CVE-2021-42114

🗓️ 16 Nov 2021 11:45:20Reported by NCSC.chType

Modern DRAM devices affected by internal TRR vulnerability against Rowhammer attacks. Blacksmith fuzzer triggers bit flips on all major DRAM manufacturers' chips. Enables privilege-escalation attacks against kernel, binaries, and RSA-2048 keys

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the internal protection mechanism for the target string (TRR) of DRAM devices (PC-DDR4, LPDDR4X) allows attackers to enhance their privileges.	17 Nov 202100:00	–	bdu_fstec
Circl	CVE-2021-42114	16 Nov 202119:47	–	circl
CNNVD	Ddr4 Dram 安全漏洞	15 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-42114 Scalable Rowhammering In the Frequency Domain to Bypass TRR Mitigations On Modern DDR4/LPDDR4X Devices	16 Nov 202111:45	–	cvelist
EUVD	EUVD-2021-29099	3 Oct 202520:07	–	euvd
NVD	CVE-2021-42114	16 Nov 202112:15	–	nvd
Prion	Privilege escalation	16 Nov 202112:15	–	prion
RedhatCVE	CVE-2021-42114	16 Nov 202114:44	–	redhatcve
SUSE CVE	SUSE CVE-2021-42114	15 Feb 202303:37	–	susecve
The Hacker News	New Blacksmith Exploit Bypasses Current Rowhammer Attack Defenses	16 Nov 202116:48	–	thn

NVD

Node

samsung ddr4_sdram_firmwareMatch-

AND

samsung ddr4_sdramMatch-

Node

samsung lddr4_firmwareMatch-

AND

samsung lddr4Match-

Node

micron lddr4_firmwareMatch-

AND

micron lddr4Match-

Node

micron ddr4_sdram_firmwareMatch-

AND

micron ddr4_sdramMatch-

Node

skhynix ddr4_sdram_firmwareMatch-

AND

skhynix ddr4_sdramMatch-

Node

skhynix lddr4_firmwareMatch-

AND

skhynix lddr4Match-

[
  {
    "product": "Micron ddr4_sdram",
    "vendor": "Micron",
    "versions": [
      {
        "status": "affected",
        "version": "1"
      }
    ]
  },
  {
    "product": "Samsung ddr4_sdram",
    "vendor": "Samsung",
    "versions": [
      {
        "status": "affected",
        "version": "1"
      }
    ]
  },
  {
    "product": "SK Hynix ddr4_sdram",
    "vendor": "SK Hynix",
    "versions": [
      {
        "status": "affected",
        "version": "1"
      }
    ]
  },
  {
    "product": "Micron lpddr4",
    "vendor": "Micron",
    "versions": [
      {
        "status": "affected",
        "version": "1"
      }
    ]
  },
  {
    "product": "Samsung lpddr4",
    "vendor": "Samsung",
    "versions": [
      {
        "status": "affected",
        "version": "1"
      }
    ]
  },
  {
    "product": "SK Hynix lpddr4",
    "vendor": "SK Hynix",
    "versions": [
      {
        "status": "affected",
        "version": "1"
      }
    ]
  }
]

Source	Link
comsec	www.comsec.ethz.ch/research/dram/blacksmith/
github	www.github.com/comsec-group/blacksmith
comsec	www.comsec.ethz.ch/wp-content/files/blacksmith_sp22.pdf

21 Nov 2024 06:27Current

8.2High risk

Vulners AI Score8.2

CVSS 27.9

CVSS 3.18.3 - 9

EPSS0.0084

CWE-20