{"id":102321,"date":"2021-11-18T21:36:40","date_gmt":"2021-11-18T19:36:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predlozhen-metod-ataki-dlya-udalyonnogo-opredeleniya-fragmentov-pamyati-na-servere"},"modified":"2021-11-18T21:36:40","modified_gmt":"2021-11-18T19:36:41","slug":"predlozhen-metod-ataki-dlya-udalyonnogo-opredeleniya-fragmentov-pamyati-na-servere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/predlozhen-metod-ataki-dlya-udalyonnogo-opredeleniya-fragmentov-pamyati-na-servere","title":{"rendered":"Metoda e propozuar p\u00ebr sulmin p\u00ebr p\u00ebrcaktimin e larg\u00ebt t\u00eb fragmenteve t\u00eb memories n\u00eb server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup studiuesish nga Universitete Teknologjik i Grazit (Austria), i njohur m\u00eb par\u00eb p\u00ebr zhvillimin e sulmeve MDS, NetSpectre, Throwhammer dhe ZombieLoad, publikoi nj\u00eb metod\u00eb t\u00eb re sulmi (CVE-2021-3714) n\u00ebp\u00ebrmjet kanaleve an\u00ebsore n\u00eb mekanizmin e deduplifikimit t\u00eb faqeve t\u00eb memories (Memory-Deduplication), e cila lejon t\u00eb p\u00ebrcaktohet prania e t\u00eb dh\u00ebnave t\u00eb caktuara n\u00eb memorie, t\u00eb organizohet nj\u00eb rrjedhje byte-p\u00ebr-byte e p\u00ebrmbajtjes s\u00eb memories ose t\u00eb p\u00ebrcaktohet shp\u00ebrndarja e memories p\u00ebr t\u00eb kaluar mbrojtjen e bazuar n\u00eb randomizimin e adresave (ASLR). Metoda e re e sulmit ndryshon nga variantet e m\u00ebparshme t\u00eb demonstruara t\u00eb sulmeve n\u00eb mekanizmin e deduplifikimit duke kryer sulmin nga nj\u00eb host i jasht\u00ebm duke p\u00ebrdorur si kriter ndryshimin e koh\u00ebs s\u00eb p\u00ebrgjigjeve ndaj k\u00ebrkesave t\u00eb d\u00ebrguara nga sulmuesi p\u00ebr protokolet HTTP\/1 dhe HTTP\/2. Mund\u00ebsia e realizimit t\u00eb sulmit \u00ebsht\u00eb demonstruar p\u00ebr server\u00ebt n\u00eb baz\u00eb Linux dhe Windows.      <\/p>\n<p>Sulmet e mekanizmit t\u00eb deduplikimit t\u00eb memories p\u00ebrdorin si kanal p\u00ebr rrjedhjen e informacionit ndryshimin n\u00eb koh\u00ebn e p\u00ebrpunimit t\u00eb operacionit t\u00eb shkruar n\u00eb situata kur ndryshimi i t\u00eb dh\u00ebnave \u00e7on n\u00eb klonimin e faqeve t\u00eb deduplikura t\u00eb memories p\u00ebrmes mekanizmit Copy-On-Write (COW). Gjat\u00eb funksionimit t\u00eb tij, b\u00ebrthama identifikon faqet e nj\u00ebjta t\u00eb memories nga procese t\u00eb ndryshme dhe i bashkon ato, duke shfaqur faqet identike t\u00eb memories n\u00eb nj\u00eb zon\u00eb t\u00eb vetme fizike p\u00ebr ruajtjen e vet\u00ebm nj\u00eb kopje. Kur nj\u00eb nga proceset p\u00ebrpiqet t\u00eb ndryshoj\u00eb t\u00eb dh\u00ebnat e lidhura me faqet e deduplikura t\u00eb memories, ndodh nj\u00eb p\u00ebrjashtim (page fault) dhe p\u00ebrmes mekanizmit Copy-On-Write krijohet automatikisht nj\u00eb kopje e ve\u00e7ant\u00eb e faqes s\u00eb memories, e cila sigurohet p\u00ebr procesin. Koha e shtuar e nevojshme p\u00ebr kopjimin mund t\u00eb jet\u00eb nj\u00eb shenj\u00eb e ndryshimit t\u00eb t\u00eb dh\u00ebnave q\u00eb prek nj\u00eb proces tjet\u00ebr.      <\/p>\n<p>Hulumtuesit kan\u00eb treguar se vonesat q\u00eb shfaqen si rezultat i funksionit COW mund t\u00eb kapen jo vet\u00ebm lokal, por gjithashtu duke analizuar ndryshimin e koh\u00ebs s\u00eb dor\u00ebzimit t\u00eb p\u00ebrgjigjeve p\u00ebrmes rrjetit. Shum\u00eb metode jan\u00eb propozuar p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrmbajtjen e memories nga nj\u00eb host t\u00eb larg\u00ebt p\u00ebrmes analiz\u00ebs s\u00eb koh\u00ebs s\u00eb ekzekutimit t\u00eb k\u00ebrkesave p\u00ebr protokollet HTTP\/1 dhe HTTP\/2. P\u00ebr ruajtjen e modeleve t\u00eb zgjedhura p\u00ebrdoren aplikacione tipike web q\u00eb ruajn\u00eb informacionin e marr\u00eb n\u00eb k\u00ebrkesa n\u00eb memoria.       <\/p>\n<p>Principi i p\u00ebrgjithsh\u00ebm i sulmit p\u00ebrqendrohet n\u00eb mbushjen e <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-newyork\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2687\">serveri<\/a> faqeve t\u00eb memories me t\u00eb dh\u00ebna q\u00eb mund t\u00eb p\u00ebrs\u00ebrisin p\u00ebrmbajtjen e faqes s\u00eb memories q\u00eb tashm\u00eb ekziston n\u00eb server. M\u00eb pas, sulmuesi pret koh\u00ebn e nevojshme p\u00ebr q\u00eb b\u00ebrja e deduplikimit dhe bashkimit t\u00eb faqes s\u00eb memories t\u00eb kryhet nga b\u00ebrthama, pas s\u00eb cil\u00ebs ai\/modifikon nj\u00eb dublikat t\u00eb kontrolluar t\u00eb t\u00eb dh\u00ebnave dhe vler\u00ebson koh\u00ebn e reagimit p\u00ebr t\u00eb p\u00ebrcaktuar suksesin e dep\u00ebrtimit.        <center><img decoding=\"async\" alt=\"Metoda e propozuar p\u00ebr sulmin p\u00ebr p\u00ebrcaktimin e larg\u00ebt t\u00eb fragmenteve t\u00eb memories n\u00eb server\" src=\"\/wp-content\/uploads\/2021\/11\/bc8908cb0105a0b745b05424ec66756e.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>N\u00eb eksperimentet e zhvilluara, shpejt\u00ebsia maksimale e rrjedhjes s\u00eb informacionit arriti n\u00eb 34.41 byte n\u00eb or\u00eb p\u00ebr sulmet p\u00ebrmes rrjetit global dhe 302.16 byte n\u00eb or\u00eb p\u00ebr sulmet p\u00ebrmes rrjetit lokal, q\u00eb \u00ebsht\u00eb m\u00eb e shpejt\u00eb se metoda t\u00eb tjera t\u00eb nxjerrjes s\u00eb t\u00eb dh\u00ebnave p\u00ebrmes kanaleve t\u00eb jashtme (p\u00ebr shembull, n\u00eb sulmin NetSpectre, shpejt\u00ebsia e transferimit t\u00eb t\u00eb dh\u00ebnave \u00ebsht\u00eb 7.5 byte n\u00eb or\u00eb).          <\/p>\n<p>Jan\u00eb propozuar tri variante funksionale t\u00eb sulmit. Varianti i par\u00eb lejon identifikimin e t\u00eb dh\u00ebnave n\u00eb memorje <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/\"   title=\"server web\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"762\">server web<\/a>, i cili p\u00ebrdor Memcached. Sulmi konsiston n\u00eb ngarkimin e grupeve t\u00eb caktuara t\u00eb t\u00eb dh\u00ebnave n\u00eb ruajtjen Memcached, pastrimin e bllokut t\u00eb deduplikuar, riparimin e po t\u00eb nj\u00ebjtit element dhe krijimin e kushteve p\u00ebr formimin e kopjimit COW p\u00ebrmes nd\u00ebrrimit t\u00eb p\u00ebrmbajtjes s\u00eb bllokut. Gjat\u00eb eksperimentit me Memcached, arriti t\u00eb identifikoj\u00eb p\u00ebr versionin libc t\u00eb instaluar n\u00eb sistemin q\u00eb funksiononte n\u00eb nj\u00eb makin\u00eb virtuale p\u00ebr 166.51 sekonda.    <\/p>\n<p>E dyti variant ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb zbuluar p\u00ebrmbajtjen e sh\u00ebnimeve n\u00eb DBMS MariaDB, duke p\u00ebrdorur depozitimin InnoDB, p\u00ebrmes rip\u00ebrshkrimit t\u00eb p\u00ebrmbajtjes byte p\u00ebr byte. Sulmi kryhet duke d\u00ebrguar k\u00ebrkesa t\u00eb modifikuara ve\u00e7mas, t\u00eb cilat shkaktojn\u00eb mosrregullsira nj\u00ebbyte n\u00eb faqet e memories dhe analizimin e koh\u00ebs s\u00eb reagimit p\u00ebr t\u00eb p\u00ebrcaktuar n\u00ebse q\u00ebllimi p\u00ebr p\u00ebrmbajtjen e byte-it ishte i sakt\u00eb. Shpejt\u00ebsia e k\u00ebtij rrjedhje nuk \u00ebsht\u00eb e madhe dhe arrin 1.5 byte n\u00eb or\u00eb gjat\u00eb sulmit nga nj\u00eb rrjet lokal. Nj\u00ebavantazhi i metod\u00ebs \u00ebsht\u00eb se ajo mund t\u00eb p\u00ebrdoret p\u00ebr rikuperimin e p\u00ebrmbajtjes s\u00eb panjohur t\u00eb memories.    <\/p>\n<p>E treta variant lejon q\u00eb brenda 4 minutash t\u00eb kaloj\u00eb plot\u00ebsisht mekanizmin e mbrojtjes KASLR dhe t\u00eb marr\u00eb informacion rreth zhvendosjes n\u00eb kujtes\u00ebn e imazhit t\u00eb b\u00ebrtham\u00ebs s\u00eb makineris\u00eb virtuale, n\u00eb situat\u00ebn kur adresa e zhvendosjes ndodhet n\u00eb nj\u00eb faqe t\u00eb memories, t\u00eb dh\u00ebna t\u00eb tjera n\u00eb t\u00eb cil\u00ebn nuk ndryshojn\u00eb. Sulmi u realizua nga nj\u00eb host, q\u00eb ndodhej pas 14 kalimeve (hops) t\u00eb sistemit t\u00eb sulmuar. Shembujt e kodit p\u00ebr realizimin e sulmeve t\u00eb prezentuara do t\u00eb publikohen n\u00eb GitHub.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56179\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0442\u0430\u043a MDS, NetSpectre, Throwhammer \u0438 ZombieLoad, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2021-3714) \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 (Memory-Deduplication), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u0430\u0439\u0442\u043e\u0432\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 (ASLR). \u041e\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102322,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0442\u0430\u043a MDS, NetSpectre, Throwhammer \u0438 ZombieLoad, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2021-3714) \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 (Memory-Deduplication), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u0430\u0439\u0442\u043e\u0432\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 (ASLR). \u041e\u0442\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/predlozhen-metod-ataki-dlya-udalyonnogo-opredeleniya-fragmentov-pamyati-na-servere\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0442\u0430\u043a MDS, NetSpectre, Throwhammer \u0438 ZombieLoad, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2021-3714) \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 (Memory-Deduplication), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u0430\u0439\u0442\u043e\u0432\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 (ASLR). \u041e\u0442\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/predlozhen-metod-ataki-dlya-udalyonnogo-opredeleniya-fragmentov-pamyati-na-servere\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-11-18T19:36:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-11-18T19:36:41+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47E propozuar nj\u00eb metod\u00eb sulmi p\u00ebr p\u00ebrcaktimin n\u00eb distanc\u00eb t\u00eb fragmenteve t\u00eb memories n\u00eb server | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Universiteti Teknik i Grazit (Austria), i njohur m\u00eb par\u00eb p\u00ebr zhvillimin e sulmeve MDS, NetSpectre, Throwhammer dhe ZombieLoad, publikoi nj\u00eb metod\u00eb t\u00eb re sulmi (CVE-2021-3714) p\u00ebrmes kanaleve an\u00ebsore mbi mekanizmin e dedupikimit t\u00eb faqeve t\u00eb memories (Memory-Deduplication), q\u00eb lejon identifikimin e pranishm\u00ebris\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb caktuara n\u00eb memory, organizimin e daljes n\u00eb bajt p\u00ebrmbajtjes s\u00eb memories, ose p\u00ebrcaktimin e shkall\u00ebs s\u00eb memories p\u00ebr t\u00eb anashkaluar mbrojtjen e bazuar n\u00eb randomizimin e adresave (ASLR). Nga","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/predlozhen-metod-ataki-dlya-udalyonnogo-opredeleniya-fragmentov-pamyati-na-servere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0442\u0430\u043a MDS, NetSpectre, Throwhammer \u0438 ZombieLoad, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2021-3714) \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 (Memory-Deduplication), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0431\u0430\u0439\u0442\u043e\u0432\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 (ASLR). \u041e\u0442","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/predlozhen-metod-ataki-dlya-udalyonnogo-opredeleniya-fragmentov-pamyati-na-servere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-18T19:36:41+00:00","article:modified_time":"2021-11-18T19:36:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102321","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-18 19:37:43","updated":"2026-02-09 21:39:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102321"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102321\/revisions"}],"predecessor-version":[{"id":159967,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102321\/revisions\/159967"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/102322"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}