Rowhammer the first bad-ass hardware security exploit

Posted by Robert | augusti 2, 2015 1

A team of Austrian and French security researchers have now discovered a new security exploit which they refer as “Rowhammer”. As per the researchers this vulnerability can be exploited remotely by using JavaScript.

The team claims this to be the first remote software-induced hardware fault attack.

The bad thing is it’s a hardware flaw and not a software flaw, thus it could be present in any computer which has the Intel Processor built since 2009.

The next bad news is that hackers can exploit this flaw through any webpage.

If you want to test your hardware for Rowhammer vulnerabilty then Google has made som code for that. Read and download the code here
https://github.com/google/rowhammer-test

”Rowhammer” is a problem with recent DRAM modules in which repeatedly accessing a row of memory can cause bit flips in adjacent rows. This repo contains a program for testing for the rowhammer problem which runs as a normal userland process.

 

The rowhammer problem is described by:

  • Yoongu Kim et al’s paper, ”Flipping Bits in Memory Without Accessing Them: An Experimental Study of DRAM Disturbance Errors” (2014).
    http://users.ece.cmu.edu/%7Eyoonguk/papers/kim-isca14.pdf
  • Our blog post, ”Exploiting the DRAM rowhammer bug to gain kernel privileges” (2015), on the blog of Google’s Project Zero.
    http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html

2013-09-10 10.08.00

One Response

Leave a Reply

latest posts from Allmänt

Jetpack-automattic-critical-security-update-60531
Windows 10 - bild på Roberts teknikblogg

Windows 10 finns för gratis nerladdning

Posted on Jul 29, 2015 in Allmänt | no responses

Wordpress 4.2.3 finns ute nu - roberts teknikblogg

Nya WordPress 4.2.3 är ute nu

Posted on Jul 23, 2015 in Allmänt | one comment

latest posts from Teknik

asus_zenwatch_3_gunmetal-with-brown-leather-17
FNATIC-GEAR-MUS1

Fnatic Flick G1 mus för gamers av gamers

Posted on Nov 23, 2016 in Blogg | no responses

FNATIC-RUCH-PRO-TANGENTBORD-2

Fnatic Rush Pro är tangentbordet av gamers för gamers

Posted on Nov 21, 2016 in Blogg | no responses