CVE-2017-5927 Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU oper...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Allwinner a64 | All versions | No fix listed |
| amd athlon ii 640 x4 | All versions | No fix listed |
| amd e-350 | All versions | No fix listed |
| amd fx-8120 8-core | All versions | No fix listed |
| amd fx-8320 8-core | All versions | No fix listed |
| amd fx-8350 8-core | All versions | No fix listed |
| amd phenom 9550 4-core | All versions | No fix listed |
| intel atom c2750 | All versions | No fix listed |
| intel celeron n2840 | All versions | No fix listed |
| intel core i5 m480 | All versions | No fix listed |
| intel core i7-2620qm | All versions | No fix listed |
| intel core i7-3632qm | All versions | No fix listed |
| intel core i7-4500u | All versions | No fix listed |
| intel core i7-6700k | All versions | No fix listed |
| intel core i7 920 | All versions | No fix listed |
| intel xeon e3-1240 v5 | All versions | No fix listed |
| intel xeon e5-2658 v2 | All versions | No fix listed |
| NVIDIA tegra k1 cd570m-a1 | All versions | No fix listed |
| NVIDIA tegra k1 cd580m-a1 | All versions | No fix listed |
| samsung exynos 5800 | All versions | No fix listed |
References
- www.cs.vu.nl exploit technical-description third-party-advisory
- 96459 vdb-entry
- www.vusec.net exploit technical-description third-party-advisory