{"id":160597,"date":"2026-02-11T17:11:57","date_gmt":"2026-02-11T15:11:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx"},"modified":"2026-02-11T17:11:57","modified_gmt":"2026-02-11T15:11:57","slug":"uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","title":{"rendered":"Vulnerabilitate care permite ocolirea mecanismului de protec\u021bie Intel TDX","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Companiile Google \u0219i Intel au dezv\u0103luit rezultatele (PDF) colabor\u0103rii lor privind auditul de securitate al mecanismului Intel TDX 1.5 (Trusted Domain Extensions). Tehnologia Intel TDX implementeaz\u0103 posibilitatea cript\u0103rii memoriei ma\u0219inilor virtuale pentru a le proteja \u00eempotriva interven\u021biilor \u0219i analizelor din partea administratorului sistemului de gazd\u0103 \u0219i \u00eempotriva atacurilor fizice asupra echipamentului. \u00cen urma auditului au fost identificate 6 vulnerabilit\u0103\u021bi \u0219i 35 de erori care nu afecteaz\u0103 securitatea.     <\/p>\n<p>Problemele afecteaz\u0103 CPU-urile Intel Xeon de genera\u021bie 6, precum \u0219i cele de genera\u021biile 4 \u0219i 5 ale procesorilor Intel Xeon Scalable. Vulnerabilit\u0103\u021bile au fost remediate \u00een actualizarea microcodului de ieri. Pe GitHub a fost publicat un instrument pentru exploatarea vulnerabilit\u0103\u021bilor \u00een Intel TDX \u0219i prototipuri de exploat\u0103ri pentru dou\u0103 vulnerabilit\u0103\u021bi (CVE-2025-30513, CVE-2025-32007).        <\/p>\n<p>Cea mai periculoas\u0103 vulnerabilitate (CVE-2025-30513) permite unui administrator ne\u00eencrez\u0103tor, cu acces la sistemul gazd\u0103, s\u0103 ob\u021bin\u0103 privilegii sporite \u0219i s\u0103 compromit\u0103 complet garan\u021biile de securitate oferite de tehnologia Intel TDX. Vulnerabilitatea este cauzat\u0103 de o stare de competi\u021bie \u00een una dintre modulele TDX, permi\u021b\u00e2nd, \u00een momentul migra\u021biei unei ma\u0219ini virtuale, transferul unui mediu protejat (TD \u2014 Domeniu de \u00cencredere) dintr-o stare de migrare suportat\u0103 \u00eentr-o stare care permite trecerea \u00een modul de depanare.     <\/p>\n<p>Problema este cauzat\u0103 de posibilitatea de \u00eenlocuire a atributelor mediului \u00een momentul \u00een care au fost verificate, dar \u00eenainte de a fi mutate \u00eentr-o stare neschimb\u0103toare \u00een mediul transferat. Dup\u0103 setarea atributului de depanare, administratorul sistemului de gazd\u0103 poate urm\u0103ri \u00een timp real activitatea sistemului de operare protejat \u0219i poate ob\u021bine acces la starea despachetat\u0103 a memoriei.     <\/p>\n<p>Vulnerabilitatea este suficient de u\u0219or de exploatat, deoarece administratorul poate ini\u021bia \u00een orice moment procesul de migrare live a unei ma\u0219ini virtuale protejate. Problema a fost identificat\u0103 de cercet\u0103torii de la Google, care, \u00een timpul studiului API-ului, au observat o neconcordan\u021b\u0103 \u00eentre modul \u00een care FSM (Finite State Machine) urm\u0103re\u0219te starea opera\u021biunilor, gestioneaz\u0103 \u00eentreruperea opera\u021biei de import \u0219i modific\u0103, dar nu returneaz\u0103 la valoarea ini\u021bial\u0103 dup\u0103 o defec\u021biune, starea mediului protejat.      <\/p>\n<p>Vulnerabilit\u0103\u021bi mai pu\u021bin periculoase:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2025-32007 \u2014 o suprasarcin\u0103 \u00eentreag\u0103 \u00een codul de analiz\u0103 a metadatelor, duc\u00e2nd, \u00een procesul de migra\u021bie live, la scurgerea a 8 KB de date decriptate din stiva procesorului logic curent (LP, Procesor Logic).\n<li class=\"l\"> CVE-2025-32467 \u2014 utilizarea variabilelor neini\u021bializate \u00een unele module TDX poate duce la scurgerea informa\u021biilor reziduale.\n<li class=\"l\"> CVE-2025-27572 \u2014 stocarea datelor confiden\u021biale \u00een timpul execut\u0103rii speculative a instruc\u021biunilor poate duce la scurgerea informa\u021biilor.\n<li class=\"l\"> CVE-2025-27940 \u2014 citirea dintr-o zon\u0103 de memorie \u00een afara unui buffer alocat poate duce la scurgerea informa\u021biilor.\n<li class=\"l\"> CVE-2025-31944 \u2014 o stare de competi\u021bie care poate duce la refuzul serviciului.    <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=64774\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions). \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f Intel TDX \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0434\u043b\u044f \u0438\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 35 \u043d\u0435 \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-160597","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Intel TDX | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-02-11T15:11:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-02-11T15:11:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate care permite ocolirea mecanismului de protec\u021bie Intel TDX | ProHoster","description":"Companiile Google \u0219i Intel au dezv\u0103luit rezultatele (PDF) colabor\u0103rii lor \u00een auditul de securitate al mecanismului Intel TDX 1.5 (Trusted Domain Extensions).","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Intel TDX | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u0438 Intel \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b (PDF) \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0430\u0443\u0434\u0438\u0442\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel TDX 1.5 (Trusted Domain Extensions).","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-pozvolyayushhaya-obojti-mehanizm-zashhity-intel-tdx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-11T15:11:57+00:00","article:modified_time":"2026-02-11T15:11:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"160597","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-11 15:12:59","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-11 15:11:57","updated":"2026-02-11 15:12:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/160597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=160597"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/160597\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=160597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=160597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=160597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}