{"id":182817,"date":"2026-08-10T19:49:35","date_gmt":"2026-08-10T17:49:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2"},"modified":"2026-08-10T19:49:35","modified_gmt":"2026-08-10T17:49:35","slug":"tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","title":{"rendered":"TONTOU \u2014 napad na CPU Intel i AMD koji dopu\u0161ta zaobila\u017eenje za\u0161tite od ranjivosti Spectre v2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Istra\u017eiva\u010di s Massachusetts Institute of Technology otkrili su napad TONTOU (Vrijeme neutralizacije do vremena kori\u0161tenja), nude\u0107i novi na\u010din iskori\u0161tavanja mikroarkitektonskih ranjivosti klase Spectre v2. Ova ranjivost omogu\u0107ava odre\u0111ivanje sadr\u017eaja memorije jezgre prilikom izvo\u0111enja eksploita u korisni\u010dkom prostoru. Kod za blokiranje iskori\u0161tavanja ranjivosti uklju\u010den je u Linux jezgru 5. kolovoza i obuhva\u0107en je izdanjima 7.1.7, 6.18.43, 6.12.102, 6.6.149, 6.1.181, 5.15.214 i 5.10.263. <\/p>\n

Istra\u017eiva\u010di su demonstrirali mogu\u0107nost napada lokalnog nepovla\u0161tenog korisnika za odre\u0111ivanje korisni\u010dkog hash lozinke root-a, pohranjene u datoteci \/etc\/shadow i u\u010ditane u memoriju prilikom autentifikacije u sustavu. Istra\u017eiva\u010dima je uspjelo do\u0107i do curenja podataka iz memorije jezgre s brzinom od 5.47 bajta u sekundi i to\u010dno\u0161\u0107u od 91.97%. Od 10 testnih izvo\u0111enja eksploita, koja su u prosjeku trajala 18 minuta, u polovici slu\u010dajeva uspje\u0161no su identificirali prisutnost datoteke \/etc\/shadow u memoriji i izvukli njezin sadr\u017eaj. <\/p>\n

Eksploit je demonstriran na sustavima s AMD procesorima i mo\u017ee se primijeniti na CPU AMD obitelji Zen 1-4. Na Intel sustavima napad je tako\u0111er izvediv, ali je iskori\u0161tavanje slo\u017eenije. Za za\u0161titu od preljeva staka adresa povratka i blokiranja ranjivosti SRSO (Spekulativno prelivanje staka povratka) u AMD procesorima primjenjuje se mehanizam za\u0161tite Safe-RET, koji o\u010distava predmemoriju predvi\u0111anja skokova nakon svake upotrebe i su\u017eava prozor za napad na 2 instrukcije, koje se izvr\u0161avaju u nekoliko desetaka nanosekundi. <\/p>\n

Kako bi se zaobi\u0161la ova za\u0161tita i pro\u0161irilo vreme za napad, implementirana je tehnika usporavanja CPU-a, \u0161to omogu\u0107ava da se izvr\u0161i umetanje prekida u pravom trenutku kako bi se preusmerio tok izvr\u0161avanja u jezgru i koristio obrada prekida za iskrivljavanje zapisa u baferu za predikciju grananja. Da bi iskoristio SRSO ranjivost, napada\u010d mo\u017ee stvoriti uslove pod kojima \u0107e blok za predikciju grananja spekulativno izvr\u0161iti veliki broj neta\u010dno predvi\u0111enih poziva CALL, dovoljno da preplavi stek adresa povratka i prepi\u0161e ispravno predvi\u0111ene ta\u010dke povratka koje su sme\u0161tene na po\u010detku steka. Kao rezultat toga, po\u010detni elementi steka mogu biti prepisani na odabrane vrednosti od strane napada\u010da, \u0161to \u0107e na kraju dovesti do kori\u0161\u0107enja ovih zamenjenih vrednosti prilikom spekulativnog izvr\u0161avanja instrukcije RET u kontekstu drugog procesa. <\/p>\n

Procesor \u0107e utvrditi da predikcija grananja nije uspela i vrati\u0107e operaciju u prvobitno stanje, ali obra\u0111eni podaci tokom spekulativnog izvr\u0161avanja \u0107e ostati u ke\u0161u i mikroarhitektonskim baferima. Ako neta\u010dno izvr\u0161eni blok pristupi memoriji, njegovo spekulativno izvr\u0161avanje \u0107e rezultirati ostajanjem u zajedni\u010dkom ke\u0161u, kao i podacima, pro\u010ditanim iz memorije. Za ekstrakciju informacija iz ke\u0161a mo\u017ee se koristiti jedan od metoda odre\u0111ivanja sadr\u017eaja ke\u0161a na osnovu analize promene vremena pristupa ke\u0161iranim i neke\u0161iranim podacima.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 TONTOU (Time-of-Neutralization to Time-of-Use), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre v2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041a\u043e\u0434 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u044f\u0442 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux 5 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 7.1.7, 6.18.43, 6.12.102, 6.6.149, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182817","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47TONTOU \u2014 napad na CPU Intel i AMD, koji omogu\u0107ava zaobila\u017eenje za\u0161tite od ranjivosti Spectre v2 | ProHoster","description":"Istra\u017eiva\u010di sa Be\u010dkog tehnolo\u0161kog univerziteta otkrili su tehniku napada TONTOU (Time-of-Neutralization to Time-of-Use), koja nudi novi na\u010din iskori\u0161\u0107avanja mikroarhitektonskih ranjivosti klase Spectre.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47TONTOU \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 CPU Intel \u0438 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre v2 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 TONTOU (Time-of-Neutralization to Time-of-Use), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-10T17:49:35+00:00","article:modified_time":"2026-08-10T17:49:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182817","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-11 06:43:49","updated":"2026-08-11 06:43:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/182817","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=182817"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/182817\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=182817"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=182817"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=182817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}