{"id":84985,"date":"2020-06-12T13:42:15","date_gmt":"2020-06-12T11:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya"},"modified":"2020-06-12T13:42:15","modified_gmt":"2020-06-12T11:42:15","slug":"arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","title":{"rendered":"ARM-l ilmus t\u00f5sine haavatavus, mis v\u00f5imaldab r\u00fcnnakut spekulatiivsete arvutuste vastu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Armv8-A (Cortex-A) arhitektuuriga protsessoritele on leitud ainulaadne haavatavus, mis v\u00f5imaldab r\u00fcnnakut k\u00f5rvaliste kanalite kaudu spekuleerivate arvutusalgoritmide kasutamisega. leiti<\/a><\/noindex> oma ainulaadne haavatavus, mis v\u00f5imaldab r\u00fcnnakut k\u00f5rvaliste kanalite kaudu spekuleerivate arvutusalgoritmide abil. Selle teatas ARM ise ning andis v\u00e4lja plaastrid ja juhised avastatud haavatavuse leevendamiseks. Oht ei ole suur, kuid sellest mitte hoolimine ei ole m\u00f5istlik, kuna ARM arhitektuuri protsessoreid on igal pool, mis teeb lekete riski tagaj\u00e4rjed uskumatuks.<\/p>\n

\"ARM-l<\/p>\n

Google'i spetsialistide poolt avastatud haavatavus ARM arhitektuurides sai koodnimeks Straight-Line Speculation (SLS) ja ametlikuks t\u00e4hiseks CVE-2020-13844. ARM'i s\u00f5nul on SLS haavatavus \u00fcks Spectre'i haavatavuse vorme, millest (koos Meltdowne'i haavatavusega) sai laialdaselt teada jaanuaris 2018. Teisis\u00f5nu, see on klassikaline haavatavus spekuleerivate arvutuste mehhanismides, mis lubab r\u00fcnnakut k\u00f5rvaliste kanalite kaudu.<\/p>\n

Spekuleerivad arvutused n\u00f5uavad andmete t\u00f6\u00f6tlemist ette mitmete v\u00f5imalike harude kaudu, kuigi need v\u00f5ivad hiljem osutuda tarbetuks ja k\u00f5rvaldatakse. K\u00fclaliste kanalite r\u00fcnnakud v\u00f5imaldavad varastada selliseid vaheandmeid enne nende t\u00e4ielikku h\u00e4vitamist. Tulemuseks on j\u00f5ulised protsessorid ning andmelekkete risk.<\/p>\n

Straight-Line Speculation'i r\u00fcnnak ARM arhitektuuriga protsessoritele sunnib protsessorit igal korral p\u00e4rast k\u00e4skude voos muudatuste tegemist minema t\u00e4itma otseselt m\u00e4lust leitud k\u00e4sklusi, selle asemel, et j\u00e4rgida uusi k\u00e4skude voo juhiseid. Ilmselt ei ole see parim valik k\u00e4skude t\u00e4itmise jaoks, mida r\u00fcndaja v\u00f5ib \u00e4ra kasutada.<\/p>\n

<\/center><\/p>\n

ARM'i kiituseks on see, et nad ei ainult v\u00e4lja andnud arendajate juhiseid, mis aitavad v\u00e4ltida r\u00fcnnaku t\u00f5ttu Straight-Line Speculation leket, vaid ka andnud v\u00e4lja plaastrid peamistele operatsioonis\u00fcsteemidele nagu FreeBSD, OpenBSD, Trusted Firmware-A ja OP-TEE ning v\u00e4lja andnud plaastrid GCC ja LLVM kompilaatoritele.<\/p>\n

Samuti teatas ettev\u00f5te, et plaastrite rakendamine ei m\u00f5juta ARM platvormide j\u00f5udlust, nagu see juhtus Intel'i x86-\u00fchilduvate platvormide puhul, kus Spectre'i ja Meltdowne'i haavatavused said blokeeritud. Siiski saame selle kohta objektiivset teavet kolmandate osapoolte allikatelt.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Allikas: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A) \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0441\u0430\u043c\u0430 ARM \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0432\u0435\u043b\u0438\u043a\u0430, \u043d\u043e \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0435\u044e \u043d\u0435\u043b\u044c\u0437\u044f, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 ARM \u0435\u0441\u0442\u044c \u0432\u0435\u0437\u0434\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u0435\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84986,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ARM'il on leke: avastatud erakordne haavatavus spekuleerivate arvutuste r\u00fcnnakuks | ProHoster","description":"Armv8-A (Cortex-A) arhitektuuriga protsessoritele on leitud ainulaadne haavatavus, mis v\u00f5imaldab r\u00fcnnakut k\u00f5rvaliste kanalite kaudu spekuleerivate arvutusalgoritmide kasutamisega. Selle teatas ARM ise ning andis v\u00e4lja plaastrid ja juhised avastatud haavatavuse leevendamiseks. Oht ei ole suur, kuid sellest mitte hoolimine ei ole m\u00f5istlik, kuna ARM arhitektuuri protsessoreid on igal pool, mis teeb lekete riskiga.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ARM \u043f\u0440\u043e\u0445\u0443\u0434\u0438\u043b\u0430\u0441\u044c: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A) \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0441\u0430\u043c\u0430 ARM \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0432\u0435\u043b\u0438\u043a\u0430, \u043d\u043e \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0435\u044e \u043d\u0435\u043b\u044c\u0437\u044f, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 ARM \u0435\u0441\u0442\u044c \u0432\u0435\u0437\u0434\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u0435\u043a","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-12T11:42:15+00:00","article:modified_time":"2020-06-12T11:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84985","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:46:42","updated":"2022-10-01 13:37:31"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/84985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=84985"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/84985\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/84986"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=84985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=84985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=84985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}