Stay connected

Trending News

Cisco Application Policy Infrastructure Controller Vulnerabilities 
5 months ago 5 min read  
Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers 
5 months ago 4 min read  
Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities 
5 months ago 5 min read  
Siemens SIPROTEC 5 Devices 
5 months ago 6 min read  
Siemens SIMATIC S7-1200 CPU Family 
5 months ago 6 min read  
Rockwell Automation 1756-L8zS3 and 1756-L3zS3 
5 months ago 3 min read  
(I)IoT Security News (I)IoT Security News (I)IoT Security News
  • 0
    • (I)IoT Security News (I)IoT Security News (I)IoT Security News
    • Home
    • News
    • Hacks
    • Recommendations
    • White Papers
    • Other
      • Tools
      • Standards
      • Industrial IoT (IIoT)
      • Reports
    • 0
      • Login to add posts to your read later list
    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer
    Hacks, News, Vulnerabilities

    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer 

    (I) IoT, 7 years ago 2 min read 546  

     

    Researchers from the University of California, Riverside (UCR) have devised a new Spectre CPU side-channel attack called SpectreRSB.

    SpectreRSB leverage the speculative execution technique that is implemented by most modern CPUs to optimize performance.

    Differently, from other Spectre attacks, SpectreRSB recovers data from the speculative execution process by targeting the Return Stack Buffer (RSB).

    “rather than exploiting the branch predictor unit, SpectreRSB exploits the return stack buffer (RSB), a common predictor structure in modern CPUs used to predict return
    addresses.” reads the research paper.

    “We show that both local attacks (within the same process such as Spectre 1) and attacks on SGX are possible by constructing proof of concept attacks”

    The experts demonstrated that they could pollute the RSB code to control the return address and poison a CPU’s speculative execution routine.

    The experts explained that the RSB is shared among hardware threads that execute
    on the same virtual processor enabling inter-process, or even inter-vm, pollution of the RSB

    The academics proposed three attack scenarios that leverage the SpectreRSB attack to pollute the RSB and gain access to data they weren’t authorized to view.

    In two attacks, the experts polluted the RSB to access data from other applications running on the same CPU. In the thirds attack they polluted the RSB to cause a misspeculation that exposes data outside an SGX compartment.

    “an attack against an SGX compartment where a malicious OS pollutes the RSB
    to cause a misspeculation that exposes data outside an SGX compartment. This attack bypasses all software and microcode patches on our SGX machine” continues the paper.

    Researchers said they reported the issue to Intel, but also to AMD and ARM. Researchers only tested the attack on Intel CPUs, but it is likely that both AMD and ARM processors are affected because they both use RSBs to predict return addresses.

    According to the researchers, current Spectre patches are not able to mitigate the SpectreRSB attacks.

    “Importantly, none of the known defenses including Retpoline and Intel’s microcode patches stop all SpectreRSB attacks,” wrote the experts.

    “We believe that future system developers should be aware of this vulnerability and consider it in developing defenses against speculation attacks. “

    SpectreRSB

    The good news is that Intel has already a patch that stops this attack on some CPUs, but wasn’t rolled out to all of its processors.

    “In particular, on Core-i7 Skylake and newer processors (but not on Intel’s Xeon processor line), a patch called RSB refilling is used to address a vulnerability when the RSB underfills” continues the researchers.

    “This defense interferes with SpectreRSB’s ability to launch attacks that switch into the kernel. We recommend that this patch should be used on all machines to protect against SpectreRSB.”

    Source:

    https://securityaffairs.co/wordpress/74698/hacking/spectrersb-attack.html

    Hacks, News, Vulnerabilities

    Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code

    News, Recommendations

    More Alerts Alert (TA18-201A) Emotet Malware

    Related posts

    ICS, News, Vulnerabilities

    Siemens S7-300/400 PLC Vulnerabilities (Update E) 

    (I) IoT, 5 years ago 3 min read  
    News, Vulnerabilities

    Siemens Industrial Products with OPC UA (Update B) 

    (I) IoT, 6 years ago 4 min read  
    News

    Group-IB presented latest cybercrime and nation-state hacking trends in Asia 

    (I) IoT, 7 years ago 7 min read  
    ICS, News, Vulnerabilities

    Delta Industrial Automation CNCSoft ScreenEditor 

    (I) IoT, 5 years ago 2 min read  
    Critical vulnerabiliities, Cyber Security, Data breach, Exploit, Hacks, ICS, Industrial IoT (IIoT), IoT Security, Vulnerabilities

    Mitsubishi Electric GOT and Tension Controller (Update A) 

    IoT, 3 years ago 3 min read  
    News, Vulnerabilities

    Dark Tequila Banking Malware Uncovered After 5 Years of Activity 

    (I) IoT, 7 years ago 3 min read  

    Hot Topics

    Cisco Application Policy Infrastructure Controller Vulnerabilities 
    90  
    Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers 
    47  
    Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities 
    40  
    Siemens SIPROTEC 5 Devices 
    61  
    Siemens SIMATIC S7-1200 CPU Family 
    65  
    Rockwell Automation 1756-L8zS3 and 1756-L3zS3 
    60  

    Categories

    Critical vulnerabiliities (86) cyber crime (1) Cyber Security (67) Data breach (2) DER (11) Exploit (30) Hacks (79) ICS (518) Industrial IoT (IIoT) (29) IoT Security (79) Market (49) News (1224) Recommendations (59) Remediation (7) Reports (12) Security Patches (12) Standards (3) Tools (6) Uncategorized (30) Vulnerabilities (1096) White Papers (33)

    Trending Slider

    Cisco Application Policy Infrastructure Controller Vulnerabilities 
    5 months ago 90  
    Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers 
    5 months ago 47  
    Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities 
    5 months ago 40  
    Siemens SIPROTEC 5 Devices 
    5 months ago 61  
    Siemens SIMATIC S7-1200 CPU Family 
    5 months ago 65  
    Rockwell Automation 1756-L8zS3 and 1756-L3zS3 
    5 months ago 60  
    • Latest

    • Popular

    Cisco Application Policy Infrastructure Controller Vulnerabilities 
    5 months ago  
    Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers 
    5 months ago  
    Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities 
    5 months ago  
    Siemens SIPROTEC 5 Devices 
    5 months ago  
    Advantech WebAccess Node  
    5 years ago  
    Fazecast jSerialComm  
    5 years ago  
    Apache Tomcat RCE by deserialization (CVE-2020-9484) – write-up and exploit0  
    5 years ago  
    JexBoss – JBoss Verify and EXploitation Tool  
    7 years ago  

    Categories

    • Critical vulnerabiliities (86)
    • cyber crime (1)
    • Cyber Security (67)
    • Data breach (2)
    • DER (11)
    • Exploit (30)
    • Hacks (79)
    • ICS (518)
    • Industrial IoT (IIoT) (29)
    • IoT Security (79)
    • Market (49)
    • News (1,224)
    • Recommendations (59)
    • Remediation (7)
    • Reports (12)
    • Security Patches (12)
    • Standards (3)
    • Tools (6)
    • Uncategorized (30)
    • Vulnerabilities (1,096)
    • White Papers (33)

    Hot Tags

    CISCO HITACHI ENERGY MITSUBISHI Siemens Siemens SIMATIC SINAMICS SINEC SINEMA Vulnerability VULNERABILITY OVERVIEW
    WordPress Theme built by Shufflehound.
    • Home
    • Login
    • Register

    Forgot Password

    Registration is closed.