New BlindSide attack uses speculative execution to bypass ASLR

[silversurfer]

Content source

https://www.zdnet.com/article/new-blindside-attack-uses-speculative-execution-to-bypass-aslr/

Academics have developed a new technique for attacking secure computer systems by abusing speculative execution, a CPU mechanism that's normally used for performance optimizations.

The technique, named BlindSide, was detailed in a paper [PDF] published last week by a team of academics from the Stevens Institute of Technology in New Jersey, ETH Zurich, and the Vrije University in Amsterdam.

Researchers say that BlindSide can be used to craft exploits that bypass ASLR (Address Space Layout Randomization) on modern operating systems.

Read more below:

New BlindSide attack uses speculative execution to bypass ASLR

New BlindSide technique abuses the CPU's internal performance-boosting feature to bypass OS security protection.

www.zdnet.com