register Buffer Data Sampling). <\/p>\n

Haavatavus kuulub \u00fche aasta eest esitatud<\/a><\/noindex> MDS (Microarchitectural Data Sampling) probleemide klassi ja tugineb k\u00fclgkanalite anal\u00fc\u00fcsi meetodite rakendamisele mikroarhitektuuriliste struktuuride andmetele. T\u00f6\u00f6p\u00f5him\u00f5te<\/a><\/noindex> CROSSTalk on sarnane haavatavusele RIDL<\/a><\/noindex>, kuid erineb lekkeallikast.
\nUus haavatavus manipuleerib varem dokumenteerimata vahem\u00e4lu lekkega, mida kasutavad k\u00f5ik CPU tuumad \u00fchiselt. <\/p>\n

\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

Probleemi tuum<\/a><\/noindex> See t\u00e4hendab, et m\u00f5ned mikroprotsessori juhised, sealhulgas RDRAND, RDSEED ja SGX EGETKEY, on rakendatud sisemiste mikroarhitektuuriliste operatsioonide SRR (Special Register Reads) kasutamise kaudu. Haavatavates protsessorites tagastatakse SRR-le saadud andmed vahem\u00e4llu, mis on \u00fchine k\u00f5igile CPU tuumadele, seej\u00e4rel edastatakse need t\u00e4idise vahem\u00e4llu, mis on seotud konkreetse f\u00fc\u00fcsilise CPU tuumaga, millel lugemine algatati. Edasi kopeeritakse t\u00e4idise vahem\u00e4lust v\u00e4\u00e4rtus registritesse, mis on rakendustele n\u00e4htavad. <\/p>\n

Vahebufferi suurus vastab vahem\u00e4lu reale, mis on tavaliselt suurem kui loetavad andmed, ning erinevad lugemisoperatsioonid m\u00f5jutavad vahem\u00e4lus erinevaid nihkeid. Kuna \u00fchine vahem\u00e4lu kopeeritakse t\u00e4idise vahem\u00e4llu tervikuna, siis liigub mitte ainult see osa, mis on vajalik jooksva operatsiooni jaoks, vaid ka andmed, mis on j\u00e4\u00e4nud eelmiste operatsioonide t\u00e4itmisest, sealhulgas teistel CPU tuumadel.
\n

\"CROSSTalk<\/a><\/noindex><\/center>
\n
\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

Kui r\u00fcnnak on edukalt korraldatud, v\u00f5ib autentitud kohaliku kasutaja s\u00fcsteemis m\u00e4\u00e4rata RDRAND, RDSEED ja EGETKEY k\u00e4skude t\u00e4itmise tulemusi teises protsessis v\u00f5i Intel SGX anklaavis, s\u00f5ltumata CPU tuumast, millel kood t\u00e4idetakse.
\nProbleemi avastanud teadlased avalikustasid<\/a><\/noindex> demonstratsiooni protot\u00fc\u00fcp, mis n\u00e4itab juhuslike v\u00e4\u00e4rtuste lekke v\u00f5imalust RDRAND ja RDSEED k\u00e4skude kaudu, et taastada ECDSA salajane v\u00f5ti, mida t\u00f6\u00f6deldakse Intel SGX anklaavis, p\u00e4rast \u00fchte digitaalallkiri operatsiooni s\u00fcsteemis.<\/p>\n


\n
\r\n \"Vaata\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Probleem on vastuv\u00f5tlik<\/a><\/noindex> lai valik Intel'i lauaarvuteid, mobiilsete ja serveriprotsessorite, sealhulgas Core i3, i5, i7, i9, m3, Celeron (J, G ja N seeriad), Atom (C, E ja X seeriad), Xeon (E3, E5, E7, W ja D perekonnad), Xeon Scalable jne. Oluline on m\u00e4rkida, et Intel sai haavatavusest teada septembris 2018 ning juulis 2019 esitati eksploiti protot\u00fc\u00fcp, mis demonstreerib andmete leket CPU tuumade vahel, kuid paranduse arendamine viibis selle teostamise keerukuse t\u00f5ttu. T\u00e4na pakutud mikrokoodi uuenduses suletakse probleem, muutes RDRAND, RDSEED ja EGETKEY k\u00e4skude k\u00e4itumist, et v\u00e4ltida andmete j\u00e4\u00e4kide kuhjumist varasemas vahem\u00e4lus. Lisaks on ette n\u00e4htud vahem\u00e4lu ligip\u00e4\u00e4su peatamine kuni lugemis- ja kirjutamisoperatsioonide l\u00f5puleviimiseni. <\/p>\n

Sarnaste kaitsemeetmete k\u00f5rvaltoime on RDRAND, RDSEED ja EGETKEY t\u00e4itmise korral viivituste suurenemine ning l\u00e4bilaskev\u00f5ime v\u00e4henemine, kui proovida neid k\u00e4skusid samal ajal erinevates loogilistes protsessorites. RDRAND, RDSEED ja EGETKEY t\u00e4itmine peatab ka ligip\u00e4\u00e4su m\u00e4lule teistest loogilistest protsessoritest. Need omadused v\u00f5ivad negatiivselt m\u00f5jutada m\u00f5nede serveri rakenduste j\u00f5udlust, mist\u00f5ttu on p\u00fcsivuses ette n\u00e4htud mehhanism (RNGDS_MITG_DIS) RDRAND ja RDSEED k\u00e4skude kaitse v\u00e4ljal\u00fclitamiseks v\u00e4ljaspool Intel SGX anklaavi.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u044f\u0434\u0440\u0435 CPU. \u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u044f\u0434\u0440\u0430\u043c\u0438 CPU (\u0440\u0430\u043d\u0435\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438\u043c\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47CROSSTalk \u2014 Intel CPU haavatavus, mis p\u00f5hjustab andmete leket tuumade vahel | ProHoster","description":"Amsterdam Free University uurimist\u00f6\u00f6de grupp avastas uue haavatavuse (CVE-2020-0543) Intel'i protsessorite mikroarhitektuuriliste struktuuride, mis on t\u00e4helepanuv\u00e4\u00e4rne seet\u00f5ttu, et see v\u00f5imaldab taastada teatud k\u00e4skude t\u00e4itmise tulemusi, mis on teisel CPU tuumal. See on esimene spetsiifiliste k\u00e4skude t\u00e4itmise mehhanismi haavatavus, mis v\u00f5imaldab andmete lekkeid eraldi CPU tuumade vahel (varem olid leked piiratud sama tuuma erinevate l\u00f5imudega). Uurijad nimetasid selle probleemi CROSSTalk.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47CROSSTalk \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU Intel, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u044f\u0434\u0440\u0430\u043c\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u044f\u0434\u0440\u0435 CPU. \u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u044f\u0434\u0440\u0430\u043c\u0438 CPU (\u0440\u0430\u043d\u0435\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438\u043c\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:18+00:00","article:modified_time":"2020-06-09T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84664","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:00:17","updated":"2022-09-29 11:12:05"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/84664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=84664"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/84664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/84665"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=84664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=84664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=84664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}