PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-0549] Tấn công CacheOut làm lộ dữ liệu từ CPU Intel, máy ảo và vùng SGX

blog.viettelcybersecurity.com | vulnerability | CVE-2020-0549 | #side-channel | #intel | #speculative-execution | #sgx | #cacheout | #cve-2020-0549
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CacheOut (CVE-2020-0549) is a new Intel speculative execution flaw letting attackers select and leak data from L1 cache across security boundaries, including VMs and SGX enclaves.
CVE
CVE-2020-0549
Published
Collected

Related coverage

blog · bughunters.google.com
Project Rain:L1TF
A detailed overview of L1TF, a CPU vulnerability affecting some Intel CPUs (Skylake and older), including how it can be exploited and possible mitigation strategies.
vulnerability · bughunters.google.com
The Tale of Google’s Response to Reptar CPU Vulnerability
Google recounts its response to Reptar (CVE-2023-23583), a complex CPU vulnerability, showing how coordinated vulnerability response protected products, users, and millions of devices online.
vulnerability · hackerone.com
How HackerOne Helps the Vulnerability Management Process
HackerOne explains how ethical hackers complement scanners: finding unknown bugs, triaging false positives, and retesting fixes. Intel's 2020 report credits hackers with 45% of its published CVEs.
blog · blog.viettelcybersecurity.com
Tồn tại lỗ hổng 5 năm không thể vá trên CPU và chipset Intel
Positive Technologies found an unpatchable flaw in Intel's CSME firmware ROM: a DMA window before memory protections enable could let attackers hijack the engine and break the platform trust chain.
blog · bughunters.google.com
Strengthening the Foundation: A Joint Security Review of Intel TDX 1.5
Google and Intel jointly reviewed Intel Trust Domain Extensions (TDX) 1.5, and this post details the findings of that security review for confidential computing.
blog · bughunters.google.com
No More Speculation: Exploiting CPU Side-Channels for Real
Google Bug Hunters explore CPU side-channel vulnerabilities that affect nearly all modern processors, demonstrating practical real-world exploitation and why such flaws are hard to mitigate.
Back