{"id":84664,"date":"2020-06-10T01:42:18","date_gmt":"2020-06-09T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami"},"modified":"2020-06-10T01:42:18","modified_gmt":"2020-06-09T23:42:18","slug":"crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","title":{"rendered":"CROSSTalk \u2014 nj\u00eb vulnerabilitet n\u00eb CPU-n\u00eb Intel q\u00eb \u00e7on n\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave midis b\u00ebrthamave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup hulumtuesish nga Universitete i Lir\u00eb t\u00eb Amsterdamit zbuloi nj\u00eb t\u00eb re vulnerabiliteti<\/a><\/noindex> (CVE-2020-0543) n\u00eb strukturat mikroarkitekturore t\u00eb procesor\u00ebve Intel, e cila \u00ebsht\u00eb e r\u00ebnd\u00ebsishme sepse lejon rikuperimin e rezultateve t\u00eb ekzekutimit t\u00eb disa instrukcioneve, t\u00eb cilat jan\u00eb realizuar n\u00eb nj\u00eb b\u00ebrtham\u00eb tjet\u00ebr CPU. Kjo \u00ebsht\u00eb e para dob\u00ebsi e mekanizmit t\u00eb ekzekutimit speculativ t\u00eb instrukcioneve q\u00eb lejon rrjedhjen e t\u00eb dh\u00ebnave midis b\u00ebrthamave t\u00eb ndryshme CPU (m\u00eb par\u00eb rrjedhjet ishin t\u00eb kufizuara n\u00eb p\u00ebrvoja t\u00eb ndryshme t\u00eb nj\u00eb b\u00ebrthame). Hulumtuesit i dhan\u00eb k\u00ebtij problemi emrin CROSSTalk, por n\u00eb dokumentet e Intel<\/a><\/noindex> dob\u00ebsia p\u00ebrmendet si SRBDS (Special Register Buffer Data Sampling). <\/p>\n

Dob\u00ebsia i p\u00ebrket grupit t\u00eb problemeve MDS (Microarchitectural Data Sampling) t\u00eb prezantuar nj\u00eb vit m\u00eb par\u00eb dhe bazohet n\u00eb p\u00ebrdorimin e metodave t\u00eb analiz\u00ebs p\u00ebrmes kanaleve t\u00eb jashtme n\u00eb t\u00eb dh\u00ebnat n\u00eb strukturat mikroarkitekturore.<\/a><\/noindex> CROSSTalk \u00ebsht\u00eb af\u00ebr dob\u00ebsis\u00eb Principi i funksionimit<\/a><\/noindex> RIDL , por ndan burimin e rrjedhjes.<\/a><\/noindex>Dob\u00ebsia e re manipuluar rrjedhjen nga nj\u00eb tampon nd\u00ebrmjet\u00ebs q\u00eb nuk \u00ebsht\u00eb dokumentuar m\u00eb par\u00eb, i cili p\u00ebrdoret nga t\u00eb gjitha b\u00ebrthemat CPU.
\nThelbi i problemit <\/p>\n

\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

\u00ebsht\u00eb se disa instrukcione t\u00eb mikroprocesorit, p\u00ebrfshir\u00eb RDRAND, RDSEED dhe SGX EGETKEY, implementohen duke p\u00ebrdorur nj\u00eb operacion t\u00eb brendsh\u00ebm mikroarkitekturore SRR (Special Register Reads). N\u00eb procesor\u00ebt e ndjesh\u00ebm ndaj dob\u00ebsis\u00eb, t\u00eb dh\u00ebnat q\u00eb kthehen p\u00ebr SRR bllokohen n\u00eb nj\u00eb tampon nd\u00ebrmjet\u00ebs, t\u00eb p\u00ebrbashk\u00ebt p\u00ebr t\u00eb gjitha b\u00ebrtham\u00ebt CPU, dhe m\u00eb pas d\u00ebrgohen n\u00eb nj\u00eb tampon ndihm\u00ebs, i lidhur me nj\u00eb b\u00ebrtham\u00eb specifike fizike CPU n\u00eb t\u00eb cil\u00ebn \u00ebsht\u00eb iniciuar operacioni i leximit. M\u00eb pas, nga buffer ndihm\u00ebs, vlera kopjohet n\u00eb regjistrat, t\u00eb duksh\u00ebm p\u00ebr aplikacionet.<\/a><\/noindex> Madh\u00ebsia e tamponit t\u00eb p\u00ebrbashk\u00ebt p\u00ebrputhet me linj\u00ebn e caches, e cila zakonisht \u00ebsht\u00eb m\u00eb e madhe se madh\u00ebsia e t\u00eb dh\u00ebnave t\u00eb lexuara dhe operacione t\u00eb ndryshme leximore prekin offset t\u00eb ndryshme n\u00eb tampon. Duke qen\u00eb se tamponi i p\u00ebrbashk\u00ebt kopjohet t\u00ebr\u00ebsisht n\u00eb tamponin ndihm\u00ebs, at\u00ebher\u00eb nuk \u00ebsht\u00eb vet\u00ebm porcija e nevojshme p\u00ebr operacionin aktual q\u00eb \u00ebsht\u00eb e l\u00ebvizur, por edhe t\u00eb dh\u00ebnat q\u00eb mbeten nga ekzekutimi i operacioneve t\u00eb tjera, p\u00ebrfshir\u00eb ato q\u00eb jan\u00eb realizuar n\u00eb b\u00ebrthama t\u00eb tjera CPU. <\/p>\n

N\u00eb rastin e nj\u00eb sulmi t\u00eb suksessh\u00ebm, nj\u00eb p\u00ebrdorues lokal i autentikuar n\u00eb sistem mund t\u00eb p\u00ebrcaktoj\u00eb rezultatin e ekzekutimit t\u00eb instrukcioneve RDRAND, RDSEED dhe EGETKEY n\u00eb nj\u00eb proces t\u00eb huaj apo brenda nj\u00eb enclave Intel SGX, pavar\u00ebsisht nga b\u00ebrthama CPU, mbi t\u00eb cil\u00ebn ekzekutohet kodi.
\n

\"CROSSTalk<\/a><\/noindex><\/center>
\n
\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

Hulumtuesit q\u00eb zbuluan problemin
\nHulumtuesit q\u00eb identifikuan problemin publikuan<\/a><\/noindex> prototip i nj\u00eb exploiti, q\u00eb demonstruar mund\u00ebsin\u00eb e rrjedhjes s\u00eb informacionit mbi vlerat e rast\u00ebsishme t\u00eb fituara p\u00ebrmes instrukcioneve RDRAND dhe RDSEED, p\u00ebr t\u00eb restauruar \u00e7el\u00ebsin e mbyllur ECDSA, i p\u00ebrpunuar n\u00eb enklav\u00ebn Intel SGX, pas realizimit n\u00eb sistem vet\u00ebm nj\u00eb operacioni me n\u00ebnshkrim digjital.<\/p>\n


\n
\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Problemi i ndjesh\u00ebm<\/a><\/noindex> nj\u00eb gam\u00eb e gjer\u00eb procesor\u00ebsh desktop, mobil dhe server nga Intel, p\u00ebrfshir\u00eb Core i3, i5, i7, i9, m3, Celeron (serit\u00eb J, G dhe N), Atom (serit\u00eb C, E dhe X), Xeon (familjet E3, E5, E7, W dhe D), Xeon Scalable etj. Vlen t\u00eb p\u00ebrmendet se kompania Intel u njoftua p\u00ebr ndjeshm\u00ebrin\u00eb n\u00eb Shtator 2018, dhe n\u00eb Korrik 2019 u dha nj\u00eb prototip i exploiti, q\u00eb demonstron rrjedhjen e t\u00eb dh\u00ebnave midis b\u00ebrthamave CPU, por zhvillimi i nj\u00eb riparimi u vonua p\u00ebr shkak t\u00eb kompleksitetit t\u00eb zbatimit t\u00eb tij. N\u00eb azhurnimin e mikrocode-s t\u00eb propozuar sot, problemi \u00ebsht\u00eb bllokuar duke ndryshuar sjelljen e instrukcioneve RDRAND, RDSEED dhe EGETKEY p\u00ebr t\u00eb shkruar t\u00eb dh\u00ebnat n\u00eb m\u00ebnyr\u00eb t\u00eb tepruar n\u00eb nj\u00eb bufer t\u00eb p\u00ebrbashk\u00ebt p\u00ebr t\u00eb parandaluar q\u00eb informacione t\u00eb mbetjeve t\u00eb mbeten aty. P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb aplikuar ndalimi i aksesit n\u00eb bufer derisa operacionet e leximit dhe shkrimit t\u00eb p\u00ebrfundojn\u00eb. <\/p>\n

Nj\u00eb efekt ndihm\u00ebs i k\u00ebtij mbrojtjeje \u00ebsht\u00eb rritja e vonesave gjat\u00eb realizimit t\u00eb RDRAND, RDSEED dhe EGETKEY, dhe reduktimi i kapacitetit t\u00eb kaluar gjat\u00eb p\u00ebrpjekjeve p\u00ebr t\u00eb realizuar k\u00ebto instrukcione n\u00eb procesor\u00eb logjik\u00eb t\u00eb ndrysh\u00ebm. Realizimi i RDRAND, RDSEED dhe EGETKEY gjithashtu ndalon aksesin n\u00eb memorien nga procesor\u00ebt e tjer\u00eb logjik\u00eb. K\u00ebto karakteristika mund t\u00eb ndikojn\u00eb negativisht n\u00eb performanc\u00ebn e disa aplikacioneve server, prandaj n\u00eb firmware \u00ebsht\u00eb parashikuar nj\u00eb mekaniz\u00ebm (RNGDS_MITG_DIS) p\u00ebr t\u00eb \u00e7aktivizuar mbrojtjen e instrukcioneve RDRAND dhe RDSEED, q\u00eb kryhen jasht\u00eb enklav\u00ebs Intel SGX.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u044f\u0434\u0440\u0435 CPU. \u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u044f\u0434\u0440\u0430\u043c\u0438 CPU (\u0440\u0430\u043d\u0435\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438\u043c\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47CROSSTalk - nj\u00eb ndjeshm\u00ebri n\u00eb CPU Intel, e cila \u00e7on n\u00eb rrjedhjen e t\u00eb dh\u00ebnave midis b\u00ebrthamave | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb i Amsterdamit identifikuan nj\u00eb ndjeshm\u00ebri t\u00eb re (CVE-2020-0543) n\u00eb mikroarkitektur\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47CROSSTalk \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU Intel, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u044f\u0434\u0440\u0430\u043c\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:18+00:00","article:modified_time":"2020-06-09T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84664","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:00:17","updated":"2022-09-29 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84664"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84665"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}