Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Sapphire Radeon RX 7600 PULSE review
Gainward GeForce RTX 4060 Ti GHOST review
Radeon RX 7600 review
ASUS GeForce RTX 4060 Ti TUF Gaming review
MSI GeForce RTX 4060 Ti Gaming X TRIO review
GeForce RTX 4060 Ti 8GB (FE) review
Corsair 2000D RGB Airflow Mini-ITX - PC chassis review
ASUS PG27AQDM Review - 240Hz 1440p OLED monitor
MSI MAG X670E Tomahawk WiFi review
Mountain Makalu Max mouse review

New Downloads
CPU-Z download v2.06
AMD Radeon Software Adrenalin 23.5.1 WHQL download
GeForce 532.03 WHQL driver download
AMD Chipset Drivers Download 5.05.16.529
Corsair Utility Engine Download (iCUE) Download v5.1 (5.1.1114 )
CrystalDiskInfo 9.0.0 RC3 Download
Intel ARC graphics Driver Download Version: 31.0.101.4369
Display Driver Uninstaller Download version 18.0.6.4
HWiNFO Download v7.46
7-Zip v23.00 Download


New Forum Topics
AMD Software: Adrenalin Edition 23.5.1 - Driver Download and Discussion NVIDIA GeForce Game Ready 532.03 WHQL Download & Discussion MSI AB / RTSS development news thread Extreme 4-Way Sli Tuning Voltage and clock problem with 6950xt The AMD Ryzen All In One Thread /Overclocking/Memory Speeds & Timings/Tweaking/Cooling Part 2 Guide for those ready to make the switch to Linux gaming German translation Old nvidia driver running new games Windows 11 to Include Native Support for 7-Zip, RAR, and Other Compression Formats




Guru3D.com » News » Intel Procs Again hit By Massive Vulnerability (called Spoiler)

Intel Procs Again hit By Massive Vulnerability (called Spoiler)

by Hilbert Hagedoorn on: 03/05/2019 04:17 PM | source: | 76 comment(s)
Intel Procs Again hit By Massive Vulnerability (called Spoiler)

Yeah, not exactly the most fun pun, but this is a spoiler alert. The vulnerability was given the name Spoiler and was discovered by the Worcester Polytechnic Institute and the University of Lübeck. it involves a leak in page mapping of working memory, making other attacks much easier to perform.

To perform tasks faster, speculative execution is applied to processes in working memory. In this case, data from the working memory is already cached in advance with so-called load and store instructions. However, if a physical memory address does not exist, data leaks away over the timing - the time it took to reach a physical memory address. The researchers mention , Rowhammer, cache and javascript attacks can be executed in merely seconds. 

-- The Register -- 

This security shortcoming can be potentially exploited by malicious JavaScript within a web browser tab, or malware running on a system, or rogue logged-in users, to extract passwords, keys, and other data from memory. An attacker therefore requires some kind of foothold in your machine in order to pull this off. The vulnerability, it appears, cannot be easily fixed or mitigated without significant redesign work at the silicon level.

Speculative execution, the practice of allowing processors to perform future work that may or may not be needed while they await the completion of other computations, is what enabled the Spectre vulnerabilities revealed early last year.

In a research paper distributed this month through pre-print service ArXiv, "SPOILER: Speculative Load Hazards Boost Rowhammer and Cache Attacks," computer scientists at Worcester Polytechnic Institute in the US, and the University of Lübeck in Germany, describe a new way to abuse the performance boost.

Intel has was notified of the problem on December 1st. According to the researchers, a solution via a software update is virtually impossible and can only be remedied with an adjustment in architecture. If this is done, it will undoubtedly lead to lower performance. Whether there is a solution is very doubtful.

Arm and AMD processors are not vulnerable to this attack.







« Download: GeForce 419.35 WHQL driver · Intel Procs Again hit By Massive Vulnerability (called Spoiler) · Nvidia expands RTX game bundle with Metro Exodus »

Related Stories

Intel Processor Refresh in Spring - 100 MHz bumps - 02/21/2019 10:10 AM
Earlier this week you've already read the funny news about a KFC edition, in the upcoming weeks more processors will be added into the lineup from Intel, they, however, all are refreshes mostly 100 M...

Shuttle launches DH370 Mini-PC for 6-core 8th Gen Intel Processors - 02/06/2019 09:49 AM
The 1.3-litre DH370 sports a new chassis design which accommodates Intel processors of the 8th generation for socket LGA1151v2, relies on the faster H370 chipset and offers a total of four USB 3.1 po...

Intel processor shortages to continue into 2Q19 says ASUS - 11/15/2018 10:01 AM
We've touched the topic a couple of times but it's now confirmed by ASUS as well. With the issues on 10nm fabrication, Intel is running out of fabrication space on 14nm, and they have a lot of proc...

Three new vulnerabilities in Intel processors discovered - L1TF - 08/15/2018 08:54 AM
Intel has announced that three new serious vulnerabilities have been discovered in its processors, allowing unauthorized access to data in the L1 cache. The vulnerabilities are named L1 Terminal Faul...

Intel Promotes Its Three Corporate Officers - 07/25/2018 05:05 AM
Intel today announced that its board of directors has promoted three corporate officers. "These promotions recognize the expanded scope and significance of the organizations for each of these pr...


16 pages 1 2 3 4 > »


fantaskarsef
Senior Member



Posts: 14586
Joined: 2014-07-21

#5646489 Posted on: 03/05/2019 03:50 PM
spec-exec is just the plague of anything security related.
Do not wait for a fix for this in any form, Intel still hasn't been able to fix four year old CPUs, and they seem to do nothing to get such issues with spec-exec out of their system.
Just one more reason I'm waiting for Zen 3000 CPUs...

icedman
Senior Member



Posts: 1259
Joined: 2013-02-22

#5646511 Posted on: 03/05/2019 04:28 PM
And with this any ipc advantage intel still had will be gone lol. looks like everything will be on who can get moar cores and or moar clock speed

RzrTrek
Senior Member



Posts: 2549
Joined: 2012-04-16

#5646514 Posted on: 03/05/2019 04:33 PM
Why do I get the feeling that Intel has been compromised by the intelligence agencies?

Kaarme
Senior Member



Posts: 3404
Joined: 2013-03-10

#5646520 Posted on: 03/05/2019 04:43 PM
Intel is well past caring already. Back when Spectre was revealed, Intel was somewhat worried, or at least acted as if it was. But in the end, today, Intel can't produce enough merchandise to meet the demand, no matter how high they set the prices. I bet this particular vulnerability earned wide yawns from Intel execs, nothing more.

SSD_PRO
Senior Member



Posts: 180
Joined: 2013-02-07

#5646524 Posted on: 03/05/2019 04:47 PM
Is a "Culnerability" a play on words I am ignorant to? Or just a typo in the title?

16 pages 1 2 3 4 > »


Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2023