SpecuCheck

SpecuCheck SpecuCheck is a Windows utility for checking the state of the software and hardware mitigations against CVE-2017-5754 Meltdown, CVE-2017-5715 Spectre v2, CVE-2018-3260 Foreshadow, and CVE-2018-3639 Spectre v4. It uses two new information classes that were added to the...

Am-I-affected-by-Meltdown

¿Estoy afectado por Meltdown?! Comprobador de Meltdown CVE-2017-5754 ¿Qué soy? Prueba de concepto / Exploit / Comprueba si el sistema está afectado por la Variante 3: carga de datos de caché no autorizada CVE-2017-5754, también conocido como MELTDOWN. La idea básica es que el usuario sabrá si el...

In-Spectre-Meltdown

推测执行侧信道攻击检测工具 In-Spectre-Meltdown 本工具用于检测影响众多现代处理器和操作系统设计的推测执行侧信道攻击。CVE-2017-5754（熔断）和 CVE-2017-5715（幽灵）允许非特权进程窃取特权进程的机密信息。这些攻击提供了三种不同的方式突破 CPU 的数据保护措施，使攻击者能够读取本不应读取的数据。...

Am-I-affected-by-Meltdown

¿Estoy afectado por Meltdown?! Comprobador de Meltdown CVE-2017-5754 ¿Qué soy? Prueba de concepto / Exploit / Comprueba si el sistema está afectado por la Variante 3: rogue data cache load CVE-2017-5754, también conocido como MELTDOWN. La idea básica es que el usuario sabrá si el sistema en...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list...

spectre-meltdown-checker

Spectre & Meltdown Checker 一个独立的 Shell 脚本，用于评估您的系统在面对自 2018 年初以来发布的多个瞬态执行 CVE 时的抵御能力，并指导您如何缓解它们。 CVE 列表 CVE| 名称| 别名 ---|---|--- CVE-2017-5753| 边界检查绕过| Spectre V1 CVE-2017-5715| 分支目标注入| Spectre V2 CVE-2017-5754| 恶意数据缓存加载| Meltdown CVE-2018-3640| 恶意系统寄存器读取| Variant 3a CVE-2018-3639| 预测存储绕过| Variant...

Meltdown

Meltdown PoC para Meltdown en linux CVE-2017-5754 Uso root@kitploit: cd meltdown make ./meltdown address size Ejemplo Referencia http://zzado.tistory.com/category/Report...

meltdown-aws-scanner

meltdown-aws-scanner Script de shell sencillo para verificar el estado del parche de Meltdown CVE-2017-5754 en instancias EC2 Requisitos aws cli con una configuración funcional Uso del script Escanear todas las instancias EC2 en la cuenta y región predeterminadas root@kitploit: $ ./checkmeltdown....

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...

meltdown-exploit

MELTDOWN 漏洞利用概念验证 推测执行以不安全的方式执行代码，会在微架构（如缓存）中留下数据痕迹。 Lipp 等人于 2018 年 1 月 9 日在 https://github.com/IAIK/meltdown 发布了他们的代码。详情请参考他们的论文：https://meltdownattack.com/meltdown.pdf。 目前只能转储 linuxprocbanner，因为所需内存必须在缓存中，而每次读取 /proc/version 时 linuxprocbanner 都会被缓存。可能与 prefetch 配合使用。与 schedyield 配合使用。 使用 make...

meltdown-spectre-bios-list

Lista de actualizaciones de BIOS/Firmware para Meltdown/Spectre Esta es una lista de todos los productos y fabricantes que han parcheado BIOS/Firmware para abordar las vulnerabilidades Meltdown y Spectre Si tienes mejor información, por favor envía pull requests. ¿Por qué hice esto? para tener un...

spectre-meltdown-checker-26.36.0602723-1.1 on GA media (moderate)

spectre-meltdown-checker-26.36.0602723-1.1 on GA media Announcement ID: openSUSE-SU-2026:11242-1 Rating: moderate Cross-References: CVE-2017-5715 CVE-2017-5753 CVE-2018-3615 CVE-2018-3620 CVE-2018-3640 CVE-2019-11157 CVE-2020-0543 CVE-2020-12965 CVE-2020-8694 CVE-2021-26318 CVE-2022-21123...

OPENSUSE-SU-2026:11242-1 spectre-meltdown-checker-26.36.0602723-1.1 on GA media

These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: Aspera Products and the Meltdown and Spectre vulnerabilities (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754)

Question Security Bulletin: Aspera Products and the Meltdown and Spectre vulnerabilities CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM...

OESA-2026-1338 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: md/dm-raid: don't call mdreapsyncthread directly Currently mdreapsyncthread is called from raidmessage directly without holding 'reconfigmutex', this is definite...

EUVD-2018-11635

Malware in sbrugna...

EUVD-2023-51002

Malicious code in bioql PyPI...

Exploit for Observable Discrepancy in Intel Atom_C

This is a tool for checking the state of software mitigations against Spectre and Meltdown vulnerabilities. It uses the NtQuerySystemInformation API call to report the data as seen by the Windows Kernel. The tool is currently optimized for Microsoft Windows 7-10 and uses the best-working exploit...

Linux Distros Unpatched Vulnerability : CVE-2018-19965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service host OS crash because GP0 can occur after a...

Design High-Confidence Computers Using Trusted Instructional Set Architecture and Emulators

High-confidence computing relies on trusted instructional set architecture, sealed kernels, and secure operating systems. Cloud computing depends on trusted systems for virtualization tasks. Branch predictions and pipelines are essential in improving performance of a CPU/GPU. But Spectre and...