Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Asustor Lockerstor 4 (AS6604T) NAS Review
Hitman III: PC graphics perf benchmark review
TeamGroup CX2 1TB SATA3 SSD review
EVGA GeForce RTX 3070 FTW3 Ultra review
Corsair 5000D PC Chassis Review
NZXT Kraken X63 RGB Review
ASUS Radeon RX 6900 XT STRIX OC LC Review
TerraMaster F5-221 NAS Review
MSI Radeon RX 6800 XT Gaming X TRIO Review
Sapphire Radeon RX 6800 NITRO+ review

New Downloads
GeForce 461.40 WHQL driver download
HWiNFO Download v6.42
Prime95 download version 30.4 build 8
CrystalDiskInfo 8.10.0 Download
SiSoft Sandra 20/20 download v30.92
AMD Radeon Adrenalin Edition 21.1.1 driver download
CPU-Z download v1.95
Intel HD graphics Driver Download Version: DCH 27.20.100.9168
GeForce 461.33 hotfix driver download
AIDA64 Download Version 6.32.5620 beta


New Forum Topics
Cooler Master MasterFrame 700 GeForce RTX 3000 Series Founders Edition Cards No Longer Listed in Europe? Intel DG1 GPU incompatible with the AMD Ryzen platform and high-end Intel mobos Specifications K-Model Rocket Lake processors have surfaced GeForce 461.40 WHQL drivers: download & discussion RTX 3090 Boost Clocks ROG Strix SCAR 17 with the latest AMD Ryzen processors and NVIDIA GeForce RTX 30 graphics New Gigabyte Z390 BAR bios added Gabe Newell talks about Cyberpunk 2077 and sympathizes with CD Projekt RDNA2 RX6000 Series Owners Thread, Tests, Mods, BIOS & Tweaks !




Guru3D.com » News » Intel Procs Again hit By Massive Vulnerability (called Spoiler)

Intel Procs Again hit By Massive Vulnerability (called Spoiler)

by Hilbert Hagedoorn on: 03/05/2019 03:17 PM | source: | 76 comment(s)
Intel Procs Again hit By Massive Vulnerability (called Spoiler)

Yeah, not exactly the most fun pun, but this is a spoiler alert. The vulnerability was given the name Spoiler and was discovered by the Worcester Polytechnic Institute and the University of Lübeck. it involves a leak in page mapping of working memory, making other attacks much easier to perform.

To perform tasks faster, speculative execution is applied to processes in working memory. In this case, data from the working memory is already cached in advance with so-called load and store instructions. However, if a physical memory address does not exist, data leaks away over the timing - the time it took to reach a physical memory address. The researchers mention , Rowhammer, cache and javascript attacks can be executed in merely seconds. 

-- The Register -- 

This security shortcoming can be potentially exploited by malicious JavaScript within a web browser tab, or malware running on a system, or rogue logged-in users, to extract passwords, keys, and other data from memory. An attacker therefore requires some kind of foothold in your machine in order to pull this off. The vulnerability, it appears, cannot be easily fixed or mitigated without significant redesign work at the silicon level.

Speculative execution, the practice of allowing processors to perform future work that may or may not be needed while they await the completion of other computations, is what enabled the Spectre vulnerabilities revealed early last year.

In a research paper distributed this month through pre-print service ArXiv, "SPOILER: Speculative Load Hazards Boost Rowhammer and Cache Attacks," computer scientists at Worcester Polytechnic Institute in the US, and the University of Lübeck in Germany, describe a new way to abuse the performance boost.

Intel has was notified of the problem on December 1st. According to the researchers, a solution via a software update is virtually impossible and can only be remedied with an adjustment in architecture. If this is done, it will undoubtedly lead to lower performance. Whether there is a solution is very doubtful.

Arm and AMD processors are not vulnerable to this attack.







« Download: GeForce 419.35 WHQL driver · Intel Procs Again hit By Massive Vulnerability (called Spoiler) · Nvidia expands RTX game bundle with Metro Exodus »

Related Stories

Intel Processor Refresh in Spring - 100 MHz bumps - 02/21/2019 09:10 AM
Earlier this week you've already read the funny news about a KFC edition, in the upcoming weeks more processors will be added into the lineup from Intel, they, however, all are refreshes mostly 100 M...

Shuttle launches DH370 Mini-PC for 6-core 8th Gen Intel Processors - 02/06/2019 08:49 AM
The 1.3-litre DH370 sports a new chassis design which accommodates Intel processors of the 8th generation for socket LGA1151v2, relies on the faster H370 chipset and offers a total of four USB 3.1 po...

Intel processor shortages to continue into 2Q19 says ASUS - 11/15/2018 09:01 AM
We've touched the topic a couple of times but it's now confirmed by ASUS as well. With the issues on 10nm fabrication, Intel is running out of fabrication space on 14nm, and they have a lot of proc...

Three new vulnerabilities in Intel processors discovered - L1TF - 08/15/2018 07:54 AM
Intel has announced that three new serious vulnerabilities have been discovered in its processors, allowing unauthorized access to data in the L1 cache. The vulnerabilities are named L1 Terminal Faul...

Intel Promotes Its Three Corporate Officers - 07/25/2018 04:05 AM
Intel today announced that its board of directors has promoted three corporate officers. "These promotions recognize the expanded scope and significance of the organizations for each of these pr...


16 pages 1 2 3 4 > »


fantaskarsef
Senior Member



Posts: 12011
Joined: 2014-07-21

#5646489 Posted on: 03/05/2019 02:50 PM
spec-exec is just the plague of anything security related.
Do not wait for a fix for this in any form, Intel still hasn't been able to fix four year old CPUs, and they seem to do nothing to get such issues with spec-exec out of their system.
Just one more reason I'm waiting for Zen 3000 CPUs...

icedman
Senior Member



Posts: 1058
Joined: 2013-02-22

#5646511 Posted on: 03/05/2019 03:28 PM
And with this any ipc advantage intel still had will be gone lol. looks like everything will be on who can get moar cores and or moar clock speed

RzrTrek
Senior Member



Posts: 2512
Joined: 2012-04-16

#5646514 Posted on: 03/05/2019 03:33 PM
Why do I get the feeling that Intel has been compromised by the intelligence agencies?

Kaarme
Senior Member



Posts: 2220
Joined: 2013-03-10

#5646520 Posted on: 03/05/2019 03:43 PM
Intel is well past caring already. Back when Spectre was revealed, Intel was somewhat worried, or at least acted as if it was. But in the end, today, Intel can't produce enough merchandise to meet the demand, no matter how high they set the prices. I bet this particular vulnerability earned wide yawns from Intel execs, nothing more.

SSD_PRO
Senior Member



Posts: 178
Joined: 2013-02-07

#5646524 Posted on: 03/05/2019 03:47 PM
Is a "Culnerability" a play on words I am ignorant to? Or just a typo in the title?

16 pages 1 2 3 4 > »


Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2021