4 ms·
From Google Security Blog [0] >The Project Zero researchers discovered three methods (variants) of attack, which are effective under different conditions. All
by PuffinBlue 9y ago
From Google Security Blog [0]
>The Project Zero researchers discovered three methods (variants) of attack, which are effective under different conditions. All three attack variants can allow a process with normal user privileges to perform unauthorized reads of memory data, which may contain sensitive information such as passwords, cryptographic key material, etc.
> There is no single fix for all three attack variants; each requires protection independently. Many vendors have patches available for one or more of these attacks.
That would suggest the possibility of a third unnamed attack variant.
[0] https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html https://security.googleblog.com/2018/01/todays-cpu-vulnerabi...
- bonzini 9y agoSpectre has two variants, CVE-2017-5053 and CVE-2017-5715.
- PuffinBlue 9y agoAh, I missed that, thanks!