{"id":182817,"date":"2026-08-10T19:49:35","date_gmt":"2026-08-10T17:49:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2"},"modified":"2026-08-10T19:49:35","modified_gmt":"2026-08-10T17:49:35","slug":"tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","title":{"rendered":"TONTOU \u2014 nj\u00eb sulm ndaj CPU-ve Intel dhe AMD, i cili lejon kalimin e mbrojtjes ndaj vulnerabiliteteve Spectre v2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga Instituti i Teknologjis\u00eb t\u00eb Masachusets zbuluan nj\u00eb teknik\u00eb sulmi TONTOU (Koha e Neutralizimit deri n\u00eb Koha e P\u00ebrdorimit), e cila ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb mikroarkitekturore t\u00eb klas\u00ebs Spectre v2. Dob\u00ebsia ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrmbajtjen e memories s\u00eb kernelit gjat\u00eb ekzekutimit t\u00eb eksploitit n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit. Kodi p\u00ebr bllokimin e shfryt\u00ebzimit t\u00eb k\u00ebsaj dob\u00ebsie u pranua n\u00eb b\u00ebrtham\u00ebn Linux m\u00eb 5 gusht dhe u p\u00ebrfshi n\u00eb versionet 7.1.7, 6.18.43, 6.12.102, 6.6.149, 6.1.181, 5.15.214 dhe 5.10.263. <\/p>\n

K\u00ebrkuesit demonstruan mund\u00ebsin\u00eb e kryerjes s\u00eb nj\u00eb sulmi nga nj\u00eb p\u00ebrdorues lokal pa privilegje p\u00ebr t\u00eb p\u00ebrcaktuar hash-in e fjal\u00ebkalimit t\u00eb p\u00ebrdoruesit root, t\u00eb ruajtur n\u00eb skedarin \/etc\/shadow dhe t\u00eb ngarkuar n\u00eb memorien gjat\u00eb autentifikimit n\u00eb sistem. K\u00ebrkuesit arrit\u00ebn t\u00eb realizonin nj\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave nga memoria e kernelit me nj\u00eb performanc\u00eb prej 5.47 bytes n\u00eb sekond\u00eb dhe sakt\u00ebsi prej 91.97%. Nga 10 ekzekutime testuese t\u00eb eksploitit, t\u00eb cilat n\u00eb mesatare zgjat\u00ebn 18 minuta, n\u00eb gjysm\u00ebn e rasteve arrit\u00ebn t\u00eb p\u00ebrcaktojn\u00eb me sukses pranin\u00eb n\u00eb memorie t\u00eb skedarit \/etc\/shadow dhe t\u00eb nxjerrin p\u00ebrmbajtjen e tij. <\/p>\n

Eksploitimi u demonstruar n\u00eb sisteme me procesor\u00eb AMD dhe mund t\u00eb p\u00ebrdoret me CPU AMD t\u00eb familjeve Zen 1-4. N\u00eb sistemet Intel, sulmi gjithashtu mund t\u00eb realizohet, por shfryt\u00ebzimi \u00ebsht\u00eb m\u00eb kompleks. P\u00ebr t\u00eb mbrojtur nga teprica e adresave t\u00eb kthimit dhe bllokimin e dob\u00ebsis\u00eb SRSO (Speculative Return Stack Overflow) n\u00eb procesor\u00ebt AMD, aplikohet mekanizmi i mbrojtjes Safe-RET, i cili pastron buffer-in e parashikimeve t\u00eb kalimeve pas secil\u00ebs p\u00ebrdorim dhe ngushton dritaren e realizimit t\u00eb sulmit n\u00eb 2 instruksione, q\u00eb ekzekutohen disa dhjet\u00ebra nanosekonda. <\/p>\n

P\u00ebr t\u00eb anashkaluar k\u00ebt\u00eb mbrojtje dhe p\u00ebr t\u00eb zgjeruar dritaren e realizimit t\u00eb sulmit, \u00ebsht\u00eb p\u00ebrdorur teknika e ngadal\u00ebsimit t\u00eb CPU-s\u00eb, e cila lejon t\u00eb ekzekutohet vendosja e nd\u00ebrprerjes n\u00eb momentin e duhur p\u00ebr t\u00eb ridrejtuar rrjedh\u00ebn e ekzekutimit n\u00eb b\u00ebrtham\u00eb dhe p\u00ebr t\u00eb p\u00ebrdorur trajtuesin e nd\u00ebrprerjes p\u00ebr t\u00eb deformuar sh\u00ebnimin n\u00eb buferin e parashikimit t\u00eb kalimeve. P\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsin\u00eb SRSO, sulmuesi mund t\u00eb krijoj\u00eb kushte n\u00eb t\u00eb cilat blloku i parashikimit t\u00eb kalimeve do t\u00eb ekzekutoj\u00eb spekulativisht nj\u00eb num\u00ebr t\u00eb madh t\u00eb thirrjeve CALL me parashikime t\u00eb pasakta, t\u00eb mjaftueshme p\u00ebr t\u00eb mbushur stekun e adresave t\u00eb rikthimit dhe p\u00ebr t\u00eb ri-shkruar piketat e rikthimit t\u00eb parashikuara sakt\u00eb, t\u00eb vendosura n\u00eb fillim t\u00eb stek\u00ebs. Si rezultat, element\u00ebt fillestar\u00eb t\u00eb stek\u00ebs mund t\u00eb ri-shkruhen n\u00eb vlerat e zgjedhura nga sulmuesi, t\u00eb cilat m\u00eb von\u00eb do t\u00eb \u00e7ojn\u00eb n\u00eb p\u00ebrdorimin e k\u00ebtyre vlerave t\u00eb z\u00ebvend\u00ebsuara gjat\u00eb ekzekutimit spekulativ t\u00eb instrukcionit RET n\u00eb kontekstin e nj\u00eb procesi tjet\u00ebr. <\/p>\n

Procesori do t\u00eb p\u00ebrcaktoj\u00eb se parashikimi i deg\u00ebs nuk ka pasur sukses dhe do ta rikthej\u00eb operacionin n\u00eb gjendjen e tij origjinale, por t\u00eb dh\u00ebnat e p\u00ebrpunuara n\u00eb procesin e ekzekutimit spekulativ do t\u00eb grumbullohen n\u00eb cache dhe n\u00eb buferat mikroarkitekturor\u00eb. N\u00ebse blloku i ekzekutuar gabim b\u00ebn nj\u00eb akses n\u00eb memorie, ekzekutimi i tij spekulativ do t\u00eb \u00e7oj\u00eb n\u00eb grumbullimin n\u00eb cache-n e zakonsh\u00ebm dhe n\u00eb t\u00eb dh\u00ebnat e lexuara nga memorie. Nj\u00eb nga metodat p\u00ebr t\u00eb nxjerr\u00eb informacion nga cache mund t\u00eb jet\u00eb p\u00ebrdorimi i ndonj\u00eb m\u00ebnyre p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrmbajtjen e cache-s\u00eb n\u00eb baz\u00eb t\u00eb analiz\u00ebs s\u00eb ndryshimit t\u00eb koh\u00ebs s\u00eb aksesit n\u00eb t\u00eb dh\u00ebnat e ruajtura dhe ato q\u00eb nuk jan\u00eb ruajtur.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 TONTOU (Time-of-Neutralization to Time-of-Use), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre v2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041a\u043e\u0434 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u044f\u0442 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux 5 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 7.1.7, 6.18.43, 6.12.102, 6.6.149, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182817","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47TONTOU \u2014 nj\u00eb sulm ndaj CPU-ve Intel dhe AMD, q\u00eb lejon anashkalimin e mbrojtjes nga dob\u00ebsit\u00eb Spectre v2 | ProHoster","description":"K\u00ebrkuesit nga Instituti Teknologjik i Massachusetts zbuluan nj\u00eb teknik\u00eb sulmi TONTOU (Time-of-Neutralization to Time-of-Use), q\u00eb ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr shfryt\u00ebzimin e dob\u00ebsive mikroarkitekturale t\u00eb klas\u00ebs Spectre.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47TONTOU \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 CPU Intel \u0438 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre v2 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 TONTOU (Time-of-Neutralization to Time-of-Use), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre.","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/tontou-ataka-na-cpu-intel-i-amd-pozvolyayushhaya-obojti-zashhitu-ot-uyazvimostej-spectre-v2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-10T17:49:35+00:00","article:modified_time":"2026-08-10T17:49:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182817","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=182817"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182817\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=182817"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=182817"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=182817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}