Stay connected

Trending News

Delta Electronics CNCSoft ScreenEditor 
15 hours ago 2 min read  
PTC Kepware KEPServerEX (Update A) 
15 hours ago 4 min read  
ARC Informatique PcVue (Update A) 
4 days ago 3 min read  
A Hands-On Introduction To Insecure Deserialization 
4 days ago 7 min read  
Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A) 
4 days ago 3 min read  
Yokogawa CENTUM (Update A) 
6 days ago 3 min read  
(I)IoT Security News (I)IoT Security News (I)IoT Security News
  • 0
    Log in
    • Asign menu
    Log in
    26 Jan 2021
    • (I)IoT Security News (I)IoT Security News (I)IoT Security News
    • Home
    • News
    • Hacks
    • Recommendations
    • White Papers
    • Other
      • Tools
      • Standards
      • Industrial IoT (IIoT)
      • Reports
    • 0
      • Login to add posts to your read later list

    Blog Post

    Home > Vulnerabilities > SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer
    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer
    Hacks, News, Vulnerabilities

    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer 

    (I) IoT, 3 years ago 2 min read 419  

     

    Researchers from the University of California, Riverside (UCR) have devised a new Spectre CPU side-channel attack called SpectreRSB.

    SpectreRSB leverage the speculative execution technique that is implemented by most modern CPUs to optimize performance.

    Differently, from other Spectre attacks, SpectreRSB recovers data from the speculative execution process by targeting the Return Stack Buffer (RSB).

    “rather than exploiting the branch predictor unit, SpectreRSB exploits the return stack buffer (RSB), a common predictor structure in modern CPUs used to predict return
    addresses.” reads the research paper.

    “We show that both local attacks (within the same process such as Spectre 1) and attacks on SGX are possible by constructing proof of concept attacks”

    The experts demonstrated that they could pollute the RSB code to control the return address and poison a CPU’s speculative execution routine.

    The experts explained that the RSB is shared among hardware threads that execute
    on the same virtual processor enabling inter-process, or even inter-vm, pollution of the RSB

    The academics proposed three attack scenarios that leverage the SpectreRSB attack to pollute the RSB and gain access to data they weren’t authorized to view.

    In two attacks, the experts polluted the RSB to access data from other applications running on the same CPU. In the thirds attack they polluted the RSB to cause a misspeculation that exposes data outside an SGX compartment.

    “an attack against an SGX compartment where a malicious OS pollutes the RSB
    to cause a misspeculation that exposes data outside an SGX compartment. This attack bypasses all software and microcode patches on our SGX machine” continues the paper.

    Researchers said they reported the issue to Intel, but also to AMD and ARM. Researchers only tested the attack on Intel CPUs, but it is likely that both AMD and ARM processors are affected because they both use RSBs to predict return addresses.

    According to the researchers, current Spectre patches are not able to mitigate the SpectreRSB attacks.

    “Importantly, none of the known defenses including Retpoline and Intel’s microcode patches stop all SpectreRSB attacks,” wrote the experts.

    “We believe that future system developers should be aware of this vulnerability and consider it in developing defenses against speculation attacks. “

    SpectreRSB

    The good news is that Intel has already a patch that stops this attack on some CPUs, but wasn’t rolled out to all of its processors.

    “In particular, on Core-i7 Skylake and newer processors (but not on Intel’s Xeon processor line), a patch called RSB refilling is used to address a vulnerability when the RSB underfills” continues the researchers.

    “This defense interferes with SpectreRSB’s ability to launch attacks that switch into the kernel. We recommend that this patch should be used on all machines to protect against SpectreRSB.”

    Source:

    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer

    Hacks, News, Vulnerabilities

    Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code

    News, Recommendations

    More Alerts Alert (TA18-201A) Emotet Malware

    Related posts

    News, White Papers

    Active Directory DCSync 

    (I) IoT, 9 months ago 5 min read  
    IoT Security, News, Tools, Vulnerabilities

    Intelligent IoT Vulnerability Scanner for communication service providers launched to assess and predict cybersecurity risks 

    IoT, 3 years ago 3 min read  
    News, Vulnerabilities

    GAIN Electronic Co. Ltd SAGA1-L Series 

    (I) IoT, 2 years ago 2 min read  
    Hacks, IoT Security, Vulnerabilities

    Z-Wave Downgrade Attack Left Over 100 Million IoT Devices Open to Hackers 

    IoT, 3 years ago 3 min read  
    ICS, News, Vulnerabilities

    OSIsoft PI System (Update A) 

    (I) IoT, 7 months ago 8 min read  
    News, Vulnerabilities

    New PHP Code Execution Attack Puts WordPress Sites at Risk 

    (I) IoT, 2 years ago 3 min read  

    Hot Topics

    Delta Electronics CNCSoft ScreenEditor 
    2  
    PTC Kepware KEPServerEX (Update A) 
    1  
    ARC Informatique PcVue (Update A) 
    2  
    A Hands-On Introduction To Insecure Deserialization 
    1  
    Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A) 
    2  
    Yokogawa CENTUM (Update A) 
    7  

    Categories

    Critical vulnerabiliities (1) Cyber Security (12) Data breach (1) Exploit (12) Hacks (67) ICS (274) Industrial IoT (IIoT) (12) IoT Security (34) Market (3) News (919) Recommendations (11) Reports (3) Security Patches (2) Tools (3) Uncategorized (11) Vulnerabilities (822) White Papers (22)

    Trending Slider

    Delta Electronics CNCSoft ScreenEditor 
    15 hours ago 2  
    PTC Kepware KEPServerEX (Update A) 
    15 hours ago 1  
    ARC Informatique PcVue (Update A) 
    4 days ago 2  
    A Hands-On Introduction To Insecure Deserialization 
    4 days ago 1  
    Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A) 
    4 days ago 2  
    Yokogawa CENTUM (Update A) 
    6 days ago 7  

    Subscribe Now

    * You will receive the latest news and updates on your favorite celebrities!

    • Latest

    • Popular

    Delta Electronics CNCSoft ScreenEditor 
    15 hours ago  
    PTC Kepware KEPServerEX (Update A) 
    15 hours ago  
    ARC Informatique PcVue (Update A) 
    4 days ago  
    A Hands-On Introduction To Insecure Deserialization 
    4 days ago  
    Advantech WebAccess Node  
    9 months ago  
    Fazecast jSerialComm  
    9 months ago  
    Apache Tomcat RCE by deserialization (CVE-2020-9484) – write-up and exploit0  
    8 months ago  
    JexBoss – JBoss Verify and EXploitation Tool  
    2 years ago  

    Categories

    • Critical vulnerabiliities (1)
    • Cyber Security (12)
    • Data breach (1)
    • Exploit (12)
    • Hacks (67)
    • ICS (274)
    • Industrial IoT (IIoT) (12)
    • IoT Security (34)
    • Market (3)
    • News (919)
    • Recommendations (11)
    • Reports (3)
    • Security Patches (2)
    • Tools (3)
    • Uncategorized (11)
    • Vulnerabilities (822)
    • White Papers (22)

    Hot Tags

    Q Siemens SIMATIC Siemens SIMATIC PCS 7 SIMATIC SIMATIC WinCC SIMOCODE SINAMICS SINEC SINEMA SITOP
    WordPress Theme built by Shufflehound.
    • Home
    • Login
    • Register

    Forgot Password

    Registration is closed.