CVE-2017-5927: Infoleak
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5927?
CVE-2017-5927 has a high severity rating as it allows for potential side-channel attacks, compromising data security.
How do I fix CVE-2017-5927?
To mitigate CVE-2017-5927, it is recommended to apply the latest firmware updates and patches provided by hardware manufacturers.
What systems are affected by CVE-2017-5927?
CVE-2017-5927 affects various ARM and Intel processors, including models from Allwinner, AMD, and Intel.
What type of attack does CVE-2017-5927 enable?
CVE-2017-5927 enables a side-channel attack on the Memory Management Unit (MMU), which can leak sensitive data.
Is there ongoing research related to CVE-2017-5927?
Yes, ongoing research is focused on understanding and mitigating the implications of side-channel vulnerabilities like CVE-2017-5927.