Версия для печати :: Найдена уязвимость в процессорах Pentium 4 с HT

Найдена уязвимость в процессорах Intel Pentium 4 с HT

Текущая реализация технологии Hyper Threading имеет уязвимость, позволяющую в многопользовательских оп. системах непривилегированному пользователю получать доступ к закрытой информации, в том числе ключам RSA

Уязвимостью можно воспользоваться в любой операционной системе (Windows, Linux, BSD etc) Системным администраторам рекомендуется отключить Hyper Threading на многопользовательских машинах немедленно.

Все процессоры Intel с технологией HyperThreading: Pentium 4, Pentium 4 Extreme Edition, Mobile Pentium 4, Xeon подвержены данной уязвимости.

http://www.rom.by/phpBB2/viewtopic.php?t=6518&sid=24

http://www.linux.org.ru/view-message.jsp?msgid=908476

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:09.htt.asc

Оригинал (http://kerneltrap.org/node/5103):
Colin Percival, a FreeBSD committer and security team member, has found a local exploit against the current implementation of Intel's Hyper-Threading Technology. "Hyper-Threading, as currently implemented on Intel Pentium Extreme Edition, Pentium 4, Mobile Pentium 4, and Xeon processors, suffers from a serious security flaw," Colin explains. "This flaw permits local information disclosure, including allowing an unprivileged user to steal an RSA private key being used on the same machine. Administrators of multi-user systems are strongly advised to take action to disable Hyper-Threading immediately."

Colin will present the details behind the attack at BSDCan 2005 at 10:00 AM EDT on May 13'th. "At the conclusion of my talk I will also be releasing a paper describing the attack and possible mitigation strategies," Colin explains. The flaw affects all operating systems, and for a secure multi-user environment essentially requires that Hyper-Threading be disabled. More information can be found on Colin's web page on the topic. The formentioned paper can be downloaded here in pdf format.

Hyper-Threading allows multi-threaded applications to execute threads in parallel on a single CPU. Intel's website explains, "Hyper-Threading Technology enables this thread-level parallelism (TLP) by duplicating the architectural state on each processor, while sharing one set of processor execution resources. When scheduling threads, the operating system treats the two distinct architectural states as separate 'logical' processors. This allows multiprocessor capable software to run unmodified on twice as many logical processors."