{"id":84664,"date":"2020-06-10T01:42:18","date_gmt":"2020-06-09T23:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami"},"modified":"2020-06-10T01:42:18","modified_gmt":"2020-06-09T23:42:18","slug":"crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","title":{"rendered":"CROSSTalk \u2014 en s\u00e5rbarhet i Intel CPU som leder till datal\u00e4ckor mellan k\u00e4rnor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En grupp forskare fr\u00e5n Vrije Universiteit Amsterdam har identifierat en ny s\u00e5rbarhet<\/a><\/noindex> (CVE-2020-0543) i mikroarkitekturstrukturer hos Intel-processorer, som \u00e4r anm\u00e4rkningsv\u00e4rd eftersom den m\u00f6jligg\u00f6r \u00e5terst\u00e4llande av resultaten fr\u00e5n vissa instruktioner som utf\u00f6rs p\u00e5 en annan CPU-k\u00e4rna. Detta \u00e4r den f\u00f6rsta s\u00e5rbarheten i mekanismen f\u00f6r spekulativ exekvering av instruktioner som medger datal\u00e4ckage mellan separata CPU-k\u00e4rnor (tidigare var l\u00e4ckage begr\u00e4nsade till olika tr\u00e5dar inom en k\u00e4rna). Forskarna gav problemet namnet CROSSTalk, men i Intel-dokumenten<\/a><\/noindex> omn\u00e4mns s\u00e5rbarheten som SRBDS (Special Register Buffer Data Sampling). <\/p>\n

S\u00e5rbarheten h\u00f6r till den klass av problem som presenterades<\/a><\/noindex> f\u00f6r ett \u00e5r sedan, MDS (Microarchitectural Data Sampling), och bygger p\u00e5 anv\u00e4ndningen av metoder f\u00f6r analys via sidokanaler f\u00f6r att hantera data i mikroarkitekturstrukturer. Funktionsprincip<\/a><\/noindex> CROSSTalk \u00e4r liknande s\u00e5rbarheten RIDL<\/a><\/noindex>, men skiljer sig i l\u00e4ckagek\u00e4llan.
\nDen nya s\u00e5rbarheten manipulerar ett l\u00e4ckage fr\u00e5n en tidigare odokumenterad buffert som anv\u00e4nds gemensamt av alla CPU-k\u00e4rnor. <\/p>\n

\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

Problemets k\u00e4rna<\/a><\/noindex> I att vissa mikroprocessorinstruktioner, inklusive RDRAND, RDSEED och SGX EGETKEY, implementeras med hj\u00e4lp av en intern mikroarkitektonisk operation, SRR (Special Register Reads). P\u00e5 s\u00e5rbara processorer lagras de data som returneras f\u00f6r SRR i en gemensam buffert f\u00f6r alla CPU-k\u00e4rnor, som senare \u00f6verf\u00f6rs till en fyllningsbuffert kopplad till en specifik fysisk CPU-k\u00e4rna d\u00e4r l\u00e4sningsoperationen initierades. Sedan kopieras v\u00e4rdet fr\u00e5n fyllningsbufferten till register som \u00e4r synliga f\u00f6r applikationerna. <\/p>\n

Storleken p\u00e5 den gemensamma bufferten motsvarar cache-linjen, vilket vanligtvis \u00e4r st\u00f6rre \u00e4n storleken p\u00e5 de l\u00e4sta uppgifterna, och olika l\u00e4sningsoperationer p\u00e5verkar olika f\u00f6rskjutningar i bufferten. Eftersom den gemensamma bufferten kopieras hela v\u00e4gen till fyllningsbufferten flyttas inte bara den n\u00f6dv\u00e4ndiga datan f\u00f6r den aktuella operationen, utan \u00e4ven data som \u00e4r kvar fr\u00e5n utf\u00f6randet av andra operationer, inklusive de som utf\u00f6rts p\u00e5 andra CPU-k\u00e4rnor.
\n

\"CROSSTalk<\/a><\/noindex><\/center>
\n
\"CROSSTalk<\/a><\/noindex><\/center><\/p>\n

Vid en framg\u00e5ngsrik attack kan en autentiserad lokal anv\u00e4ndare i systemet avg\u00f6ra resultaten av RDRAND, RDSEED och EGETKEY-instruktioner i en annan process eller inom ett Intel SGX-enklav, oavsett vilken CPU-k\u00e4rna koden k\u00f6rs p\u00e5.
\nForskarna som uppt\u00e4ckte problemet har publicerat<\/a><\/noindex> En prototyp av en exploiter som demonstrerar m\u00f6jligheten av l\u00e4ckage av information om slumpm\u00e4ssiga v\u00e4rden som erh\u00e5llits genom instruktionerna RDRAND och RDSEED, f\u00f6r att \u00e5terst\u00e4lla ECDSA-hemliga nycklar som behandlas i Intel SGX-enklaven, efter att ha utf\u00f6rt endast en operation med digital signatur i systemet.<\/p>\n


\n
\r\n \"Spela\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Problemet utsatt<\/a><\/noindex> ett brett utbud av Intel-processorserier f\u00f6r station\u00e4ra datorer, mobila enheter och servrar, inklusive Core i3, i5, i7, i9, m3, Celeron (serierna J, G och N), Atom (serierna C, E och X), Xeon (familjerna E3, E5, E7, W och D), Xeon Scalable osv. Det \u00e4r v\u00e4rt att notera att Intel informerades om s\u00e5rbarheten i september 2018, och en prototyp av exploiten som demonstrerade datal\u00e4ckage mellan CPU-k\u00e4rnor presenterades i juli 2019, men utvecklingen av en l\u00f6sning f\u00f6rdr\u00f6jdes p\u00e5 grund av komplexiteten i implementeringen. I den f\u00f6reslagna mikroprogramsuppdateringen blockeras problemet genom att \u00e4ndra beteendet hos instruktionerna RDRAND, RDSEED och EGETKEY f\u00f6r att \u00f6verdriva omskrivning av data i den delade bufferten f\u00f6r att f\u00f6rhindra kvarvarande information fr\u00e5n att stanna kvar. Dessutom har \u00e5tkomsten till bufferten pausats tills l\u00e4sning och omskrivning av inneh\u00e5llet \u00e4r slutf\u00f6rd. <\/p>\n

En bieffekt av denna skyddsmekanism \u00e4r \u00f6kad latens vid k\u00f6rning av RDRAND, RDSEED och EGETKEY samt minskad bandbredd vid f\u00f6rs\u00f6k av samtidig utf\u00f6rande av dessa instruktioner p\u00e5 olika logiska processorer. Utf\u00f6rande av RDRAND, RDSEED och EGETKEY pausar ocks\u00e5 minnes\u00e5tkomst fr\u00e5n andra logiska processorer. Dessa egenskaper kan p\u00e5verka prestandan hos vissa serverprogram negativt, varf\u00f6r en mekanism (RNGDS_MITG_DIS) f\u00f6r att inaktivera skyddet av instruktionerna RDRAND och RDSEED, som utf\u00f6rs utanf\u00f6r Intel SGX-enklaven, finns i firmware.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u044f\u0434\u0440\u0435 CPU. \u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u044f\u0434\u0440\u0430\u043c\u0438 CPU (\u0440\u0430\u043d\u0435\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043e\u0442\u043e\u043a\u0430\u043c\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438\u043c\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47CROSSTalk \u2013 en s\u00e5rbarhet i Intel CPU som leder till datal\u00e4ckage mellan k\u00e4rnor | ProHoster","description":"En grupp forskare fr\u00e5n Vrije Universiteit Amsterdam har uppt\u00e4ckt en ny s\u00e5rbarhet (CVE-2020-0543) i mikroarkitekturen.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47CROSSTalk \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU Intel, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u044f\u0434\u0440\u0430\u043c\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-0543) \u0432 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/crosstalk-uyazvimost-v-cpu-intel-privodyashhaya-k-utechke-dannyh-mezhdu-yadrami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:42:18+00:00","article:modified_time":"2020-06-09T23:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84664","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:00:17","updated":"2022-09-29 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/84664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=84664"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/84664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/84665"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=84664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=84664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=84664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}