{"id":84985,"date":"2020-06-12T13:42:15","date_gmt":"2020-06-12T11:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya"},"modified":"2020-06-12T13:42:15","modified_gmt":"2020-06-12T11:42:15","slug":"arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","title":{"rendered":"ARM vuln\u00e9rable : une vuln\u00e9rabilit\u00e9 exceptionnelle a \u00e9t\u00e9 d\u00e9couverte permettant une attaque sur les calculs sp\u00e9culatifs","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pour les processeurs sur un large \u00e9ventail d'architectures Armv8-A (Cortex-A) une vuln\u00e9rabilit\u00e9 unique a \u00e9t\u00e9 trouv\u00e9e<\/a><\/noindex> pour une attaque par canaux lat\u00e9raux utilisant des algorithmes de calcul sp\u00e9culatif. ARM elle-m\u00eame a annonc\u00e9 cela et a fourni des correctifs et des instructions pour att\u00e9nuer la vuln\u00e9rabilit\u00e9 trouv\u00e9e. Le danger n'est pas si \u00e9lev\u00e9, mais il ne doit pas \u00eatre n\u00e9glig\u00e9, car les processeurs bas\u00e9s sur l'architecture ARM sont omnipr\u00e9sents, rendant le risque de fuites inimaginable en termes de cons\u00e9quences.<\/p>\n

\"ARM<\/p>\n

La vuln\u00e9rabilit\u00e9 d\u00e9couverte par les sp\u00e9cialistes de Google sur les architectures ARM a \u00e9t\u00e9 nomm\u00e9e Straight-Line Speculation (SLS) et d\u00e9sign\u00e9e officiellement par le code CVE-2020-13844. Selon ARM, la vuln\u00e9rabilit\u00e9 SLS est une des formes de la vuln\u00e9rabilit\u00e9 Spectre, devenue largement connue en janvier 2018 (en m\u00eame temps que la vuln\u00e9rabilit\u00e9 Meltdown). En d'autres termes, il s'agit d'une vuln\u00e9rabilit\u00e9 classique dans les m\u00e9canismes de calcul sp\u00e9culatif avec des attaques par canaux lat\u00e9raux.<\/p>\n

Les calculs sp\u00e9culatifs n\u00e9cessitent le traitement des donn\u00e9es \u00e0 l'avance sur plusieurs branches possibles, bien qu'elles puissent \u00eatre par la suite rejet\u00e9es comme inutiles. Les attaques par canaux lat\u00e9raux permettent de voler ces donn\u00e9es interm\u00e9diaires avant leur destruction compl\u00e8te. En cons\u00e9quence, nous avons des processeurs performants et un risque de fuite de donn\u00e9es.<\/p>\n

L'attaque Straight-Line Speculation sur les processeurs ARM oblige le processeur \u00e0 chaque fois qu'il y a un changement dans le flux d'instructions \u00e0 ex\u00e9cuter les instructions trouv\u00e9es directement en m\u00e9moire, au lieu de suivre les instructions du nouveau flux d'instructions. Il est \u00e9vident que ce n'est pas le meilleur sc\u00e9nario pour choisir les instructions \u00e0 ex\u00e9cuter, et cela peut \u00eatre exploit\u00e9 par un attaquant.<\/p>\n

<\/center><\/p>\n

\u00c0 l'honneur d'ARM, elle a non seulement publi\u00e9 un guide pour les d\u00e9veloppeurs qui aidera \u00e0 \u00e9viter le risque de fuite d\u00fb \u00e0 l'attaque Straight-Line Speculation, mais elle a \u00e9galement fourni des correctifs pour les syst\u00e8mes d'exploitation majeurs, tels que FreeBSD, OpenBSD, Trusted Firmware-A et OP-TEE, ainsi que publi\u00e9 des correctifs pour les compilateurs GCC et LLVM.<\/p>\n

L'entreprise a \u00e9galement d\u00e9clar\u00e9 que l'application de ces correctifs n'affectera pas les performances des plateformes ARM, comme cela a \u00e9t\u00e9 le cas sur les plateformes Intel compatibles x86 avec le blocage des vuln\u00e9rabilit\u00e9s Spectre et Meltdown. Cependant, nous pourrons en apprendre davantage gr\u00e2ce \u00e0 des sources tierces, ce qui nous donnera une image objective de la nouvelle vuln\u00e9rabilit\u00e9.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Source : 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A) \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0441\u0430\u043c\u0430 ARM \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0432\u0435\u043b\u0438\u043a\u0430, \u043d\u043e \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0435\u044e \u043d\u0435\u043b\u044c\u0437\u044f, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 ARM \u0435\u0441\u0442\u044c \u0432\u0435\u0437\u0434\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u0435\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84986,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ARM a \u00e9t\u00e9 compromise : une vuln\u00e9rabilit\u00e9 exceptionnelle a \u00e9t\u00e9 d\u00e9couverte pour attaquer les calculs sp\u00e9culatifs | ProHoster","description":"Pour les processeurs sur un large \u00e9ventail d'architectures Armv8-A (Cortex-A)","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ARM \u043f\u0440\u043e\u0445\u0443\u0434\u0438\u043b\u0430\u0441\u044c: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A)","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-12T11:42:15+00:00","article:modified_time":"2020-06-12T11:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84985","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:46:42","updated":"2022-10-01 13:37:31","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/84985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=84985"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/84985\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/84986"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=84985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=84985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=84985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}