CVE-2017-5754.md

CVE-2017-5754 (rogue data cache load)

• Report: Jun 1, 2017
• Credit:
  • Jann Horn (Google Project Zero)
  • Werner Haas, Thomas Prescher (Cyberus Technology)
  • Daniel Gruss, Moritz Lipp, Stefan Mangard, Michael Schwarz (Graz University of Technology)

PoC

• IAIK/meltdown
• CacheAttack.cpp
• paboldin/meltdown-exploit
• raphaelsc/Am-I-affected-by-Meltdown
• lgeek/spec_poc_arm
• GitMirar/meltdown-poc

Reference

• Meltdown
• Time-travelling exploits with Meltdown
• Reading privileged memory with a side-channel
• marcan/speculation-bugs
• A Simple Explanation of the Differences Between Meltdown and Spectre
• Intel: Intel Responds to Security Research Findings
• Negative Result: Reading Kernel Memory From User Mode
• History stealing using timing attack
• CVE-2017-5754