Transcription of Speculative Buffer Overflows: Attacks and Defenses
{{id}} {{{paragraph}}}
Speculative Buffer Overflows: Attacks and DefensesVladimir Attacks that exploit Speculative execution can leakconfidential information via microarchitectural side chan-nels. The recently-demonstrated Spectre Attacks leveragespeculative loads which circumvent access checks to readmemory-resident secrets, transmitting them to an attackerusing cache timing or other covert communication , a new Spectre-v1 variant thatleverages speculativestoresto createspeculative Buffer over-flows. Much like classic Buffer overflows, Speculative out-of-bounds stores can modify data and code pointers.
1.1 Spectre1.1: Bounds Check Bypass on Stores Code vulnerable to Spectre1.1 is shown in Listing 2. During speculative execution, the processor may ignore the bounds
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}