Papers

Published on May 12th, 2021 📆 | 4715 Views ⚑

0

SMASH: Synchronized Many-Sided Rowhammer Attacks From JavaScript

iSpeech.org

SMASH: Synchronized Many-Sided Rowhammer Attacks From JavaScript

Posted Apr 15, 2021

Authored by Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Pietro Frigo, Emanuele Vannacci, Finn de Ridder

In this paper, the authors show that under realistic assumptions, it is indeed possible to bypass TRR directly from JavaScript, allowing attackers to exploit the resurfaced Rowhammer bug inside the browser. In addition, their analysis reveals new requirements for practical TRR evasion. For instance, they discovered that activating many rows in rapid succession as shown in TRRespass may not always be sufficient to produce bit flips. The scheduling of DRAM accesses also plays an important role.

tags | paper, javascript

MD5 | 836e85101be3fa403bf5501797e73520

Download | Favorite | View

Source link

Tagged with: advisory • attacks • CSRF • exploit • javascript • ManySided • overflow • rowhammer • scanner • security • sided • smash • synchronized • vulnerability • whitepaper • XSS