CVE-2017-5754 PoC — Intel和ARM CPU芯片信息泄露漏洞

Source

Associated Vulnerability

Description

Proof-of-concept / Exploit / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a 

Readme

## Am I affected by Meltdown?! Meltdown (CVE-2017-5754) checker

![Alt text](https://github.com/raphaelsc/Am-I-affected-by-Meltdown/blob/master/images/melting.jpg)

#### What am I?

Proof-of-concept /

Exploit /

Checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.

The basic idea is that user will know whether or not the running system is properly patched with
something like KAISER patchset (https://lkml.org/lkml/2017/10/31/884) for example.

*** Only works on Linux for now ***

#### How it works?
It works by using */proc/kallsyms* to find system call table and checking whether the address of a
system call found by exploiting MELTDOWN match the respective one in */proc/kallsyms*.

#### What to do when you face this error "Unable to read /proc/kallsyms..."
That's because your system may be preventing the program from reading kernel symbols in /proc/kallsyms
due to /proc/sys/kernel/kptr_restrict set to 1.
The following command will do the tricky:
```
sudo sh -c "echo 0  > /proc/sys/kernel/kptr_restrict"
```
Please open an issue if you have an idea on how to fallback to another approach in this scenario.

#### Getting started
Run *make* to compile the project

#### Example output for a system affected by Meltdown:

![Alt text](https://github.com/raphaelsc/Am-I-affected-by-Meltdown/blob/master/images/output.png)

```
Checking whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN ...
Checking syscall table (sys_call_table) found at address 0xffffffffaea001c0 ...
0xc4c4c4c4c4c4c4c4 -> That's unknown
0xffffffffae251e10 -> That's SyS_write

System affected! Please consider upgrading your kernel to one that is patched with KAISER
Check https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html for more details
```

File Snapshot

 [4.0K]  /data/pocs/d056d779c582d94ddd635e44ad28f63cb890d0cf
├── [3.6K]  assembly_utils.hh
├── [4.0K]  images
│   ├── [ 14K]  melting.jpg
│   └── [ 76K]  output.png
├── [1.3K]  LICENSE
├── [ 231]  Makefile
├── [ 12K]  meltdown_checker.cc
└── [1.8K]  README.md

1 directory, 7 files

Remarks