{"id":120977,"date":"2024-12-13T21:46:00","date_gmt":"2024-12-13T19:46:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd"},"modified":"2024-12-13T21:46:00","modified_gmt":"2024-12-13T19:46:02","slug":"ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","title":{"rendered":"Sulmi BadRAM, i cili lejon kalimin e mekanizmit t\u00eb akreditimit SEV-SNP n\u00eb CPU-t\u00eb AMD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup hulumtimesh nga Universiteti i Levenit, Universiteti i Luebeckut dhe Universiteti i Birminghamit ka zhvilluar nj\u00eb metod\u00eb sulmi BadRAM (CVE-2024-21944), e cila mund\u00ebson kap\u00ebrcimin e mekanizmit t\u00eb verifikimit t\u00eb autentikimit dhe kompromentimin e ambienteve t\u00eb mbrojtura duke p\u00ebrdorur zgjerimin SEV-SNP n\u00eb procesor\u00ebt AMD. P\u00ebr t\u00eb realizuar sulmin, sulmuesi, me p\u00ebrjashtim t\u00eb rasteve t\u00eb rralla, duhet t\u00eb ket\u00eb qasje fizike n\u00eb modulat e memories, si dhe t\u00eb ket\u00eb mund\u00ebsin\u00eb e ekzekutimit t\u00eb kodit n\u00eb nivelin e mbrojtjes (ring0) n\u00eb serverin q\u00eb ekzekuton ambientet e mbrojtura t\u00eb mysafir\u00ebve.    <\/p>\n<p>Zgjerimet AMD SEV (Virtualizimi i Siguruar t\u00eb Kriptuar) synojn\u00eb t\u00eb ofrojn\u00eb garanci t\u00eb integritetit t\u00eb memories s\u00eb makinave virtuale, si dhe mbrojtjen e tyre nga nd\u00ebrhyrja dhe analiza nga administratori i sistemit prit\u00ebs, i cili mund t\u00eb ekzekutoj\u00eb kod n\u00eb nivelin e hipervizorit. Fillimisht, mbrojtja AMD SEV ishte e kufizuar n\u00eb kriptimin e p\u00ebrmbajtjes s\u00eb memories s\u00eb sistemit mysafir dhe izolimin e regjistrave, por m\u00eb von\u00eb, n\u00eb procesor\u00ebt AMD EPYC u implementua edhe zgjerimi SEV-SNP (Pagingu i Sigurt t\u00eb Shtresuar) p\u00ebr nj\u00eb funksionim t\u00eb sigurt me tabela t\u00eb p\u00ebrfshira t\u00eb pagesave t\u00eb memories, duke garantuar ruajtjen e integritetit t\u00eb memories dhe duke mos lejuar ndryshimin e memories s\u00eb sistemit mysafir nga hipervizori.     <\/p>\n<p>Mekanizmi AMD SEV-SNP \u00ebsht\u00eb krijuar n\u00eb m\u00ebnyr\u00eb q\u00eb agjencit\u00eb e inteligjenc\u00ebs ose stafi i qendrave t\u00eb t\u00eb dh\u00ebnave dhe ofruesve t\u00eb sh\u00ebrbimeve n\u00eb re, ku ekzekutohen sistemet mysafire t\u00eb mbrojtura, t\u00eb mos mund t\u00eb nd\u00ebrhyjn\u00eb n\u00eb funksionimin e sistemit mysafir. Metoda e propozuar e sulmit BadRAM lejon kap\u00ebrcimin e garancive t\u00eb ofruara p\u00ebrmes nd\u00ebrrimit t\u00eb metadatat SPD (Serial Presence Detect) n\u00eb modulat e memories DDR4 ose DDR5. N\u00ebse sulmi \u00ebsht\u00eb i suksessh\u00ebm, sulmuesi mund t\u00eb p\u00ebrshtas\u00eb t\u00eb dh\u00ebnat e kriptuara n\u00eb memoryn e sistemit mysafir (n\u00eb nivelin e kripto-tekstit, pa mund\u00ebsi p\u00ebr dekriptim) dhe t\u00eb kaloj\u00eb mekanizmin e verifikimit, p\u00ebr shembull, p\u00ebr t\u00eb fshehur futjen e nj\u00eb backdoor n\u00eb makin\u00eb virtuale t\u00eb mbrojtur me teknologjin\u00eb SEV-SNP.        <\/p>\n<p>Sulmi bazohet n\u00eb vendosjen e parametrave t\u00eb rrem\u00eb n\u00eb SPD t\u00eb modulit t\u00eb memories, duke b\u00ebr\u00eb q\u00eb procesori t\u00eb referohet n\u00eb adresa joeksistuese, t\u00eb reflektuar n\u00eb zona ekzistuese t\u00eb memories. Sulmuesi mund t\u00eb rregulloj\u00eb SPD n\u00eb nj\u00eb m\u00ebnyr\u00eb q\u00eb moduli i memories t'i kthej\u00eb procesorit nj\u00eb madh\u00ebsi q\u00eb tejkalon karakteristikat reale t\u00eb modulit. Pas k\u00ebsaj, sulmuesi mund t\u00eb kryej\u00eb mapimin e memories fiktive n\u00eb nj\u00eb zon\u00eb reale n\u00eb DRAM, e cila tashm\u00eb \u00ebsht\u00eb e p\u00ebrdorur n\u00eb m\u00ebnyr\u00eb t\u00eb kriptuar n\u00eb sistemet e mbrojtura t\u00eb mysafir\u00ebve. N\u00eb fund, ndodh nj\u00eb situat\u00eb e till\u00eb q\u00eb adresat e ndryshme tregojn\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn memory fizike (dy zona jan\u00eb reflektuar n\u00eb nj\u00eb zon\u00eb n\u00eb chipin DRAM), dmth, n\u00eb adres\u00ebn e nj\u00eb zone t\u00eb reflektuar fiktive mund t\u00eb akcesohet n\u00eb memory reale q\u00eb tashm\u00eb po p\u00ebrdoret dhe t\u00eb kalohen mekanizmat e mbrojtjes s\u00eb memories n\u00eb CPU.    <center><img decoding=\"async\" alt=\"Sulmi BadRAM, i cili lejon kalimin e mekanizmit t\u00eb akreditimit SEV-SNP n\u00eb CPU-t\u00eb AMD\" src=\"\/wp-content\/uploads\/2024\/12\/4713140e7aea99a59554abc7ddf71360.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>P\u00ebr t\u00eb realizuar sulmin, mjafton t\u00eb p\u00ebrmbledh\u00ebsh nj\u00eb programator t\u00eb thjesht\u00eb me nj\u00eb kosto prej rreth 10 dollar\u00ebsh, i p\u00ebrb\u00ebr\u00eb nga nj\u00eb mikrokontrollues Raspberry Pi Pico, nj\u00eb port p\u00ebr modulat DDR4\/DDR5 dhe nj\u00eb burim energjie. Utilitetet e p\u00ebrdorura p\u00ebr realizimin e sulmit, moduli i b\u00ebrtham\u00ebs dhe prototipat e eksploiteve jan\u00eb vendosur n\u00eb GitHub.      <center><img decoding=\"async\" alt=\"Sulmi BadRAM, i cili lejon kalimin e mekanizmit t\u00eb akreditimit SEV-SNP n\u00eb CPU-t\u00eb AMD\" src=\"\/wp-content\/uploads\/2024\/12\/d688956f05643a91bf1b5881d80af66a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>P\u00ebr \u00e7ipet e disa prodhuesve, ku bllokimi i rip\u00ebrshkrimit t\u00eb SPD nuk \u00ebsht\u00eb realizuar, realizimi i sulmit \u00ebsht\u00eb i mundur n\u00eb m\u00ebnyr\u00eb programore pa akses fizik n\u00eb server. P\u00ebr shembull, parametrat e modulateve t\u00eb memories s\u00eb kompanis\u00eb Corsair me ndri\u00e7im RGB mund t\u00eb ndryshohen n\u00eb m\u00ebnyr\u00eb programore. N\u00eb rastin e nj\u00eb sulmi plotsisht programor, sistemi mund t\u00eb kompromentohet, p\u00ebr shembull, p\u00ebrmes aplikimit t\u00eb nj\u00eb p\u00ebrdit\u00ebsimi t\u00eb d\u00ebmsh\u00ebm t\u00eb BIOS ose p\u00ebrmes diversioneve nga ana e administrat\u00ebve <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/\"   title=\"server\u00ebve\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1748\">server\u00ebve<\/a> n\u00eb sh\u00ebrbimet n\u00eb re.      <center><img decoding=\"async\" alt=\"Sulmi BadRAM, i cili lejon kalimin e mekanizmit t\u00eb akreditimit SEV-SNP n\u00eb CPU-t\u00eb AMD\" src=\"\/wp-content\/uploads\/2024\/12\/3ee9c7a2287c41ac8e0f237106f58e2c.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/p>\n<p>Si nj\u00eb konfirmim t\u00eb veprimit t\u00eb metod\u00ebs, jan\u00eb demonstruar dy sulme. N\u00eb sulmin e par\u00eb \u00ebsht\u00eb treguar mund\u00ebsia e riprodhimit t\u00eb tekst-it t\u00eb enkriptuar \u2014 kur p\u00ebrdoret AMD SEV, t\u00eb dh\u00ebnat n\u00eb memorie ruhen n\u00eb form\u00eb t\u00eb enkriptuar dhe sulmuesi nuk mund t\u00eb p\u00ebrcaktoj\u00eb p\u00ebrmbajtjen, por ka mund\u00ebsin\u00eb t\u00eb lexoj\u00eb t\u00eb dh\u00ebnat e enkriptuara dhe pastaj t'i z\u00ebvend\u00ebsoj\u00eb ato me p\u00ebrmbajtje t\u00eb enkriptuar tjet\u00ebr.     <\/p>\n<p>N\u00eb sulmin e dyt\u00eb \u00ebsht\u00eb demonstruar mund\u00ebsia e kalimit t\u00eb mekanizmit t\u00eb verifikimit SEV-SNP, i cili ofron nj\u00eb konfirmim kriptografik t\u00eb integritetit t\u00eb makin\u00ebs virtuale, e cila \u00ebsht\u00eb e nisur n\u00eb nj\u00eb ambient t\u00eb mbrojtur. Sulmuesi mund t\u00eb kap\u00eb raportin e verifikimit t\u00eb makin\u00ebs virtuale korrekte dhe pastaj ta p\u00ebrdor\u00eb at\u00eb p\u00ebr makin\u00ebn virtuale t\u00eb kompromentuar, p\u00ebr shembull, duke fshehur gjurm\u00ebt e futjes s\u00eb nj\u00eb backdoor.        <\/p>\n<p>Problemi prek\u00e7on generatat 3 dhe 4 t\u00eb procesor\u00ebve AMD seria EPYC, t\u00eb furnizuar n\u00ebn emrat kodues Milan, Milan-X, Genoa, Bergamo, Genoa-X dhe Siena. P\u00ebr t\u00eb bllokuar k\u00ebt\u00eb dobesi, kompania AMD ka l\u00ebshuar nj\u00eb p\u00ebrdit\u00ebsim t\u00eb firmware SEV, n\u00eb t\u00eb cilin \u00ebsht\u00eb implementuar kontrolli ALIAS_CHECK, i cili parandalon manipulimin me memorien q\u00eb \u00ebsht\u00eb tipike p\u00ebr k\u00ebt\u00eb sulm.         <\/p>\n<p>Teknologjit\u00eb e propozuara nga Intel, Scalable SGX dhe TDX, nuk jan\u00eb t\u00eb ndjeshme ndaj sulmit, pasi ato p\u00ebrfshijn\u00eb kontrollet e nevojshme q\u00eb nga fillimi. Teknologjia klasike Intel SGX, e cila n\u00eb vitin 2021 u klasifikua nga Intel si e vjetruar, \u00ebsht\u00eb pjes\u00ebrisht e ndjeshme ndaj sulmit (sikurse n\u00eb sulmin e njohur m\u00eb par\u00eb MemBuster, nj\u00eb sulmues mund t\u00eb analizoj\u00eb qasjet n\u00eb memorien e enkriptuar, pra \u00ebsht\u00eb e mundur vet\u00ebm t\u00eb lexohet teksti i enkriptuar, por jo t\u00eb rishkruhet). Testimi i zgjerimeve CCA (Confidential Compute Architecture) n\u00eb procesor\u00ebt ARM nuk \u00ebsht\u00eb kryer.            <\/p>\n<p>\u00cbsht\u00eb raportuar gjithashtu p\u00ebr nj\u00eb dob\u00ebsi tjet\u00ebr q\u00eb lidhet me AMD SEV-SNP. Dob\u00ebsia \u00ebsht\u00eb identifikuar n\u00eb fork-in e zhvilluar nga AMD t\u00eb emulatorit QEMU, i dizajnuar p\u00ebr t\u00eb funksionuar <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/vps\/\"   title=\"makinave virtuale\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2193\">makinave virtuale<\/a> me SEV-SNP. Problemi lejon administratorin e ambientit host t\u00eb fitoj\u00eb qasje root n\u00eb sistemet nikoqire p\u00ebrmes manipulimeve me tabelat ACPI. Dob\u00ebsia shkaktohet nga fakti se gjat\u00eb ngarkimit t\u00eb sistemit nikoqir, kryhet nj\u00eb kontroll i integritetit t\u00eb b\u00ebrtham\u00ebs Linux, imazhit RAM t\u00eb fillimit dhe parametrave t\u00eb b\u00ebrtham\u00ebs, por tabelat ACPI nuk merren parasysh, p\u00ebrmes t\u00eb cilave hipervizori mund t\u00eb ekzekutoj\u00eb kodin e formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb AML (ACPI Machine Language), i destinuar p\u00ebr t'u ekzekutuar n\u00eb ambientin nikoqir. Kjo problematik\u00eb nuk \u00ebsht\u00eb specifike p\u00ebr QEMU dhe shfaqet n\u00eb \u00e7do hipervizor dhe emulator, pasi b\u00ebrthama Linux i beson t\u00eb dh\u00ebnave ACPI q\u00eb vijn\u00eb nga hipervizori.            <center>  <div class=\"youtube-placeholder\" data-id=\"AUKR0Q5xWW8\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/AUKR0Q5xWW8\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center>  <center>  <div class=\"youtube-placeholder\" data-id=\"zhDACoigQ9M\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/zhDACoigQ9M\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62399\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0) [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120978,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0)\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 BadRAM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 SEV-SNP \u0432 CPU AMD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0)\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-13T19:46:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-13T19:46:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sulmi BadRAM, q\u00eb lejon anashkalimin e mekanizmit t\u00eb v\u00ebrtetimit SEV-SNP n\u00eb CPU-t\u00eb AMD | ProHoster","description":"Nj\u00eb grup studiuesish nga Universiteti i Lovanit, Universiteti i Luebeckut dhe Universiteti i Birminghamit ka zhvilluar nj\u00eb metod\u00eb sulmi BadRAM (CVE-2024-21944), e cila lejon anashkalimin e mekanizmit t\u00eb v\u00ebrtetimit dhe kompromentimin e ambienteve t\u00eb mbrojtura me p\u00ebrdorimin e zgjerimit SEV-SNP n\u00eb procesor\u00ebt AMD. P\u00ebr t\u00eb realizuar sulmin, sulmuesi, p\u00ebrve\u00e7 disa p\u00ebrjashtimesh, duhet t\u00eb ket\u00eb qasje fizike n\u00eb modulat e memorjes, si dhe t\u00eb ket\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb ekzekutuar kod n\u00eb nivelin e rangut zero (ring0).","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 BadRAM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 SEV-SNP \u0432 CPU AMD | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0)","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-13T19:46:02+00:00","article:modified_time":"2024-12-13T19:46:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:38:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:53:19","updated":"2026-02-09 17:38:18"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=120977"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120977\/revisions"}],"predecessor-version":[{"id":159437,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120977\/revisions\/159437"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/120978"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=120977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=120977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=120977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}