{"id":84664,"date":"2020-06-10T01:42:18","date_gmt":"2020-06-09T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami"},"modified":"2020-06-10T01:42:18","modified_gmt":"2020-06-09T23:42:18","slug":"crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","title":{"rendered":"CROSSTalk \u2014 egy Intel CPU sebezhet\u0151s\u00e9g, amely adatsziv\u00e1rg\u00e1st okoz a magok k\u00f6z\u00f6tt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A kutat\u00f3csoport az Amszterdami Szabad Egyetemr\u0151l \u00faj vulnerability<\/a><\/noindex> (CVE-2020-0543) felfedez\u00e9st tett az Intel processzorok mikroarchitektur\u00e1lis strukt\u00far\u00e1in, ami figyelemre m\u00e9lt\u00f3, mivel lehet\u0151v\u00e9 teszi bizonyos utas\u00edt\u00e1sok v\u00e9grehajt\u00e1s\u00e1nak eredm\u00e9nyeinek helyre\u00e1ll\u00edt\u00e1s\u00e1t, amelyek egy m\u00e1sik CPU magon futottak. Ez az els\u0151 spekulat\u00edv v\u00e9grehajt\u00e1si mechanizmushoz kapcsol\u00f3d\u00f3 sebezhet\u0151s\u00e9g, amely adatsziv\u00e1rg\u00e1st okoz a k\u00fcl\u00f6nb\u00f6z\u0151 CPU magok k\u00f6z\u00f6tt (kor\u00e1bban az adatsziv\u00e1rg\u00e1sok egyetlen mag k\u00fcl\u00f6nb\u00f6z\u0151 sz\u00e1laira korl\u00e1toz\u00f3dtak). A kutat\u00f3k a probl\u00e9m\u00e1t CROSSTalk n\u00e9ven ismert\u00e9k, de az Intel dokumentumaiban<\/a><\/noindex> a sebezhet\u0151s\u00e9get SRBDS (Special Register Buffer Data Sampling) n\u00e9ven eml\u00edtik. <\/p>\n

A sebezhet\u0151s\u00e9g a m\u00e1sf\u00e9l \u00e9vvel ezel\u0151tt bemutatott<\/a><\/noindex> MDS (Microarchitectural Data Sampling) probl\u00e9m\u00e1k oszt\u00e1ly\u00e1hoz tartozik, \u00e9s a mikroarchitektur\u00e1lis strukt\u00far\u00e1kban tal\u00e1lhat\u00f3 adatok oldals\u00f3 csatorn\u00e1s elemz\u00e9s\u00e9nek m\u00f3dszereire alapoz. M\u0171k\u00f6d\u00e9si elv<\/a><\/noindex> A CROSSTalk hasonl\u00f3 a RIDL<\/a><\/noindex>, de elt\u00e9r a sziv\u00e1rg\u00e1s forr\u00e1s\u00e1t\u00f3l.
\nAz \u00faj sebezhet\u0151s\u00e9g egy kor\u00e1bban nem dokument\u00e1lt k\u00f6ztes puffert manipul\u00e1l, amelyet minden CPU mag k\u00f6z\u00f6sen haszn\u00e1l. <\/p>\n

\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

The essence of the problem<\/a><\/noindex> abban, hogy a mikroprocesszor bizonyos utas\u00edt\u00e1sai, bele\u00e9rtve az RDRAND, RDSEED \u00e9s SGX EGETKEY utas\u00edt\u00e1sokat, a bels\u0151 mikroarchitektur\u00e1lis SRR (Special Register Reads) m\u0171velet seg\u00edts\u00e9g\u00e9vel val\u00f3sulnak meg. A sebezhet\u0151 processzorokon a SRR-nek visszaadott adatok egy k\u00f6z\u00f6s k\u00f6ztes puffertel csap\u00f3dnak le, amely minden CPU maghoz tartozik, majd azokat egy, az olvas\u00e1si m\u0171veletet kezdem\u00e9nyez\u0151 konkr\u00e9t fizikai CPU maghoz kapcsol\u00f3d\u00f3 kit\u00f6lt\u0151 pufferbe tov\u00e1bb\u00edtj\u00e1k. Ezut\u00e1n az \u00e9rt\u00e9k a kit\u00f6lt\u0151 pufferb\u0151l a figyelmes alkalmaz\u00e1sok sz\u00e1m\u00e1ra l\u00e1that\u00f3 regiszterekbe m\u00e1sol\u00f3dik. <\/p>\n

A k\u00f6z\u00f6s k\u00f6ztes pufferm\u00e9ret megegyezik a cache sor\u00e1nak m\u00e9ret\u00e9vel, ami \u00e1ltal\u00e1ban nagyobb, mint a beolvasott adatok m\u00e9rete, \u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 olvas\u00e1si m\u0171veletek k\u00fcl\u00f6nb\u00f6z\u0151 eltol\u00f3d\u00e1sokat \u00e9rintenek a puffern\u00e9l. Mivel a k\u00f6z\u00f6s puffert teljes eg\u00e9sz\u00e9ben \u00e1tm\u00e1solj\u00e1k a kit\u00f6lt\u0151 pufferbe, nemcsak a jelenlegi m\u0171velethez sz\u00fcks\u00e9ges r\u00e9szesed\u00e9s, hanem m\u00e1s m\u0171veletek v\u00e9grehajt\u00e1sa nyom\u00e1n megmaradt adatok is, amelyeket m\u00e1s CPU magokon hajtottak v\u00e9gre, \u00e1tker\u00fclnek.
\n

\"CROSSTalk<\/a><\/noindex><\/center>
\n
\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

Ha a t\u00e1mad\u00e1s sikeresen megval\u00f3sul, a rendszerben hiteles\u00edtett helyi felhaszn\u00e1l\u00f3 meg tudja hat\u00e1rozni az RDRAND, RDSEED \u00e9s EGETKEY utas\u00edt\u00e1sok v\u00e9grehajt\u00e1s\u00e1nak eredm\u00e9ny\u00e9t egy m\u00e1sik folyamatban vagy az Intel SGX z\u00f3nasziget\u00e9n bel\u00fcl, f\u00fcggetlen\u00fcl att\u00f3l, hogy melyik CPU magon fut a k\u00f3d.
\nA probl\u00e9m\u00e1t felfedez\u0151 kutat\u00f3k k\u00f6zz\u00e9tett\u00e9k<\/a><\/noindex> Egy exploit protot\u00edpusa, amely bemutatja a v\u00e9letlenszer\u0171 \u00e9rt\u00e9kek RDRAND \u00e9s RDSEED utas\u00edt\u00e1sokon kereszt\u00fcli kisziv\u00e1rg\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9t az ECDSA z\u00e1rkulcs helyre\u00e1ll\u00edt\u00e1s\u00e1hoz, amely az Intel SGX titkos k\u00f6rnyezet\u00e9ben ker\u00fcl feldolgoz\u00e1sra, miut\u00e1n a rendszerben egyetlen digit\u00e1lis al\u00e1\u00edr\u00e1si m\u0171velet t\u00f6rt\u00e9nt.<\/p>\n


\n
\r\n \"Vide\u00f3\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Probl\u00e9ma \u00e9rintett<\/a><\/noindex> sz\u00e9les k\u00f6r\u0171 asztali, mobil \u00e9s szerverprocesszorok az Intel-t\u0151l, bele\u00e9rtve a Core i3, i5, i7, i9, m3, Celeron (J, G \u00e9s N sorozatok), Atom (C, E \u00e9s X sorozatok), Xeon (E3, E5, E7, W \u00e9s D csal\u00e1dok), Xeon Scalable, stb. \u00c9rdekes megjegyezni, hogy az Intel 2018 szeptembere \u00f3ta tudott a sebezhet\u0151s\u00e9gr\u0151l, \u00e9s 2019 j\u00falius\u00e1ban bemutatt\u00e1k az exploit protot\u00edpus\u00e1t, amely adatkis\u6cc4f\u00e9l\u00e9st mutatott be a CPU magjai k\u00f6z\u00f6tt, de a jav\u00edt\u00e1s kidolgoz\u00e1s\u00e1t a megval\u00f3s\u00edt\u00e1s bonyolults\u00e1ga miatt elh\u00faz\u00f3dott. A ma javasolt mikrok\u00f3d-friss\u00edt\u00e9s a probl\u00e9m\u00e1t az\u00e1ltal blokkolja, hogy m\u00f3dos\u00edtja az RDRAND, RDSEED \u00e9s EGETKEY utas\u00edt\u00e1sok viselked\u00e9s\u00e9t, hogy redund\u00e1ns adatfel\u00fcl\u00edr\u00e1st hajtson v\u00e9gre a k\u00f6z\u00f6s pufferen, megakad\u00e1lyozva ezzel a marad\u00e9k inform\u00e1ci\u00f3 felhalmoz\u00f3d\u00e1s\u00e1t. Ezenk\u00edv\u00fcl k\u00e9slelteti a pufferhez val\u00f3 hozz\u00e1f\u00e9r\u00e9st a tartalom olvas\u00e1si \u00e9s fel\u00fcl\u00edr\u00e1si m\u0171veleteinek befejez\u00e9s\u00e9ig. <\/p>\n

Az ilyen v\u00e9delem mell\u00e9khat\u00e1sa a RDRAND, RDSEED \u00e9s EGETKEY v\u00e9grehajt\u00e1s\u00e1nak k\u00e9sleltet\u00e9se, valamint a k\u00fcl\u00f6nb\u00f6z\u0151 logikai processzorokon p\u00e1rhuzamosan v\u00e9grehajtott utas\u00edt\u00e1sok s\u00e1vsz\u00e9less\u00e9g\u00e9nek cs\u00f6kken\u00e9se. A RDRAND, RDSEED \u00e9s EGETKEY v\u00e9grehajt\u00e1sa szint\u00e9n k\u00e9slelteti a mem\u00f3ria hozz\u00e1f\u00e9r\u00e9st m\u00e1s logikai processzorokb\u00f3l. Ezek a saj\u00e1toss\u00e1gok negat\u00edvan befoly\u00e1solhatj\u00e1k egyes szerveralkalmaz\u00e1sok teljes\u00edtm\u00e9ny\u00e9t, ez\u00e9rt a firmware-ben van egy mechanizmus (RNGDS_MITG_DIS) az RDRAND \u00e9s RDSEED utas\u00edt\u00e1sok v\u00e9delm\u00e9nek letilt\u00e1s\u00e1ra, amelyeket az Intel SGX-en k\u00edv\u00fcl hajtanak v\u00e9gre.<\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u044f\u0434\u0440\u0435 CPU. \u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u044f\u0434\u0440\u0430\u043c\u0438 CPU (\u0440\u0430\u043d\u0435\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438\u043c\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47CROSSTalk \u2014 egy Intel CPU sebezhet\u0151s\u00e9g, amely a magok k\u00f6z\u00f6tti adatkis\u6cc4f\u00e9l\u00e9st eredm\u00e9nyezi | ProHoster","description":"Az Amszterdami Szabad Egyetem kutat\u00f3csoportja \u00faj sebezhet\u0151s\u00e9get (CVE-2020-0543) fedezett fel a mikroarchitekt\u00far\u00e1ban.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47CROSSTalk \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU Intel, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u044f\u0434\u0440\u0430\u043c\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:18+00:00","article:modified_time":"2020-06-09T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84664","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:00:17","updated":"2022-09-29 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/84664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=84664"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/84664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/84665"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=84664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=84664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=84664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}