Stay connected

Trending News

Delta Electronics CNCSoft ScreenEditor 
21 hours ago 2 min read  
CISA Releases Eight Industrial Control Systems Advisories 
21 hours ago 1 min read  
Hitachi Energy MicroSCADA Pro/X SYS600 Products 
2 weeks ago 2 min read  
VMware Releases Security Updates for Multiple products 
1 month ago 2 min read  
Fortinet Releases Security Updates for FortiOS 
1 month ago 2 min read  
Cisco Releases Security Advisory for IP Phone 7800 and 8800 Series 
1 month ago 4 min read  
(I)IoT Security News (I)IoT Security News (I)IoT Security News
  • 0
    • (I)IoT Security News (I)IoT Security News (I)IoT Security News
    • Home
    • News
    • Hacks
    • Recommendations
    • White Papers
    • Other
      • Tools
      • Standards
      • Industrial IoT (IIoT)
      • Reports
    • 0
      • Login to add posts to your read later list
    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer
    Hacks, News, Vulnerabilities

    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer 

    (I) IoT, 5 years ago 2 min read 482  

     

    Researchers from the University of California, Riverside (UCR) have devised a new Spectre CPU side-channel attack called SpectreRSB.

    SpectreRSB leverage the speculative execution technique that is implemented by most modern CPUs to optimize performance.

    Differently, from other Spectre attacks, SpectreRSB recovers data from the speculative execution process by targeting the Return Stack Buffer (RSB).

    “rather than exploiting the branch predictor unit, SpectreRSB exploits the return stack buffer (RSB), a common predictor structure in modern CPUs used to predict return
    addresses.” reads the research paper.

    “We show that both local attacks (within the same process such as Spectre 1) and attacks on SGX are possible by constructing proof of concept attacks”

    The experts demonstrated that they could pollute the RSB code to control the return address and poison a CPU’s speculative execution routine.

    The experts explained that the RSB is shared among hardware threads that execute
    on the same virtual processor enabling inter-process, or even inter-vm, pollution of the RSB

    The academics proposed three attack scenarios that leverage the SpectreRSB attack to pollute the RSB and gain access to data they weren’t authorized to view.

    In two attacks, the experts polluted the RSB to access data from other applications running on the same CPU. In the thirds attack they polluted the RSB to cause a misspeculation that exposes data outside an SGX compartment.

    “an attack against an SGX compartment where a malicious OS pollutes the RSB
    to cause a misspeculation that exposes data outside an SGX compartment. This attack bypasses all software and microcode patches on our SGX machine” continues the paper.

    Researchers said they reported the issue to Intel, but also to AMD and ARM. Researchers only tested the attack on Intel CPUs, but it is likely that both AMD and ARM processors are affected because they both use RSBs to predict return addresses.

    According to the researchers, current Spectre patches are not able to mitigate the SpectreRSB attacks.

    “Importantly, none of the known defenses including Retpoline and Intel’s microcode patches stop all SpectreRSB attacks,” wrote the experts.

    “We believe that future system developers should be aware of this vulnerability and consider it in developing defenses against speculation attacks. “

    SpectreRSB

    The good news is that Intel has already a patch that stops this attack on some CPUs, but wasn’t rolled out to all of its processors.

    “In particular, on Core-i7 Skylake and newer processors (but not on Intel’s Xeon processor line), a patch called RSB refilling is used to address a vulnerability when the RSB underfills” continues the researchers.

    “This defense interferes with SpectreRSB’s ability to launch attacks that switch into the kernel. We recommend that this patch should be used on all machines to protect against SpectreRSB.”

    Source:

    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer

    Hacks, News, Vulnerabilities

    Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code

    News, Recommendations

    More Alerts Alert (TA18-201A) Emotet Malware

    Related posts

    News, Vulnerabilities

    JexBoss – JBoss Verify and EXploitation Tool 

    (I) IoT, 4 years ago 33 min read  
    News, Vulnerabilities

    Rittal Chiller SK 3232-Series 

    (I) IoT, 3 years ago 2 min read  
    Critical vulnerabiliities, IoT Security, News, Recommendations, Vulnerabilities

    Siemens Datalogics File Parsing Vulnerability (Update A) 

    IoT, 6 months ago 3 min read  
    News, Vulnerabilities

    Emerson OpenEnterprise 

    (I) IoT, 3 years ago 2 min read  
    News, White Papers

    Reading Bits in Memory Without Accessing Them 

    (I) IoT, 4 years ago 1 min read  
    ICS, News, Vulnerabilities

    SIMATIC S7-300 CPUs and SINUMERIK Controller 

    (I) IoT, 2 years ago 2 min read  

    Hot Topics

    Delta Electronics CNCSoft ScreenEditor 
    5  
    CISA Releases Eight Industrial Control Systems Advisories 
    1  
    Hitachi Energy MicroSCADA Pro/X SYS600 Products 
    13  
    VMware Releases Security Updates for Multiple products 
    41  
    Fortinet Releases Security Updates for FortiOS 
    26  
    Cisco Releases Security Advisory for IP Phone 7800 and 8800 Series 
    30  

    Categories

    Critical vulnerabiliities (35) Cyber Security (24) Data breach (2) Exploit (14) Hacks (70) ICS (454) Industrial IoT (IIoT) (23) IoT Security (48) Market (27) News (1136) Recommendations (53) Remediation (7) Reports (8) Security Patches (9) Standards (3) Tools (4) Uncategorized (28) Vulnerabilities (1018) White Papers (22)

    Trending Slider

    Delta Electronics CNCSoft ScreenEditor 
    21 hours ago 5  
    CISA Releases Eight Industrial Control Systems Advisories 
    21 hours ago 1  
    Hitachi Energy MicroSCADA Pro/X SYS600 Products 
    2 weeks ago 13  
    VMware Releases Security Updates for Multiple products 
    1 month ago 41  
    Fortinet Releases Security Updates for FortiOS 
    1 month ago 26  
    Cisco Releases Security Advisory for IP Phone 7800 and 8800 Series 
    1 month ago 30  
    • Latest

    • Popular

    Delta Electronics CNCSoft ScreenEditor 
    21 hours ago  
    CISA Releases Eight Industrial Control Systems Advisories 
    21 hours ago  
    Hitachi Energy MicroSCADA Pro/X SYS600 Products 
    2 weeks ago  
    VMware Releases Security Updates for Multiple products 
    1 month ago  
    Advantech WebAccess Node  
    3 years ago  
    Fazecast jSerialComm  
    3 years ago  
    Apache Tomcat RCE by deserialization (CVE-2020-9484) – write-up and exploit0  
    3 years ago  
    JexBoss – JBoss Verify and EXploitation Tool  
    4 years ago  

    Categories

    • Critical vulnerabiliities (35)
    • Cyber Security (24)
    • Data breach (2)
    • Exploit (14)
    • Hacks (70)
    • ICS (454)
    • Industrial IoT (IIoT) (23)
    • IoT Security (48)
    • Market (27)
    • News (1,136)
    • Recommendations (53)
    • Remediation (7)
    • Reports (8)
    • Security Patches (9)
    • Standards (3)
    • Tools (4)
    • Uncategorized (28)
    • Vulnerabilities (1,018)
    • White Papers (22)

    Hot Tags

    CISCO HITACHI ENERGY Siemens Siemens SIMATIC SIMATIC WinCC SINAMICS SINEC SINEMA Vulnerability VULNERABILITY OVERVIEW
    WordPress Theme built by Shufflehound.
    • Home
    • Login
    • Register

    Forgot Password

    Registration is closed.