Stay connected

Trending News

Siemens Solid Edge File Parsing 
18 hours ago 4 min read  
Luxion KeyShot (Update A) 
18 hours ago 4 min read  
TCP/IP Stack Vulnerabilities–AMNESIA:33 in SENTRON PAC / 3VA Devices 
7 days ago 3 min read  
Siemens TCP Stack of SIMATIC MV400 
7 days ago 3 min read  
Siemens Energy PLUSCONTROL 1st Gen 
7 days ago 3 min read  
dnsmasq by Simon Kelley (Update A) 
2 weeks ago 5 min read  
(I)IoT Security News (I)IoT Security News (I)IoT Security News
  • 0
    Log in
    • Asign menu
    Log in
    16 Apr 2021
    • (I)IoT Security News (I)IoT Security News (I)IoT Security News
    • Home
    • News
    • Hacks
    • Recommendations
    • White Papers
    • Other
      • Tools
      • Standards
      • Industrial IoT (IIoT)
      • Reports
    • 0
      • Login to add posts to your read later list

    Blog Post

    Home > Vulnerabilities > SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer
    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer
    Hacks, News, Vulnerabilities

    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer 

    (I) IoT, 3 years ago 2 min read 427  

     

    Researchers from the University of California, Riverside (UCR) have devised a new Spectre CPU side-channel attack called SpectreRSB.

    SpectreRSB leverage the speculative execution technique that is implemented by most modern CPUs to optimize performance.

    Differently, from other Spectre attacks, SpectreRSB recovers data from the speculative execution process by targeting the Return Stack Buffer (RSB).

    “rather than exploiting the branch predictor unit, SpectreRSB exploits the return stack buffer (RSB), a common predictor structure in modern CPUs used to predict return
    addresses.” reads the research paper.

    “We show that both local attacks (within the same process such as Spectre 1) and attacks on SGX are possible by constructing proof of concept attacks”

    The experts demonstrated that they could pollute the RSB code to control the return address and poison a CPU’s speculative execution routine.

    The experts explained that the RSB is shared among hardware threads that execute
    on the same virtual processor enabling inter-process, or even inter-vm, pollution of the RSB

    The academics proposed three attack scenarios that leverage the SpectreRSB attack to pollute the RSB and gain access to data they weren’t authorized to view.

    In two attacks, the experts polluted the RSB to access data from other applications running on the same CPU. In the thirds attack they polluted the RSB to cause a misspeculation that exposes data outside an SGX compartment.

    “an attack against an SGX compartment where a malicious OS pollutes the RSB
    to cause a misspeculation that exposes data outside an SGX compartment. This attack bypasses all software and microcode patches on our SGX machine” continues the paper.

    Researchers said they reported the issue to Intel, but also to AMD and ARM. Researchers only tested the attack on Intel CPUs, but it is likely that both AMD and ARM processors are affected because they both use RSBs to predict return addresses.

    According to the researchers, current Spectre patches are not able to mitigate the SpectreRSB attacks.

    “Importantly, none of the known defenses including Retpoline and Intel’s microcode patches stop all SpectreRSB attacks,” wrote the experts.

    “We believe that future system developers should be aware of this vulnerability and consider it in developing defenses against speculation attacks. “

    SpectreRSB

    The good news is that Intel has already a patch that stops this attack on some CPUs, but wasn’t rolled out to all of its processors.

    “In particular, on Core-i7 Skylake and newer processors (but not on Intel’s Xeon processor line), a patch called RSB refilling is used to address a vulnerability when the RSB underfills” continues the researchers.

    “This defense interferes with SpectreRSB’s ability to launch attacks that switch into the kernel. We recommend that this patch should be used on all machines to protect against SpectreRSB.”

    Source:

    SpectreRSB – new Spectre CPU side-channel attack using the Return Stack Buffer

    Hacks, News, Vulnerabilities

    Attacks on Oracle WebLogic Servers Detected After Publication of PoC Code

    News, Recommendations

    More Alerts Alert (TA18-201A) Emotet Malware

    Related posts

    News, Vulnerabilities

    PLC Cycle Time Influences 

    (I) IoT, 2 years ago 5 min read  
    News

    How Will Artificial Intelligence Impact IoT in 2018 

    (I)IoT, 3 years ago 7 min read  
    ICS, News, Vulnerabilities

    Siemens SINEMA Remote Connect (Update A) 

    (I) IoT, 2 weeks ago 5 min read  
    ICS, News, Vulnerabilities

    Siemens TIA Portal (Update B) 

    (I) IoT, 2 months ago 3 min read  
    News, Vulnerabilities

    Omron CX-Supervisor 

    (I) IoT, 2 years ago 3 min read  
    News, Vulnerabilities

    Siemens TIA Portal (Update A) 

    (I) IoT, 12 months ago 3 min read  

    Hot Topics

    Siemens Solid Edge File Parsing 
    1  
    Luxion KeyShot (Update A) 
    1  
    TCP/IP Stack Vulnerabilities–AMNESIA:33 in SENTRON PAC / 3VA Devices 
    7  
    Siemens TCP Stack of SIMATIC MV400 
    3  
    Siemens Energy PLUSCONTROL 1st Gen 
    1  
    dnsmasq by Simon Kelley (Update A) 
    7  

    Categories

    Critical vulnerabiliities (1) Cyber Security (12) Data breach (1) Exploit (13) Hacks (68) ICS (350) Industrial IoT (IIoT) (12) IoT Security (34) Market (3) News (996) Recommendations (11) Reports (3) Security Patches (2) Tools (3) Uncategorized (12) Vulnerabilities (899) White Papers (22)

    Trending Slider

    Siemens Solid Edge File Parsing 
    18 hours ago 1  
    Luxion KeyShot (Update A) 
    18 hours ago 1  
    TCP/IP Stack Vulnerabilities–AMNESIA:33 in SENTRON PAC / 3VA Devices 
    7 days ago 7  
    Siemens TCP Stack of SIMATIC MV400 
    7 days ago 3  
    Siemens Energy PLUSCONTROL 1st Gen 
    7 days ago 1  
    dnsmasq by Simon Kelley (Update A) 
    2 weeks ago 7  

    Subscribe Now

    * You will receive the latest news and updates on your favorite celebrities!

    • Latest

    • Popular

    Siemens Solid Edge File Parsing 
    18 hours ago  
    Luxion KeyShot (Update A) 
    18 hours ago  
    TCP/IP Stack Vulnerabilities–AMNESIA:33 in SENTRON PAC / 3VA Devices 
    7 days ago  
    Siemens TCP Stack of SIMATIC MV400 
    7 days ago  
    Advantech WebAccess Node  
    11 months ago  
    Fazecast jSerialComm  
    11 months ago  
    Apache Tomcat RCE by deserialization (CVE-2020-9484) – write-up and exploit0  
    10 months ago  
    JexBoss – JBoss Verify and EXploitation Tool  
    2 years ago  

    Categories

    • Critical vulnerabiliities (1)
    • Cyber Security (12)
    • Data breach (1)
    • Exploit (13)
    • Hacks (68)
    • ICS (350)
    • Industrial IoT (IIoT) (12)
    • IoT Security (34)
    • Market (3)
    • News (996)
    • Recommendations (11)
    • Reports (3)
    • Security Patches (2)
    • Tools (3)
    • Uncategorized (12)
    • Vulnerabilities (899)
    • White Papers (22)

    Hot Tags

    SIDOOR Siemens KTK Siemens SIMATIC Siemens SIMATIC PCS 7 SIMATIC SIMATIC WinCC SINAMICS SINEC SINEMA SITOP
    WordPress Theme built by Shufflehound.
    • Home
    • Login
    • Register

    Forgot Password

    Registration is closed.