ALAS2-2018-953

Affected Products

Exploit Intelligence

• Spectre (CVE-2017-5753) (CVE-2017-5715). Not By Me. Collected from Book. (github-poc-repo)
• 2018年1月2日 (CVE-2017-5753 和 CVE-2017-5715) "幽灵" Spectre 漏洞利用 (github-poc-repo)
• Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715) (github-poc-repo)
• Spectre exploit (github-poc-repo)
• Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715) (github-poc-repo)
• The demo of the speculative execution attack Spectre (CVE-2017-5753, CVE-2017-5715). (github-poc-repo)
• This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/407311... (github-poc-repo)
• a list of BIOS/Firmware fixes adressing CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 (github-poc-repo)
• Assesses a system for the "speculative execution" vulnerabilities described in CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 (github-poc-repo)
• GalloLuigi/Analisi-CVE-2017-5715 (github-poc-repo)

…and 6 more exploits

Timeline

• Feb 7, 2018 CVE Published

References

• ALAS2-2018-953: microcode_ctl (important) advisory