3 ms·

There has been one paper recently that showed a rowhammer exploit over the network against a key-value server: https://www.usenix.org/conference/atc18/presentat

There has been one paper recently that showed a rowhammer exploit over the network against a key-value server: https://www.usenix.org/conference/atc18/presentation/tatar https://www.usenix.org/conference/atc18/presentation/tatar I haven't read the paper, so I don't know how reliably they can do it in a real world setting where they are not the only people interacting with the server, but they demonstrate that it's possible.

mirimir 8y ago
Impressive. But isn't a key-value server perilously close to a database prompt? And this exploit depends on having authenticated access, right? Otherwise something like fail2ban would prevent hammering, I'd think.
- rocqua 8y ago
  Unless your ban works either on the network, or at the firmware of your network card, the packet data is going to reach kernel memory. It then seems somewhat plausible that such packet data could effect faulty RAM.
  - mirimir 8y ago
    Good point. Thanks.