{"id":120977,"date":"2024-12-13T21:46:00","date_gmt":"2024-12-13T19:46:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd"},"modified":"2024-12-13T21:46:00","modified_gmt":"2024-12-13T19:46:02","slug":"ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","title":{"rendered":"\u00datok BadRAM, ktor\u00fd umo\u017e\u0148uje ob\u00eds\u0165 mechanizmus certifik\u00e1cie SEV-SNP v procesoroch AMD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Skupina v\u00fdskumn\u00edkov z Leuven, L\u00fcbecku a Birminghamu vyvinula met\u00f3du \u00fatoku BadRAM (CVE-2024-21944), ktor\u00e1 umo\u017e\u0148uje ob\u00eds\u0165 mechanizmus overovania a skompromitova\u0165 prostredia chr\u00e1nen\u00e9 pomocou roz\u0161\u00edrenia SEV-SNP v procesoroch AMD. Na vykonanie \u00fatoku mus\u00ed \u00fato\u010dn\u00edk, s v\u00fdnimkou zriedkav\u00fdch pr\u00edpadov, z\u00edska\u0165 fyzick\u00fd pr\u00edstup k pam\u00e4\u0165ov\u00fdm modulom a ma\u0165 tie\u017e mo\u017enos\u0165 vykon\u00e1va\u0165 k\u00f3d na \u00farovni nulov\u00e9ho prstenca (ring0) na serveri, ktor\u00fd vykon\u00e1va chr\u00e1nen\u00e9 hos\u0165ovsk\u00e9 prostredia.    <\/p>\n<p>Roz\u0161\u00edrenia AMD SEV (Secure Encrypted Virtualization) s\u00fa zameran\u00e9 na poskytovanie z\u00e1ruk integrity pam\u00e4te virtu\u00e1lnych strojov a ochranu proti z\u00e1sahu a anal\u00fdze zo strany administr\u00e1tora hostite\u013esk\u00e9ho syst\u00e9mu, ktor\u00fd m\u00f4\u017ee vykon\u00e1va\u0165 k\u00f3d na \u00farovni hyperv\u00edzora. P\u00f4vodne ochrana AMD SEV spo\u010d\u00edvala v \u0161ifrovan\u00ed obsahu pam\u00e4te hos\u0165ovsk\u00e9ho syst\u00e9mu a izol\u00e1cii registrov, no nesk\u00f4r v procesoroch AMD EPYC bolo \u010falej implementovan\u00e9 roz\u0161\u00edrenie SEV-SNP (Secure Nested Paging) pre bezpe\u010dn\u00e9 fungovanie s vnoren\u00fdmi str\u00e1nkov\u00fdmi tabu\u013ekami, ktor\u00e9 zaru\u010duje zachovanie integrity pam\u00e4te a neumo\u017e\u0148uje vykon\u00e1va\u0165 zmeny v pam\u00e4ti hos\u0165ovsk\u00e9ho syst\u00e9mu zo strany hyperv\u00edzora.     <\/p>\n<p>Mechanizmus AMD SEV-SNP bol vytvoren\u00fd tak, aby spravodajsk\u00e9 slu\u017eby alebo person\u00e1l d\u00e1tov\u00fdch centier a cloudov\u00fdch poskytovate\u013eov, v ktor\u00fdch s\u00fa vykon\u00e1van\u00e9 chr\u00e1nen\u00e9 hos\u0165ovsk\u00e9 syst\u00e9my, nemohli zasahova\u0165 do chodu hos\u0165ovsk\u00e9ho syst\u00e9mu. Navrhovan\u00e1 met\u00f3da \u00fatoku BadRAM umo\u017e\u0148uje ob\u00eds\u0165 poskytovan\u00e9 z\u00e1ruky prostredn\u00edctvom zmeny metad\u00e1t SPD (Serial Presence Detect) v pam\u00e4\u0165ov\u00fdch moduloch DDR4 alebo DDR5. Pri \u00faspe\u0161nom \u00fatoku m\u00f4\u017ee \u00fato\u010dn\u00edk prep\u00edsa\u0165 za\u0161ifrovan\u00e9 \u00fadaje v pam\u00e4ti hos\u0165ovsk\u00e9ho syst\u00e9mu (na \u00farovni \u0161ifrov\u00e9ho textu, bez mo\u017enosti de\u0161ifrovania) a ob\u00eds\u0165 mechanizmus attestation, napr\u00edklad na skrytie implant\u00e1cie backdoora do virtu\u00e1lneho stroja chr\u00e1nen\u00e9ho technol\u00f3giou SEV-SNP.        <\/p>\n<p>\u00datok je zalo\u017een\u00fd na prezentovan\u00ed fikt\u00edvnych parametrov pam\u00e4\u0165ov\u00e9ho modulu v SPD, \u010do n\u00fati procesor pristupova\u0165 k neexistuj\u00facim adres\u00e1m, ktor\u00e9 sa odr\u00e1\u017eaj\u00fa na existuj\u00facich oblastiach pam\u00e4te. \u00dato\u010dn\u00edk m\u00f4\u017ee upravi\u0165 SPD tak, \u017ee pam\u00e4\u0165ov\u00fd modul vr\u00e1ti procesoru ve\u013ekos\u0165, ktor\u00e1 presahuje skuto\u010dn\u00e9 parametre modulu. Po tom \u00fato\u010dn\u00edk m\u00f4\u017ee mapova\u0165 vymyslen\u00fa neexistuj\u00facu pam\u00e4\u0165 na re\u00e1lnu oblas\u0165 v DRAM, ktor\u00e1 sa u\u017e pou\u017e\u00edva v za\u0161ifrovanej podobe v chr\u00e1nen\u00fdch hos\u0165uj\u00facich syst\u00e9moch. Nakoniec vznik\u00e1 situ\u00e1cia, kedy r\u00f4zne adresy odkazuj\u00fa na jednu a t\u00fa ist\u00fa fyzick\u00fa pam\u00e4\u0165 (dve oblasti sa odr\u00e1\u017eaj\u00fa na jednu oblas\u0165 v \u010dipe DRAM), t.j. na adresu fikt\u00edvnej odrazenej oblasti pam\u00e4te je mo\u017en\u00e9 pristupova\u0165 k u\u017e pou\u017e\u00edvan\u00e9 re\u00e1lnej pam\u00e4ti a ob\u00eds\u0165 mechanizmy ochrany pam\u00e4te v CPU.    <center><img decoding=\"async\" alt=\"\u00datok BadRAM, ktor\u00fd umo\u017e\u0148uje ob\u00eds\u0165 mechanizmus certifik\u00e1cie SEV-SNP v procesoroch AMD\" src=\"\/wp-content\/uploads\/2024\/12\/4713140e7aea99a59554abc7ddf71360.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>Na uskuto\u010dnenie \u00fatoku sta\u010d\u00ed zostavi\u0165 najjednoduch\u0161\u00ed program\u00e1tor za pribli\u017ene 10 dol\u00e1rov, pozost\u00e1vaj\u00faci z mikrokontrol\u00e9ra Raspberry Pi Pico, konektora pre moduly DDR4\/DD5 a zdroja nap\u00e1jania. N\u00e1stroje pou\u017e\u00edvan\u00e9 na uskuto\u010dnenie \u00fatoku, modul jadra a prototypy exploitov s\u00fa umiestnen\u00e9 na GitHub.      <center><img decoding=\"async\" alt=\"\u00datok BadRAM, ktor\u00fd umo\u017e\u0148uje ob\u00eds\u0165 mechanizmus certifik\u00e1cie SEV-SNP v procesoroch AMD\" src=\"\/wp-content\/uploads\/2024\/12\/d688956f05643a91bf1b5881d80af66a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Pre \u010dipy niektor\u00fdch v\u00fdrobcov, kde nie je vykonan\u00e1 blok\u00e1da prep\u00edsania SPD, je uskuto\u010dnenie \u00fatoku mo\u017en\u00e9 programov\u00fdmi prostriedkami bez fyzick\u00e9ho pr\u00edstupu k serveru. Napr\u00edklad je mo\u017en\u00e9 programovo zmeni\u0165 parametre pam\u00e4\u0165ov\u00fdch modulov spolo\u010dnosti Corsair so RGB podsvieten\u00edm. V pr\u00edpade uskuto\u010dnenia plne programov\u00e9ho \u00fatoku m\u00f4\u017ee by\u0165 syst\u00e9m kompromitovan\u00fd, napr\u00edklad cez aplik\u00e1ciu \u0161kodliv\u00e9ho aktualiz\u00e1cie BIOS alebo cez diverziu zo strany administr\u00e1torov. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/\"   title=\"serverov\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1748\">serverov<\/a> v cloudov\u00fdch slu\u017eb\u00e1ch.      <center><img decoding=\"async\" alt=\"\u00datok BadRAM, ktor\u00fd umo\u017e\u0148uje ob\u00eds\u0165 mechanizmus certifik\u00e1cie SEV-SNP v procesoroch AMD\" src=\"\/wp-content\/uploads\/2024\/12\/3ee9c7a2287c41ac8e0f237106f58e2c.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/p>\n<p>Ako potvrdenie fungovania met\u00f3dy s\u00fa demon\u0161trovan\u00e9 dva \u00fatoky. V prvom \u00fatoku je uk\u00e1zan\u00e1 mo\u017enos\u0165 op\u00e4tovn\u00e9ho reprodukovania \u0161ifrovan\u00e9ho textu \u2014 pri pou\u017eit\u00ed AMD SEV s\u00fa d\u00e1ta v pam\u00e4ti uchov\u00e1van\u00e9 vo \u0161ifrovanej forme a \u00fato\u010dn\u00edk nem\u00f4\u017ee ur\u010di\u0165 obsah, ale m\u00e1 mo\u017enos\u0165 pre\u010d\u00edta\u0165 \u0161ifrovan\u00e9 d\u00e1ta a n\u00e1sledne ich nahradi\u0165 in\u00fdm \u0161ifrovan\u00fdm obsahom.     <\/p>\n<p>V druhej \u00fatoku bola demon\u0161trovan\u00e1 mo\u017enos\u0165 ob\u00eds\u0165 mechanizmus attest\u00e1cie SEV-SNP, ktor\u00fd poskytuje kryptografick\u00e9 potvrdenie integrity virtu\u00e1lneho stroja nasaden\u00e9ho v chr\u00e1nenom prostred\u00ed. \u00dato\u010dn\u00edk m\u00f4\u017ee zachyti\u0165 spr\u00e1vu attest\u00e1cie spr\u00e1vneho virtu\u00e1lneho stroja a n\u00e1sledne ju pou\u017ei\u0165 pre kompromitovan\u00fd virtu\u00e1lny stroj, pri\u010dom napr\u00edklad skryje stopy zavedenia backdooru.        <\/p>\n<p>Probl\u00e9m sa t\u00fdka 3. a 4. gener\u00e1cie procesorov AMD s\u00e9rie EPYC, dod\u00e1van\u00fdch pod k\u00f3dov\u00fdmi n\u00e1zvami Milan, Milan-X, Genoa, Bergamo, Genoa-X a Siena. Na zablokovanie zranite\u013enosti spolo\u010dnos\u0165 AMD u\u017e vydala aktualiz\u00e1ciu firmv\u00e9ru SEV, v ktorej je implementovan\u00e1 kontrola ALIAS_CHECK, ktor\u00e1 zabra\u0148uje manipul\u00e1ci\u00e1m s pam\u00e4\u0165ou, charakteristick\u00fdm pre t\u00fato \u00fatok.         <\/p>\n<p>Navrhovan\u00e9 technol\u00f3gie spolo\u010dnosti Intel Scalable SGX a TDX nie s\u00fa n\u00e1chyln\u00e9 na \u00fatok, preto\u017ee maj\u00fa potrebn\u00e9 kontroly pr\u00edtomn\u00e9 od za\u010diatku. Klasick\u00e1 technol\u00f3gia Intel SGX, ktor\u00e1 bola v roku 2021 premenen\u00e1 spolo\u010dnos\u0165ou Intel na zastaran\u00fa, je \u010diasto\u010dne n\u00e1chyln\u00e1 na \u00fatok (podobne ako predt\u00fdm zn\u00e1my \u00fatok MemBuster, \u00fato\u010dn\u00edk m\u00f4\u017ee analyzova\u0165 pr\u00edstupy k za\u0161ifrovanej pam\u00e4ti, teda je mo\u017en\u00e9 iba \u010d\u00edta\u0165 \u0161ifrovan\u00e9 d\u00e1ta, ale nie ich prep\u00edsa\u0165). Testovanie roz\u0161\u00edren\u00ed CCA (Confidential Compute Architecture) v procesoroch spolo\u010dnosti ARM nebolo vykonan\u00e9.            <\/p>\n<p>\u010eal\u0161ie spr\u00e1vy poukazuj\u00fa na \u010fal\u0161iu zranite\u013enos\u0165 s\u00favisiacu s AMD SEV-SNP. Zranite\u013enos\u0165 bola identifikovan\u00e1 vo vyv\u00edjanom AMD forku emul\u00e1tora QEMU, ur\u010den\u00e9ho na spustenie <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/vps\/\"   title=\"virtu\u00e1ln\u00edch stroj\u016f\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2193\">virtu\u00e1ln\u00edch stroj\u016f<\/a> s SEV-SNP. Probl\u00e9m umo\u017e\u0148uje administr\u00e1torovi hostite\u013esk\u00e9ho prostredia z\u00edska\u0165 root pr\u00edstup k hos\u0165uj\u00facim syst\u00e9mom prostredn\u00edctvom manipul\u00e1cie s tabu\u013ekami ACPI. Zranite\u013enos\u0165 je sp\u00f4soben\u00e1 t\u00fdm, \u017ee pri spusten\u00ed hos\u0165uj\u00faceho syst\u00e9mu sa vykon\u00e1va kontrola integrity jadra Linux, po\u010diato\u010dn\u00e9ho RAM disku a parametrov jadra, ale nezoh\u013ead\u0148uj\u00fa sa tabu\u013eky ACPI, prostredn\u00edctvom ktor\u00fdch m\u00f4\u017ee hyperv\u00edzor predstavi\u0165 \u0161peci\u00e1lne upraven\u00fd k\u00f3d AML (ACPI Machine Language), ur\u010den\u00fd na vykon\u00e1vanie v hos\u0165uj\u00facom prostred\u00ed. Tvrd\u00ed sa, \u017ee probl\u00e9m nie je \u0161pecifick\u00fd pre QEMU a prejavuje sa v ak\u00fdchko\u013evek hyperv\u00edzoroch a emul\u00e1toroch, preto\u017ee jadro Linux d\u00f4veruje ak\u00fdmko\u013evek \u00fadajom ACPI, ktor\u00e9 dost\u00e1va od hyperv\u00edzora.            <center>  <div class=\"youtube-placeholder\" data-id=\"AUKR0Q5xWW8\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/AUKR0Q5xWW8\/hqdefault.jpg\" alt=\"Prehrajte video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center>  <center>  <div class=\"youtube-placeholder\" data-id=\"zhDACoigQ9M\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/zhDACoigQ9M\/hqdefault.jpg\" alt=\"Prehrajte video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62399\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0) [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120978,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 BadRAM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 SEV-SNP \u0432 CPU AMD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-13T19:46:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-13T19:46:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00datok BadRAM, ktor\u00fd umo\u017e\u0148uje ob\u00eds\u0165 mechanizmus certifik\u00e1cie SEV-SNP v procesoroch AMD | ProHoster","description":"Skupina vedcov z univerz\u00edt v Leuvene, L\u00fcbecku a Birminghame vyvinula met\u00f3du \u00fatoku BadRAM (CVE-2024-21944), ktor\u00e1 umo\u017e\u0148uje ob\u00eds\u0165 mechanizmus autentifik\u00e1cie a skompromitova\u0165 prostredia.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 BadRAM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 SEV-SNP \u0432 CPU AMD | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-13T19:46:02+00:00","article:modified_time":"2024-12-13T19:46:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:38:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:53:19","updated":"2026-02-09 17:38:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/120977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=120977"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/120977\/revisions"}],"predecessor-version":[{"id":159437,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/120977\/revisions\/159437"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/120978"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=120977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=120977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=120977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}