Proposed an attack method for remotely determining memory fragments on the server
A group of researchers from Graz University of Technology (Austria), known for developing the MDS, NetSpectre, Throwhammer, and ZombieLoad attacks, has published a new side-channel attack method (CVE-2021-3714) on the memory deduplication mechanism, allowing the determination of whether certain data exists in memory, organization of bytewise leaks of memory content, or discovery of memory layouts to bypass address space layout randomization (ASLR) protections. From […]
