Hardware security bug: Difference between revisions

Revision as of 15:19, 17 August 2020

Latest revision as of 20:51, 30 September 2022

(3 intermediate revisions by 3 users not shown)

Line 1:

{{short description|Hardware bug}}

In digital computing, '''hardware security bugs''' are [[hardware bug]]s or flaws that create [[Vulnerability (computing)|vulnerabilities]] affecting computer [[central processing unit]]s (CPUs), or other devices which incorporate programmable processors or logic and have [[direct memory access]], which allow data to be read by a rogue process when such reading is not authorized. Such vulnerabilities are considered "catastrophic" by security analysts.<ref> {{cite web

| url=https://www.schneier.com/blog/archives/2018/01/spectre_and_mel_1.html

Line 25 ⟶ 26:

==Speculative execution vulnerabilities==

Starting in 2017, a series of security vulnerabilities were found in the implementations of [[speculative execution]] on common processor architectures which effectively enabled an elevation of [[privilege (computing)|privileges]]. It was possible to mitigate these flaws with changes to [[microcode]].

These include:

* [[Spectre (security vulnerability)|Spectre]]

* [[Meltdown (security vulnerability)|Meltdown]]

* [[SPOILER_(security_vulnerability)|SPOILER]]

* [[Foreshadow (security vulnerability)|Foreshadow]]

* [[Meltdown (security vulnerability)|Meltdown]]

* [[Microarchitectural Data Sampling]]

* [[Spectre (security vulnerability)|Spectre]]

* [[SPOILER (security vulnerability)|SPOILER]]

* [[Pacman (security vulnerability)|Pacman]]

==Intel VISA==

In 2019 researchers discovered that a manufacturer debugging mode, known as VISA, had an undocumented feature on [[Intel Corporation|Intel]] Platform Controller Hubs, which are the chipsets included on most Intel-based motherboards and which have direct memory access, which made the mode accessible with a normal motherboard possibly leading to a security vulnerability.<ref name=toms>{{cite web|url=https://www.tomshardware.com/news/intel-visa-undocumented-feature-chipsets-cpus,38954.html|title=Intel Chipsets' Undocumented Feature Can Help Hackers Steal Data|work=Tom's Hardware|author=Lucian Armasu|date=29 March 2019 }}</ref>

== See also ==

Line 49 ⟶ 51:

[[category:Computer security]]

[[category:Computer security exploits]]

[[category:Hardware bugs]]