cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM для OSX, MAC, Intel Arch Компиляция: gcc -o a.out spectre.c Результат: 0x41414141 Также добавлен вывод Control Flow из Hopper.app для наглядного обучения. Вы можете настроить размер junk и получить более надежные чтения. В зависимости от активност...

retbleed-speculative-execution-poc

Retbleed: произвольное спекулятивное исполнение кода через переполнение RSB Практическое воспроизведение Retbleed CVE-2022-29900 / CVE-2022-29901 — микроархитектурной атаки 2022 года, которая сломала защиту «Retpoline», доказав, что инструкции ret, долгое время считавшиеся безопасными, могут быть...

spectre-attack-demo

Пример атаки Spectre Пример использования раскрытого эксплойта "Spectre" от 2 января 2018 года CVE-2017-5753 и CVE-2017-5715 Spectre нарушает изоляцию между различными приложениями. Он позволяет атакующему обмануть безошибочные программы, которые следуют лучшим практикам, заставив их раскрыть сво...

spectre-attack

Пример атаки Spectre Пример использования раскрытого эксплойта «Spectre» от 2 января 2018 года CVE-2017-5753 и CVE-2017-5715 Spectre нарушает изоляцию между различными приложениями. Он позволяет атакующему обманом заставить безошибочные программы, следующие лучшим практикам, раскрыть свои секреты...

AZL-105624 CVE-2026-54875 affecting package openvmm 0.1.0-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

ALPINE-CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105516 CVE-2026-54875 affecting package kata-containers 4.1.0.kata0-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

DEBIAN-CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

EUVD-2026-89006

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

CVE-2026-54875

OpenSSL versions 4.0, 3.6, 3.5, and 3.4 are vulnerable to a timing and cache side-channel on ARM64 and RISC-V platforms. The root cause is a non-constant-time optimized implementation of scalar point multiplication for SM2 private key operations, where execution time and cache-access patterns dep...

CVE-2026-54875: Observable Timing Discrepancy

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

PT-2026-102652

Name of the Vulnerable Software and Affected Versions OpenSSL versions 4.0 through 4.0.2 OpenSSL versions 3.6 through 3.6.4 OpenSSL versions 3.5 through 3.5.8 OpenSSL versions 3.4 through 3.4.7 Description On ARM64 and RISC-V platforms, the SM2 curve utilizes a scalar multiplication implementatio...

Astra Linux – Vulnerability in gnupg1

Libgcrypt before version 1.7.8 is vulnerable to a cache-side-channel attack that can lead to a complete failure of the RSA-1024 algorithm. This attack occurs when the left-to-right method is used for computing the sliding-window expansion. It is believed that the same attack also works on the...

HermiCache: Enclave-Aware Cache Replacement for Trusted Execution Environments

Trusted Execution Environments TEEs protect enclave memory from untrusted software but remain vulnerable to cache-based side-channel attacks due to shared microarchitectural resources. Existing countermeasures use techniques such as cache partitioning or randomization: these solutions are not ide...

ROS-20260819-73-0075

The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of a supervisor machine or other virtual machines. This can be achieved by implementing attacks through secondary channels,...

SLAC: Access-Driven CPU-To-GPU Side-Channel Attacks Via System-Level Cache on Apple Silicon

Modern heterogeneous System-on-Chip designs integrate CPU cores and a GPU that share a last-level cache LLC or system-level cache SLC. This sharing exposes a new cross-domain attack surface, and existing attacks on integrated platforms either exploit coarse-grained cache-occupancy contention or...

Exploit for Observable Discrepancy in Intel Atom_C

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...

CVE-2025-71203: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall number is a user-controlled value used to index into the syscall table. Use arrayindexnospec to clamp this value after the bounds check to prevent speculative...

MiracleLinux 3 : libgcrypt-1.4.4-7.AXS3 (AXSA:2013-678:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-678:01 advisory. Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version. Security issues fixed with this...