ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ TPM 2.0 ืจืขืคึฟืขืจืขื ืฅ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ื•ื•ืึธืก ืœืึธื–ืŸ ืึทืงืกืขืก ืฆื• ื“ืึทื˜ืŸ ืื•ื™ืฃ ื“ื™ ืงืจื™ืคึผื˜ืึธื˜ืฉืฉื™ืคึผ

ืื™ืŸ ื“ื™ ืงืึธื“ ืžื™ื˜ ื“ื™ ืจืขืคึฟืขืจืขื ืฅ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ TPM 2.0 (ื˜ืจืึทืกื˜ืขื“ ืคึผืœืึทื˜ืคืึธืจื ืžืึธื“ื•ืœืข) ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’, ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ (CVE-2023-1017, CVE-2023-1018) ื•ื•ืึธืก ืคื™ืจืŸ ืฆื• ืฉืจื™ื™ื‘ืŸ ืึธื“ืขืจ ืœื™ื™ืขื ืขืŸ ื“ืึทื˜ืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืคื•ืŸ ื“ื™ ื’ื•ื•ื•ืœ ืคื•ืŸ ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืึทืคืขืจ. ืึท ื‘ืึทืคืึทืœืŸ ืื•ื™ืฃ ืงืจื™ืคึผื˜ืึธืคึผืจืึทืกืขืกืขืจ ื™ืžืคึผืœืึทืžืึทื ืฅ ื ื™ืฆืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืงืึธื“ ืงืขืŸ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ืŸ ื“ื™ ื™ืงืกื˜ืจืึทืงืฉืึทืŸ ืึธื“ืขืจ ืึธื•ื•ื•ืขืจืจื™ื™ื˜ื™ื ื’ ืคื•ืŸ ืื•ื™ืฃ-ืฉืคึผืึธืŸ ืกื˜ืึธืจื“ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืึทื–ืึท ื•ื•ื™ ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืฉืœื™ืกืœืขืŸ. ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึธื•ื•ื•ืขืจืจื™ื™ื˜ ื“ืึทื˜ืŸ ืื™ืŸ ื“ื™ TPM ืคื™ืจืžื•ื•ืึทืจืข ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื“ื•ืจืš ืึท ืึทื˜ืึทืงืขืจ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื–ื™ื™ืขืจ ืงืึธื“ ืื™ืŸ ื“ืขื ืงืึธื ื˜ืขืงืกื˜ ืคื•ืŸ ื“ื™ TPM, ื•ื•ืึธืก, ืœืžืฉืœ, ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื™ื ืกื˜ืจื•ืžืขื ื˜ ื‘ืึทืงื“ืึธืจื– ื•ื•ืึธืก ืึทืจื‘ืขื˜ืŸ ืื•ื™ืฃ ื“ื™ TPM ื–ื™ื™ึทื˜ ืื•ืŸ ื–ืขื ืขืŸ ื ื™ืฉื˜ ื“ื™ื˜ืขืงื˜ืึทื“. ื“ื•ืจืš ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื’ืจื™ื™ืก ืคื•ืŸ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืคื•ืŸ ื“ื™ CryptParameterDecryption () ืคื•ื ืงืฆื™ืข, ื•ื•ืึธืก ืึทืœืึทื•ื– ืฆื•ื•ื™ื™ ื‘ื™ื˜ืขืก ืฆื• ื–ื™ื™ืŸ ื’ืขืฉืจื™ื‘ืŸ ืึธื“ืขืจ ืœื™ื™ืขื ืขืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืคื•ืŸ ื“ื™ ื’ืจืขื ืขืฅ ืคื•ืŸ ื“ื™ ื‘ืึทืคืขืจ ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ืฆื• ื“ื™ ExecuteCommand () ืคึฟื•ื ืงืฆื™ืข ืื•ืŸ ืžื™ื˜ ื“ื™ TPM2.0 ื‘ืึทืคึฟืขืœ. ื“ืขืคึผืขื ื“ื™ื ื’ ืื•ื™ืฃ ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ, ื“ื™ ืฆื•ื•ื™ื™ ื‘ื™ื˜ืขืก ื•ื•ืึธืก ื–ืขื ืขืŸ ืึธื•ื•ื•ืขืจืจื™ื˜ืึทืŸ ืงืขื ืขืŸ ืคืึทืจื“ืึธืจื‘ืŸ ื‘ื™ื™ื“ืข ืึทื ื™ื•ื–ื“ ื–ื›ึผืจื•ืŸ ืื•ืŸ ื“ืึทื˜ืŸ ืึธื“ืขืจ ืคึผื•ื™ื ื˜ืขืจื– ืื•ื™ืฃ ื“ืขื ืึธื ืœื™ื™ื’ืŸ.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื“ื•ืจืš ืฉื™ืงืŸ ืกืคึผืขืฆื™ืขืœ ื“ื™ื–ื™ื™ื ื“ ืงืึทืžืึทื ื“ื– ืฆื• ื“ื™ TPM ืžืึธื“ื•ืœืข (ื“ืขืจ ืึทื˜ืึทืงืขืจ ืžื•ื–ืŸ ื”ืึธื‘ืŸ ืึทืงืกืขืก ืฆื• ื“ื™ TPM ืฆื•ื‘ื™ื ื“). ื“ื™ ื™ืฉื•ื– ื–ืขื ืขืŸ ืกืึทืœื•ื•ื“ ืื™ืŸ ื“ื™ TPM 2.0 ืกืคึผืขืกื™ืคื™ืงืึทื˜ื™ืึธืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื‘ืืคืจื™ื™ื˜ ืื™ืŸ ื™ืื ื•ืืจ (1.59 Errata 1.4, 1.38 Errata 1.13, 1.16 Errata 1.6).

ื“ื™ ืœื™ื‘ื˜ืคึผืžืก ืขืคึฟืขื ืขืŸ ื‘ื™ื‘ืœื™ืึธื˜ืขืง, ื’ืขื ื™ืฆื˜ ืคึฟืึทืจ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืขืžื™ืึทืœื™ื™ืฉืึทืŸ ืคื•ืŸ ื˜ืคึผื ืžืึทื“ื–ืฉื•ืœื– ืื•ืŸ ื™ื ืึทื’ืจื™ื™ืฉืึทืŸ ืคื•ืŸ ื˜ืคึผื ืฉื˜ื™ืฆืŸ ืื™ืŸ ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจื–, ืื™ื– ืื•ื™ืš ืฉืคึผื™ืจืขื•ื•ื“ื™ืง. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ libtpms 0.9.6 ืžืขืœื“ื•ื ื’.

ืžืงื•ืจ: opennet.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster