CVE-2017-5715 PoC — Intel和ARM CPU芯片信息泄露漏洞

Source

https://github.com/GregAskew/SpeculativeExecutionAssessment

Associated Vulnerability

Title:Intel和ARM CPU芯片信息泄露漏洞 (CVE-2017-5715)
Description:Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Description

Assesses a system for the "speculative execution" vulnerabilities described in CVE-2017-5715, CVE-2017-5753, CVE-2017-5754

Readme

# SpeculativeExecutionAssessment
Assesses a system for the "speculative execution" vulnerabilities described in:
 CVE-2017-5715 (branch target injection)
 CVE-2017-5753 (bounds check bypass)
 CVE-2017-5754 (rogue data cache load)

WARNING: Ensure that "Prefer 32-bit" is not checked in the build options.
Requires elevated permissions
Mitigiation requires:
 1. Set the registry value indicating the antivirus/security product is compatible with the Windows update
 2. Install the Windows operating system update (part of the January 2018 Security Monthly Quality Rollup)
 3. Enable the registry settings
 4. Update the hardware/firmware
 5. On virtual platforms, the hypervisor must be updated (or for Hyper-V, it may be reconfigured)

File Snapshot


 [4.0K]  /data/pocs/2a69a1fa93baba51761efede065eaca29726e029
├── [4.0K]  Collateral
│   ├── [4.0K]  Archive
│   │   ├── [4.0K]  2018-04-11
│   │   │   ├── [ 30K]  SpeculationControl.psd1
│   │   │   └── [ 24K]  SpeculationControl.psm1
│   │   ├── [4.0K]  2018-06-11
│   │   │   ├── [ 30K]  SpeculationControl.psd1
│   │   │   └── [ 26K]  SpeculationControl.psm1
│   │   └── [4.0K]  2018-08-21
│   │       ├── [ 30K]  SpeculationControl.psd1
│   │       └── [ 28K]  SpeculationControl.psm1
│   ├── [ 31K]  SpeculationControl.psd1
│   └── [ 28K]  SpeculationControl.psm1
├── [1.0K]  LICENSE
├── [ 735]  README.md
├── [4.0K]  SpeculativeExecutionAssessment
│   ├── [ 180]  App.config
│   ├── [3.0K]  Enums.cs
│   ├── [2.6K]  GlobalSuppressions.cs
│   ├── [1.9K]  InternalExtensions.cs
│   ├── [ 31K]  Program.cs
│   ├── [4.0K]  Properties
│   │   └── [1.4K]  AssemblyInfo.cs
│   ├── [ 27K]  SpeculativeExecutionAssessment.cs
│   └── [2.8K]  SpeculativeExecutionAssessment.csproj
└── [1.1K]  SpeculativeExecutionAssessment.sln

7 directories, 19 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!