{"id":84664,"date":"2020-06-10T01:42:18","date_gmt":"2020-06-09T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami"},"modified":"2020-06-10T01:42:18","modified_gmt":"2020-06-09T23:42:18","slug":"crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","title":{"rendered":"CROSSTalk \u2014 o vulnerabilitate \u00een CPU Intel, care duce la scurgeri de date \u00eentre nuclee","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la Universitatea Liber\u0103 din Amsterdam a identificat o nou\u0103 vulnerabilitatea<\/a><\/noindex> (CVE-2020-0543) \u00een structurile microarhitecturale ale procesoarelor Intel, remarcabil\u0103 prin faptul c\u0103 permite recuperarea rezultatelor execu\u021biei unor instruc\u021biuni care sunt executate pe un alt nucleu CPU. Aceasta este prima vulnerabilitate a mecanismului de execu\u021bie speculativ\u0103 a instruc\u021biunilor care permite scurgeri de date \u00eentre nuclee CPU separate (anterior, scurgerile erau limitate la diferite fire ale unui singur nucleu). Cercet\u0103torii i-au atribuit problemei numele CROSSTalk, dar \u00een documentele Intel<\/a><\/noindex> vulnerabilitatea este men\u021bionat\u0103 ca SRBDS (Special Register Buffer Data Sampling). <\/p>\n

Vulnerabilitatea este asociat\u0103 cu clasa de probleme MDS (Microarchitectural Data Sampling) prezentat\u0103<\/a><\/noindex> cu un an \u00een urm\u0103 \u0219i se bazeaz\u0103 pe aplicarea metodelor de analiz\u0103 prin canale laterale asupra datelor \u00een structurile microarhitecturale. Principiul de func\u021bionare<\/a><\/noindex> CROSSTalk este similar cu vulnerabilitatea RIDL<\/a><\/noindex>, dar difer\u0103 \u00een ceea ce prive\u0219te sursa scurgerii.
\nNoua vulnerabilitate manipuleaz\u0103 scurgerea dintr-un buffer intermediar anterior nedeclarat, utilizat \u00een comun de toate nuclee CPU. <\/p>\n

\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

Substan\u021ba problemei<\/a><\/noindex> const\u0103 \u00een faptul c\u0103 anumite instruc\u021biuni ale microprocesorului, inclusiv RDRAND, RDSEED \u0219i SGX EGETKEY, sunt implementate folosind o opera\u021biune microarhitectural\u0103 intern\u0103 SRR (Special Register Reads). Pe procesoarele vulnerabile, datele returnate pentru SRR se acumuleaz\u0103 \u00eentr-un buffer intermediar, comun pentru toate nuclee CPU, dup\u0103 care sunt transmise \u00eentr-un buffer de completare, legat de un nucleu fizic specific al CPU pe care a fost ini\u021biat\u0103 opera\u021biunea de citire. Ulterior, din bufferul de completare, valoarea este copiat\u0103 \u00een registre vizibile aplica\u021biilor. <\/p>\n

Dimensiunea bufferului intermediar comun corespunde liniei de cache, ceea ce este de obicei mai mare dec\u00e2t dimensiunea datelor citite, iar diferite opera\u021biuni de citire afecteaz\u0103 diferite ofseturi din buffer. Deoarece bufferul comun este copiat \u00eentreg \u00een bufferul de completare, nu doar por\u021biunea necesar\u0103 pentru opera\u021biunea curent\u0103 este mutat\u0103, ci \u0219i datele r\u0103mase \u00een urma execut\u0103rii altor opera\u021biuni, inclusiv cele efectuate pe alte nuclee CPU.
\n

\"CROSSTalk<\/a><\/noindex><\/center>
\n
\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

\u00cen cazul \u00een care atacul este organizat cu succes, un utilizator local autentificat \u00een sistem poate determina rezultatul execut\u0103rii instruc\u021biunilor RDRAND, RDSEED \u0219i EGETKEY \u00eentr-un proces str\u0103in sau \u00een cadrul unui enclave Intel SGX, indiferent de nucleul CPU pe care se execut\u0103 codul.
\nCercet\u0103torii care au identificat problema au publicat<\/a><\/noindex> prototipul unui exploit care demonstreaz\u0103 posibilitatea scurgerii de informa\u021bii despre valori aleatoare ob\u021binute prin instruc\u021biunile RDRAND \u0219i RDSEED, pentru a recupera cheia privat\u0103 ECDSA, procesat\u0103 \u00een enclava Intel SGX, dup\u0103 ce \u00een sistem a fost efectuat\u0103 o singur\u0103 opera\u021bie de semn\u0103tur\u0103 digital\u0103.<\/p>\n


\n
\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Problema este afectat\u0103<\/a><\/noindex> un gam\u0103 larg\u0103 de procesoare Intel, inclusiv Core i3, i5, i7, i9, m3, Celeron (serii J, G \u0219i N), Atom (serii C, E \u0219i X), Xeon (familiile E3, E5, E7, W \u0219i D), Xeon Scalable etc. Este remarcabil c\u0103 Intel a fost notificat\u0103 despre vulnerabilitate \u00een septembrie 2018, iar \u00een iulie 2019 a fost prezentat un prototip de exploit care demonstreaz\u0103 scurgeri de date \u00eentre nucleele CPU, dar dezvoltarea unei solu\u021bii a durat din cauza complexit\u0103\u021bii implement\u0103rii acesteia. \u00cen actualizarea de microcod propus\u0103 ast\u0103zi, problema este blocat\u0103 prin modificarea comportamentului instruc\u021biunilor RDRAND, RDSEED \u0219i EGETKEY pentru a suprascrie excessiv datele din bufferul comun pentru a preveni sedimentarea informa\u021biilor reziduale. \u00cen plus, a fost aplicat\u0103 suspendarea accesului la buffer p\u00e2n\u0103 la finalizarea opera\u021biunilor de citire \u0219i scriere a con\u021binutului. <\/p>\n

Un efect secundar al acestei protec\u021bii este cre\u0219terea \u00eent\u00e2rzierilor \u00een execu\u021bia RDRAND, RDSEED \u0219i EGETKEY, precum \u0219i reducerea l\u0103\u021bimii de band\u0103 la \u00eencercarea de a executa simultan aceste instruc\u021biuni pe diferite procesoare logice. Execu\u021bia RDRAND, RDSEED \u0219i EGETKEY suspend\u0103, de asemenea, accesul la memorie din alte procesoare logice. Aceste caracteristici pot afecta negativ performan\u021ba unor aplica\u021bii server, de aceea firmware-ul include un mecanism (RNGDS_MITG_DIS) pentru a dezactiva protec\u021bia instruc\u021biunilor RDRAND \u0219i RDSEED, care sunt executate \u00een afara enclavei Intel SGX.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u044f\u0434\u0440\u0435 CPU. \u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u044f\u0434\u0440\u0430\u043c\u0438 CPU (\u0440\u0430\u043d\u0435\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438\u043c\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47CROSSTalk \u2014 o vulnerabilitate \u00een CPU Intel care duce la scurgeri de date \u00eentre nuclele | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Liber\u0103 din Amsterdam a identificat o nou\u0103 vulnerabilitate (CVE-2020-0543) \u00een microarhitecturi.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47CROSSTalk \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU Intel, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u044f\u0434\u0440\u0430\u043c\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:18+00:00","article:modified_time":"2020-06-09T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84664","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:00:17","updated":"2022-09-29 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=84664"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/84665"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=84664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=84664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=84664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}