CAPEC-663 Exploitation of Transient Instruction Execution

Abstraktion: standardStatus: active

An adversary exploits a hardware design flaw in a CPU implementation of transient instruction execution to expose sensitive data and bypass/subvert access control over restricted resources. Typically, the adversary conducts a covert channel attack to target non-discarded microarchitectural changes caused by transient executions such as speculative execution, branch prediction, instruction pipelining, and/or out-of-order execution. The transient execution results in a series of instructions (gadgets) which construct covert channel and access/transfer the secret data.

Wahrscheinlichkeit: LowSchweregrad: Very High
01

Schwächen (3)

Die CWE-Schwächeklassen, zu denen dies gehört.

02

verwandte Angriffsmuster (3)

Verwandte Einträge.

03

Quelle

Wo diese Definition veröffentlicht ist.