[link] LVI - Hijacking Transient Execution with Load Value Injection

1 message · started by David Garcia on Mar 12, 2020

[link] LVI - Hijacking Transient Execution with Load Value Injection

From David Garcia · Mar 12, 2020

LVI is a new class of transient-execution attacks exploiting microarchitectural flaws in modern processors to inject attacker data into a victim program and steal sensitive data and keys from Intel SGX, a secure vault in Intel processors for your personal data.

LVI turns previous data extraction attacks around, like Meltdown, Foreshadow, ZombieLoad, RIDL and Fallout, and defeats all existing mitigations. Instead of directly leaking data from the victim to the attacker, we proceed in the opposite direction: we smuggle — "inject" — the attacker's data through hidden processor buffers into a victim program and hijack transient execution to acquire sensitive information, such as the victim’s fingerprints or passwords.

Crucially, LVI is much harder to mitigate than previous attacks, as it can affect virtually any access to memory. Unlike all previous Meltdown-type attacks, LVI cannot be transparently mitigated in existing processors and necessitates expensive software patches, which may slow down Intel SGX enclave computations 2 up to 19 times.

 

https://lviattack.eu/

-------------------------------------------------------------------- Cochise Linux Users Group Mailing List - cochiselinux@freelists.org For more information: https://cochiselinuxusergroup.org/ Mailing List Archive: https://www.freelists.org/archive/cochiselinux To unsubscribe: //www.freelists.org/list/cochiselinux

View original on FreeLists


Previous thread · Next thread

Back to March 2020