Researchers have discovered seven new Spectre and Meltdown vulnerabilities

Researchers have discovered seven new Spectre and Meltdown vulnerabilities 1
The big picture: Spectre and Meltdown had a lot of security researchers’ jaws dropping and had the tech community in a bit of a frenzy. But there’s little need to panic over these new attacks; they’re simply variations of the original attacks that ‘should’ already be stopped by the patches for existing vulnerabilities.

A team of nine researchers, that includes several of the researchers that discovered the original Spectre and Meltdown, have found seven new attack paths. All of them have been successfully demonstrated with proof-of-concept code.

Two of them exploit the Meltdown vulnerability. Meltdown-BR exploits x86 instruction paths in AMD and Intel processors, while Meltdown-PK bypasses memory protection keys exclusively on Intel processors. The researchers actually developed eight Meltdown attacks but have yet to get the remaining six to work.

The remaining five are all variations of Spectre, and they affect Intel, AMD and ARM processors. Two of them exploit the Branch Target Buffer while the other three exploit the Pattern History Table.

“Meltdown breaks the most fundamental isolation between user applications and the operating system. This attack allows a program to access the memory, and thus also the secrets, of other programs and the operating system.”

The researchers reported the attacks to all the major chip vendors, but they aren’t too happy with the responses they’ve received. Apparently, AMD didn’t even acknowledge their results and Intel disagrees with them about whether or not a new patch is required.

Intel issued the following statement:

The vulnerabilities documented in this paper can be fully addressed by applying existing mitigation techniques for Spectre and Meltdown, including those previously documented here, and elsewhere by other chipmakers. Protecting customers continues to be a critical priority for us and we are thankful to the teams at Graz University of Technology, imec-DistriNet, KU Leuven, & the College of William and Mary for their ongoing research.

According to their research, some existing patches may work, but not all. Intel, however, claims that their experimental process was faulty and that in a real-world situation their attacks would not be successful. The researchers decided to ignore Intel and have outlined how to patch the vulnerabilities themselves in their research paper.

“Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets.”

Remember though, no actual attack that exploits Spectre or Meltdown has ever been discovered in “the wild.” It was expected that various off-shoots of the original attacks would be discovered, such as these. Keep your devices up to date and you’ll have nothing to worry about.

About the author

E-Crypto News was developed to assist all cryptocurrency investors in developing profitable cryptocurrency portfolios through the provision of timely and much-needed information. Investments in cryptocurrency require a level of detail, sensitivity, and accuracy that isn’t required in any other market and as such, we’ve developed our databases to help fill in information gaps.

Related Posts

E-Crypto News Executive Interviews



bitcoin
Bitcoin (BTC) $ 63,283.00
ethereum
Ethereum (ETH) $ 4,216.09
binance-coin
Binance Coin (BNB) $ 486.83
tether
Tether (USDT) $ 1.00
cardano
Cardano (ADA) $ 2.17
solana
Solana (SOL) $ 212.59
xrp
XRP (XRP) $ 1.10
polkadot
Polkadot (DOT) $ 44.53
dogecoin
Dogecoin (DOGE) $ 0.263397
usd-coin
USD Coin (USDC) $ 1.01
USD
EUR
GBP
bitcoinBitcoin (BTC)
$ 63,283.00
ethereumEthereum (ETH)
$ 4,216.09
tetherTether (USDT)
$ 1.00
bitcoin-cashBitcoin Cash (BCH)
$ 626.64
litecoinLitecoin (LTC)
$ 195.84
bitcoinBitcoin (BTC)
54.335,04
ethereumEthereum (ETH)
3.619,95
tetherTether (USDT)
0,858604
bitcoin-cashBitcoin Cash (BCH)
538,04
litecoinLitecoin (LTC)
168,15
bitcoinBitcoin (BTC)
45,990.54
ethereumEthereum (ETH)
3,064.02
tetherTether (USDT)
0.726744
bitcoin-cashBitcoin Cash (BCH)
455.41
litecoinLitecoin (LTC)
142.33

Automated trading with HaasBot Crypto Trading Bots

Crypto Scams

Behind The Scenes: How this Crypto Community Responded to + $50m Hack
October 18, 2021
Crypto Scams
Crypto Scams Still Persistent In 2021, SEC Warns About Red Flags To Watch
September 9, 2021
Poly Network
Here’s How Hackers Stole Over $600 million in the Poly Network Attack
August 12, 2021
The World’s Most Infamous Crypto Hacks and Scams
July 31, 2021
Cryptocurrency Exchanges
Cryptocurrency Exchanges and the Plague of Scams and Bans
June 29, 2021

Blockchain/Cryptocurrency Questions and Answers

ICo Presale
The Science Behind ICO Presales…
October 14, 2021
Beginner’s Guide to Investing in Cryptocurrency
August 9, 2021
Short-Sell Cryptocurrency
How to Short-Sell Cryptocurrency: A Brief Overview
July 17, 2021
Klaytn
What Is Klaytn (KLAY) And How Does It Work?
July 16, 2021
Cryptocurrencies
Our Crypto Roundup Interview Asks- Do Cryptocurrencies Have a Future?
July 15, 2021


CryptoCurrencyUSDChange 1hChange 24hChange 7d
Bitcoin63,232 0.26 % 4.20 % 2.68 %
Ethereum4,213.7 0.32 % 4.59 % 9.33 %
Binance Coin486.46 0.53 % 2.65 % 3.37 %
Tether0.9986 0.03 % 0.08 % 0.23 %
Cardano2.160 0.06 % 2.18 % 0.22 %
Solana212.81 0.42 % 11.43 % 33.12 %
XRP1.100 0.60 % 2.18 % 0.42 %
Polkadot30.87 2.19 % 17.29 % 10.73 %
Dogecoin0.2633 0.81 % 0.06 % 10.65 %
USD Coin1.000 0.14 % 0.20 % 0.17 %

bitcoin
Bitcoin (BTC) $ 63,283.00
ethereum
Ethereum (ETH) $ 4,216.09
binance-coin
Binance Coin (BNB) $ 486.83
tether
Tether (USDT) $ 1.00
cardano
Cardano (ADA) $ 2.17
solana
Solana (SOL) $ 212.59
xrp
XRP (XRP) $ 1.10
polkadot
Polkadot (DOT) $ 44.53
dogecoin
Dogecoin (DOGE) $ 0.263397
usd-coin
USD Coin (USDC) $ 1.01