What is Specter meltdown?
Spectre and Meltdown are uniquely dangerous security vulnerabilities that allow malicious actors to bypass system security protections present in nearly every recent device with a CPU-not just PCs, servers, and smartphones, but also Internet of Things (IoT) devices like routers and smart TVs.
What is shellshock attack?
Shellshock is the common name for a coding vulnerability found in the Bash shell user interface that affects Unix-based operating systems, including Linux and Mac OS X, and allows attackers to remotely gain complete control of a system.
What is Retpoline?
Retpoline stands for return and trampoline. • The goal of a retpoline sequence is to control how the CPU performs speculation when executing “jmp” and “call”.
Is Spectre fixed?
In March 2018, Intel announced that they had developed hardware fixes for Meltdown and Spectre-V2 only, but not Spectre-V1. The vulnerabilities were mitigated by a new partitioning system that improves process and privilege-level separation.
How does a poodle attack work?
The POODLE security flaw enables a man-in-the-middle (MiTM) attacker to eavesdrop on supposedly secure communications. This means attackers can exploit POODLE to steal users’ private information and — possibly — impersonate the user, resulting in the user losing control over the exploited web application.
What is branch target injection?
Branch target injection works by causing an indirect branch to speculatively execute a ‘gadget’ which creates a side channel based on sensitive data available to the victim. Processors use indirect branch predictors to control only the operation of the branch instructions outlined below: Branch Type. Instruction.
What is Meltdown bug?
Meltdown is a hardware vulnerability affecting Intel x86 microprocessors, IBM POWER processors, and some ARM-based microprocessors. It allows a rogue process to read all memory, even when it is not authorized to do so. Meltdown. The logo used by the team that discovered the vulnerability. CVE identifier(s)
