{"id":52649,"date":"2019-11-13T00:00:00","date_gmt":"2019-11-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/vyyavlen-novyj-variant-ataki-zombieload-na-protsessory-intel"},"modified":"2020-02-18T14:00:26","modified_gmt":"2020-02-18T11:00:26","slug":"vyyavlen-novyj-variant-ataki-zombieload-na-protsessory-intel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vyyavlen-novyj-variant-ataki-zombieload-na-protsessory-intel","title":{"rendered":"\u00cbsht\u0451 zbuluar nj\u00eb variant i ri sulmi Zombieload ndaj procesor\u00ebve Intel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga Universiteti Teknik i Gracit (Austria) zbuluan<\/a><\/noindex> informacione mbi nj\u00eb metod\u00eb t\u00eb re sulmi p\u00ebrmes kanaleve t\u00eb jashtme ZombieLoad 2.0<\/a><\/noindex> (CVE-2019-11135<\/a><\/noindex>), e cila lejon nxjerrjen e informacionit t\u00eb ndjesh\u00ebm nga procese t\u00eb tjera, sistemi operativ, makina virtuale dhe enklava t\u00eb mbrojtura (TEE, Ambient Ekzekutiv i Besuar). Problemi preku vet\u00ebm procesor\u00ebt Intel. Komponent\u00ebt p\u00ebr bllokimin e problemit ofrohen<\/a><\/noindex> n\u00eb azhurnimin e mikro-kodit t\u00eb djesh\u00ebm<\/a><\/noindex>. <\/p>\n

Problemi i takon klas\u00ebs MDS (Mostra e T\u00eb Dh\u00ebnave Mikroarkitekturale) dhe \u00ebsht\u00eb nj\u00eb variant i modifikuar i shpallur<\/a><\/noindex> n\u00eb maj t\u00eb sulmit ZombieLoad. ZombieLoad 2.0, si dhe sulmet e tjera t\u00eb klas\u00ebs MDS, mb\u00ebshteten n\u00eb p\u00ebrdorimin e metodave t\u00eb analiz\u00ebs p\u00ebrmes kanaleve t\u00eb jashtme ndaj t\u00eb dh\u00ebnave n\u00eb strukturat mikroarkitekturale (p.sh., n\u00eb bufferat e mbushjes (Line Fill Buffer) dhe t\u00eb ruajtjes (Store Buffer), n\u00eb t\u00eb cilat ruhen p\u00ebrkoh\u00ebsisht t\u00eb dh\u00ebnat e p\u00ebrdorura gjat\u00eb ekzekutimit t\u00eb operacioneve Load dhe Store).<\/p>\n

Varianti i ri i sulmit Zombieload bazohet<\/a><\/noindex> n\u00eb rrjedhjen q\u00eb ndodh gjat\u00eb funksionimit t\u00eb mekanizmit t\u00eb nd\u00ebrprerjes asinkrone t\u00eb operacioneve (TAA, Abortin Asinkron t\u00eb TSX), i zbatuar n\u00eb zgjerimin TSX (Zgjerimet e Sinjalizimit Transaksional), q\u00eb ofron mjete p\u00ebr pun\u00eb me kujtes\u00ebn transaksionale, duke rritur performanc\u00ebn e aplikacioneve me shum\u00eb tela p\u00ebrmes p\u00ebrjashtimit dinamik t\u00eb operacioneve t\u00eb panevojshme t\u00eb sinjalizimit (mb\u00ebshteten transaksionet atomike, t\u00eb cilat mund t\u00eb pranohen ose t\u00eb nd\u00ebrpriten). N\u00eb rastin e nd\u00ebrprerjes, operacionet e realizuara me rajonin transaksional t\u00eb kujtes\u00ebs rikthehen.<\/p>\n

Nd\u00ebrprerja e transaksionit ndodh asinkronisht, dhe gjat\u00eb k\u00ebsaj kohe, tela t\u00eb tjer\u00eb mund t\u00eb aksesojn\u00eb cache-n\u00eb, e cila gjithashtu p\u00ebrdoret n\u00eb rajonin transaksional t\u00eb kujtes\u00ebs q\u00eb hidhjet. N\u00eb momentin e fillimit deri n\u00eb p\u00ebrfundimin real t\u00eb nd\u00ebrprerjes asinkrone t\u00eb transaksionit, nuk p\u00ebrjashtohet shfaqja e situatave ku procesori, gjat\u00eb ekzekutimit spekullativ t\u00eb operacionit, mund t\u00eb lexoj\u00eb t\u00eb dh\u00ebna nga bufferat e brendsh\u00ebm mikroarkitekturor\u00eb dhe t'i kaloj\u00eb ato n\u00eb operacionin e ekzekutimit spekullativ. Pastaj do t\u00eb zbulohet konflikti, dhe operacioni spekullativ do t\u00eb hidhet, por t\u00eb dh\u00ebnat do t\u00eb mbeten n\u00eb cache dhe mund t\u00eb nxirren duke p\u00ebrdorur metodat e rikthimit t\u00eb cache-it p\u00ebrmes kanaleve t\u00eb jashtme. <\/p>\n

Sulmi p\u00ebrfshin hapjen e transaksioneve TSX dhe krijimin e kushteve p\u00ebr nd\u00ebrprerjen e tyre asinkrone, gjat\u00eb s\u00eb cil\u00ebs krijohen kushte p\u00ebr rrjedhjen e p\u00ebrmbajtjes nga buferat e brendsh\u00ebm, t\u00eb mbushur spekulativisht me t\u00eb dh\u00ebna nga operacionet e leximit t\u00eb memories q\u00eb ekzekutohen n\u00eb t\u00eb nj\u00ebjtin b\u00ebrtham\u00eb CPU. Rrjedhja \u00ebsht\u00eb e kufizuar n\u00eb b\u00ebrtham\u00ebn fizike aktuale t\u00eb CPU (ku kodi i sulmuesit ekzekutohet), por p\u00ebr shkak se buferat mikroarkitekturore ndahen nga procese t\u00eb ndryshme n\u00eb modalitetin Hyper-Threading, \u00ebsht\u00eb e mundur t\u00eb ndodhin rrjedhje t\u00eb operacioneve me memorien q\u00eb ekzekutohen n\u00eb procese t\u00eb tjera CPU. <\/p>\n

Sulmit \u00ebsht\u00eb i ekspozuar<\/a><\/noindex> modelet e gjashta, t\u00eb n\u00ebnt\u00eb dhe t\u00eb dhjeta t\u00eb procesor\u00ebve Intel Core, si dhe Intel Pentium Gold, Intel Celeron 5000, Intel Xeon E, Intel Xeon W dhe brezi i dyt\u00eb i Intel Xeon Scalable. P\u00ebrfshir\u00eb n\u00eb sulm jan\u00eb edhe procesor\u00ebt e rinj Intel t\u00eb bazuar n\u00eb mikroarkitektur\u00ebn Cascade Lake, e cila fillimisht nuk ishte e prekshme nga sulmet RIDL dhe Fallout. P\u00ebrve\u00e7 Zombieload 2.0, studiuesit gjithashtu zbuluan mund\u00ebsin\u00eb e anashkalimit t\u00eb metodave t\u00eb m\u00ebparshme t\u00eb mbrojtjes nga sulmet MDS, t\u00eb bazuara n\u00eb p\u00ebrdorimin e instrukcionit VERW p\u00ebr t\u00eb pastruar p\u00ebrmbajtjen e buferave mikroarkitekturore gjat\u00eb rikthimit nga b\u00ebrthama n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit ose gjat\u00eb kalimit t\u00eb kontrollit n\u00eb sistemin mik.<\/p>\n

N\u00eb raportin e Intel, thuhet se n\u00eb sistemet me ngarkes\u00eb t\u00eb p\u00ebrzier mund\u00ebsia e kryerjes s\u00eb sulmit \u00ebsht\u00eb e v\u00ebshtir\u00eb, pasi rrjedhja nga strukturat mikroarkitekturore p\u00ebrfshin t\u00eb gjitha aktivitetet n\u00eb sistem dhe sulmuesi nuk mund t\u00eb ndikoj\u00eb n\u00eb burimin e t\u00eb dh\u00ebnave t\u00eb nxjerra, dmth. mund vet\u00ebm t\u00eb grumbulloj\u00eb informatat q\u00eb shfaqen si rezultat i rrjedhjes dhe t\u00eb p\u00ebrpiqet t\u00eb zbuloj\u00eb informacionin e dobish\u00ebm midis k\u00ebtyre t\u00eb dh\u00ebnave, pa mund\u00ebsin\u00eb p\u00ebr t\u00eb kapur me q\u00ebllim t\u00eb dh\u00ebnat e lidhura me adresa t\u00eb caktuara t\u00eb memories. Megjithat\u00eb, studiuesit publikuan nj\u00eb prototip eksploiti<\/a><\/noindex>, duke funksionuar n\u00eb Linux dhe Windows, si dhe u demonstruar mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb sulmit p\u00ebr t\u00eb p\u00ebrcaktuar hash-in e fjal\u00ebkalimit t\u00eb p\u00ebrdoruesit root.
\nE mundshme<\/a><\/noindex> kryerjen e sulmit nga sistemi mik p\u00ebr t\u00eb grumbulluar t\u00eb dh\u00ebna q\u00eb shfaqen n\u00eb operacionet e sistemeve t\u00eb tjera mik, mjediseve host, hipervizor\u00ebve dhe enklavave Intel SGX.<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Korrigjimet p\u00ebr bllokimin e dob\u00ebsive jan\u00eb p\u00ebrfshir\u00eb<\/a><\/noindex> n\u00eb baz\u00ebn e kodit t\u00eb b\u00ebrtham\u00ebs Linux dhe jan\u00eb p\u00ebrfshir\u00eb n\u00eb daljet \t5.3.11, 4.19.84, 4.14.154, 4.9.201 dhe 4.4.201<\/a><\/noindex>. Aktualizimet me b\u00ebrtham\u00ebn dhe mikrokodin gjithashtu jan\u00eb l\u00ebshuar tashm\u00eb p\u00ebr shp\u00ebrndarjet kryesore (Debian<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, RHEL<\/a><\/noindex>, Fedora<\/a><\/noindex>, FreeBSD<\/a><\/noindex>). Problemi u zbulua n\u00eb prill dhe p\u00ebrmir\u00ebsimi u koordinua nga Intel me zhvilluesit e sistemeve operative.<\/p>\n

Metoda m\u00eb e thjesht\u00eb p\u00ebr t\u00eb bllokuar Zombieload 2.0 \u00ebsht\u00eb \u00e7aktivizimi i mb\u00ebshtetjes TSX n\u00eb CPU. Rregullimi i propozuar p\u00ebr kernelin Linux p\u00ebrmban disa variante t\u00eb mbrojtjes. Varianti i par\u00eb ofron parametrin \"tsx=on\/off\/auto\", i cili lejon menaxhimin e aktivizimit t\u00eb zgjerimit TSX n\u00eb CPU (vlera auto e \u00e7aktivizon TSX vet\u00ebm p\u00ebr CPU-t\u00eb e cenueshme). Varianti i dyt\u00eb i mbrojtjes aktivizohet me parametrin \"tsx_async_abort=off\/full\/full,nosmt\" dhe bazohet n\u00eb pastrimin e tampon\u00ebve mikroarkitekturor\u00eb gjat\u00eb kalimit t\u00eb kontekstit (flagi nosmt gjithashtu \u00e7aktivizon SMT\/Hyper-Threads). P\u00ebr t\u00eb kontrolluar n\u00ebse sistemi \u00ebsht\u00eb i cenuesh\u00ebm nga vulnerabiliteti, n\u00eb sysfs parashihet nj\u00eb parameter \"\\\/sys\\\/devices\\\/system\\\/cpu\\\/vulnerabilities\\\/tsx_async_abort\".<\/p>\n

P\u00ebr m\u00eb tep\u00ebr, n\u00eb aktualizimin<\/a><\/noindex> mikrokodit i eliminuar<\/a><\/noindex> nj\u00eb tjet\u00ebr vulnerabiliteti<\/a><\/noindex> (CVE-2018-12207<\/a><\/noindex>) n\u00eb procesor\u00ebt Intel, e cila gjithashtu bllokohet n\u00eb b\u00ebrtham\u00ebn e re aktualizimin<\/a><\/noindex> Linux. Vulnerabiliteti lejon<\/a><\/noindex> t\u00eb lejoj\u00eb nj\u00eb sulmues jo t\u00eb privilegjuar t\u00eb inicoj\u00eb nj\u00eb refuzim sh\u00ebrbimi, duke \u00e7uar n\u00eb ngrirjen e sistemit n\u00eb gjendjen \"Machine Check Error.\"
\n Sulmi gjithashtu mund t\u00eb kryhet<\/a><\/noindex> nga sistemi mik.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f) \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u043c\u0435\u0442\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c ZombieLoad 2.0 (CVE-2019-11135), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 (TEE, Trusted Execution Environment). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel. \u041a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432\u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 MDS […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52649","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zbulimi i nj\u00eb varianti t\u00eb ri t\u00eb sulmit Zombieload ndaj procesor\u00ebve Intel | ProHoster","description":"K\u00ebrkuesit nga Universiteti Teknik i Gracit (Austria)","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vyyavlen-novyj-variant-ataki-zombieload-na-protsessory-intel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u044f\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 Zombieload \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f)","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vyyavlen-novyj-variant-ataki-zombieload-na-protsessory-intel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52649","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:20:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:39:26","updated":"2026-01-24 04:20:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=52649"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52649\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=52649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=52649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=52649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}