四類漏洞的使用前提
masterkey:
網頁提供的白皮書第9頁
https://i.imgur.com/mInI29z.png
ryzenfall:
網頁提供的白皮書第12頁
https://i.imgur.com/HxNMair.png
fallout:
網頁提供的白皮書第14頁
https://i.imgur.com/f6DfKtZ.png
chimera:
網頁提供的白皮書第18頁
https://i.imgur.com/M36VKio.png
理論上搭配別的漏洞是滿可怕的啦
但是這樣這些漏洞就需要combo技搭配
那上次那兩個漏洞呢?
這裡有個meltdown的學術報告
https://arxiv.org/abs/1801.01207
我截個重點給大家看好了
https://i.imgur.com/yddilkg.png
"The attack is independent of the operating system, and it does not rely on
any software vulnerabilities."
大guy4john，大家該幹嘛幹嘛去吧
※ 引述《b155073 ()》之銘言：
: 來源:https://amdflaws.com/
: 根據網站漏洞分為
: RYZENFALL
: FALLOUT
: CHIMERA
: MASTERKEY
: 主要有缺陷的部分有AMD Secure Processor
: 還有祥碩所設計的AMD Ryzen Chipset
: 其中文中特別標明
: AMD’s outsource partner, ASMedia, is a subsidiary of ASUSTeK Computer, a
: company with poor security track record that has been penalized by the
: Federal Trade Commission for neglecting security vulnerabilities, and must
: now undergo independent security audits for the next 20 years.
: 白皮書有提到
: The Ryzen chipset, a core system component that AMD outsourced to a Taiwanese
: chip
: manufacturer, ASMedia, is currently being shipped with exploitable
: manufacturer backdoors inside.
: These backdoors could allow attackers to inject malicious code into the chip.
: 祥碩惡名昭彰阿... 藏了後門在晶片組內
: 在zen+即將上場時被揭露漏洞
: 希望新的晶片組x470 b450會修復