cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM 适用于 OSX, MAC, Intel Arch 编译: gcc -o a.out spectre.c 输出: 0x41414141 另外，为视觉学习者添加了来自 Hopper.app 的控制流输出 您可以调整垃圾数据大小以获得更可靠的读取结果 根据CPU活动情况，在具有小缓存的老旧设备上，当活动频繁时，命中率较低。...

spectre-attack

Spectre 攻击示例 使用 2018 年 1 月 2 日披露的“Spectre”漏洞利用的示例（CVE-2017-5753 和 CVE-2017-5715） Spectre 打破了不同应用程序之间的隔离。它允许攻击者诱骗遵循最佳实践的无错误程序泄露其秘密。事实上，这些最佳实践的安全性检查反而增加了攻击面，并可能使应用程序更容易受到 Spectre 攻击。 Spectre 论文 - Spectre 论文及代码来源 语言 C 语言，使用以下库： stdio.h stdint.h intrin.h - 用于 rdtscp 和 clflush 示例的功能是什么？ 我们将文本 "The...

retbleed-speculative-execution-poc

Retbleed: Ejecución Arbitraria de Código Especulativo mediante Desbordamiento del RSB Una reproducción práctica de Retbleed CVE-2022-29900 / CVE-2022-29901 — el ataque microarquitectónico de 2022 que rompió la defensa "Retpoline" al demostrar que las instrucciones ret, consideradas seguras durant...

spectre-attack-demo

Spectre 攻击示例 使用2018年1月2日披露的“Spectre”漏洞（CVE-2017-5753和CVE-2017-5715）的示例 Spectre打破了不同应用程序之间的隔离。它允许攻击者欺骗那些遵循最佳实践的无错误程序，使其泄露秘密。事实上，这些最佳实践的安全检查反而增加了攻击面，并可能使应用程序更容易受到Spectre攻击。 Spectre paper - Spectre论文及代码来源 语言 C语言，使用库： stdio.h stdlib.h stdint.h intrin.h - 用于 rdtscp 和 clflush 示例的作用是什么？ 我们在内存中放入文本 “The...

AZL-105516 CVE-2026-54875 affecting package kata-containers 4.1.0.kata0-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

ALPINE-CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105624 CVE-2026-54875 affecting package openvmm 0.1.0-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

DEBIAN-CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

CVE-2026-54875

OpenSSL versions 4.0, 3.6, 3.5, and 3.4 are vulnerable to a timing and cache side-channel on ARM64 and RISC-V platforms. The root cause is a non-constant-time optimized implementation of scalar point multiplication for SM2 private key operations, where execution time and cache-access patterns dep...

EUVD-2026-89006

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

PT-2026-102652

Name of the Vulnerable Software and Affected Versions OpenSSL versions 4.0 through 4.0.2 OpenSSL versions 3.6 through 3.6.4 OpenSSL versions 3.5 through 3.5.8 OpenSSL versions 3.4 through 3.4.7 Description On ARM64 and RISC-V platforms, the SM2 curve utilizes a scalar multiplication implementatio...

Astra Linux – Vulnerability in gnupg1

Libgcrypt before version 1.7.8 is vulnerable to a cache-side-channel attack that can lead to a complete failure of the RSA-1024 algorithm. This attack occurs when the left-to-right method is used for computing the sliding-window expansion. It is believed that the same attack also works on the...

ROS-20260819-73-0075

The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of a supervisor machine or other virtual machines. This can be achieved by implementing attacks through secondary channels,...

Exploit for Observable Discrepancy in Intel Atom_C

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...

CVE-2025-71203: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall number is a user-controlled value used to index into the syscall table. Use arrayindexnospec to clamp this value after the bounds check to prevent speculative...

MiracleLinux 3 : libgcrypt-1.4.4-7.AXS3 (AXSA:2013-678:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-678:01 advisory. Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version. Security issues fixed with this...

MiracleLinux 4 : libgcrypt-1.4.5-11.AXS4 (AXSA:2014-002:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-002:01 advisory. Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version. Security issues fixed with this...

EUVD-2025-202587

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

CVE-2025-63094

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...