spectre-meltdown-checker

Spectre & Meltdown Checker システムの、2018年初頭以降に公開された複数のTransient Execution関連CVEに対する耐性を評価し、その軽減方法をガイダンスする、自己完結型のシェルスクリプトです。 CVE一覧 CVE| 名称| 別名 ---|---|--- CVE-2017-5753| 境界チェックバイパス| Spectre V1 CVE-2017-5715| ブランチターゲットインジェクション| Spectre V2 CVE-2017-5754| Rogue Data Cache Load| Meltdown CVE-2018-3640| Rog...

In-Spectre-Meltdown

In-Spectre-Meltdown このツールは、多くの最新プロセッサおよびオペレーティングシステムの設計に影響を与える投機的実行サイドチャネル攻撃をチェックするためのものです。CVE-2017-5754（Meltdown）およびCVE-2017-5715（Spectre）により、非特権プロセスが特権プロセスから機密情報を盗み出すことが可能になります。これらの攻撃は、CPU上のデータ保護対策を侵害する3つの異なる方法を提供し、攻撃者が本来読めないデータを読み取ることを可能にします。...

spectre-meltdown-checker-26.36.0602723-1.1 on GA media (moderate)

spectre-meltdown-checker-26.36.0602723-1.1 on GA media Announcement ID: openSUSE-SU-2026:11242-1 Rating: moderate Cross-References: CVE-2017-5715 CVE-2017-5753 CVE-2018-3615 CVE-2018-3620 CVE-2018-3640 CVE-2019-11157 CVE-2020-0543 CVE-2020-12965 CVE-2020-8694 CVE-2021-26318 CVE-2022-21123...

OPENSUSE-SU-2026:11242-1 spectre-meltdown-checker-26.36.0602723-1.1 on GA media

These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed...

Design High-Confidence Computers Using Trusted Instructional Set Architecture and Emulators

High-confidence computing relies on trusted instructional set architecture, sealed kernels, and secure operating systems. Cloud computing depends on trusted systems for virtualization tasks. Branch predictions and pipelines are essential in improving performance of a CPU/GPU. But Spectre and...

OPENSUSE-SU-2024:13183-1 spectre-meltdown-checker-0.46-1.1 on GA media

These are all security issues fixed in the spectre-meltdown-checker-0.46-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11396-1 spectre-meltdown-checker-0.44-1.2 on GA media

These are all security issues fixed in the spectre-meltdown-checker-0.44-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE: Security Advisory (SUSE-SU-2024:0884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:0885-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : spectre-meltdown-checker (SUSE-SU-2024:0885-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0885-1 advisory. - updated to 0.46 This release mainly focuses on the detection of the new Zenbleed CVE-2023-20593 vulnerability, among few other changes tha...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : spectre-meltdown-checker (SUSE-SU-2024:0884-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0884-1 advisory. - updated to 0.46 This release mainly focuses on the detection of the new Zenbleed CVE-2023-20593...

SUSE-SU-2024:0885-1 Security update for spectre-meltdown-checker

This update for spectre-meltdown-checker fixes the following issues: - updated to 0.46 This release mainly focuses on the detection of the new Zenbleed CVE-2023-20593 vulnerability, among few other changes that were in line waiting for a release: - feat: detect the vulnerability and mitigation of...

SUSE-SU-2024:0884-1 Security update for spectre-meltdown-checker

This update for spectre-meltdown-checker fixes the following issues: - updated to 0.46 This release mainly focuses on the detection of the new Zenbleed CVE-2023-20593 vulnerability, among few other changes that were in line waiting for a release: - feat: detect the vulnerability and mitigation of...

Fedora: Security Advisory for spectre-meltdown-checker (FEDORA-2023-7228464f28)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : spectre-meltdown-checker (2023-7228464f28)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7228464f28 advisory. This release mainly focuses on the detection of the new Zenbleed CVE-2023-20593 vulnerability, among few other changes that were in line waiting for a releas...

CVE-2022-42331

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work XSA-254, one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variet...

Code injection

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work XSA-254, one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variet...

CVE-2022-42331

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work XSA-254, one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variet...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a security vulnerability th...

Spock SLAF - A Shared Library Application Firewall "SLAF"

Spock SLAF is a Shared Library Application Firewall "SLAF". It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks like buffer overflow, path traversal, XXE and SQL...