Published: 25/02/2020 Updated: 05/03/2020

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 10 | Impact Score: 6 | Exploitability Score: 3.9

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google native client 2015

Sources: googleprojectzeroblogspotca/2015/03/exploiting-dram-rowhammer-bug-to-gainhtml codegooglecom/p/google-security-research/issues/detail?id=284 Full PoC: githubcom/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/36311targz This is a proof-of-concept exploit that is able to escape from Native Cl ...

Sources: googleprojectzeroblogspotca/2015/03/exploiting-dram-rowhammer-bug-to-gainhtml codegooglecom/p/google-security-research/issues/detail?id=283 Full PoC: githubcom/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/36310targz This is a proof-of-concept exploit that is able to gain kernel privileges ...

C++ on the Web: ponies for developers without pwn’ing users

C++ on the Web Ponies for developers without pwn'ing users Author: JF Bastien Abstract Delivering a program through a web browser really shouldn't force it to be slower than executing it directly on your OS Similarly, doing so shouldn't force you to rewrite programs that target venerable, cornerstone native programming APIs—modern C++ STL, OpenGL, f

A write up of a byte flip zero day vulnerability and exploit

xerobyte What is it & how does it work xerobyte is an exploit that takes advantage of an unintended and undesirable side effect in dynamic random-access memory (DRAM) in which memory cells interact electrically between themselves by leaking their charges, possibly changing the contents of nearby memory rows that were not addressed in the original memory access (Turning

CWE-119 https://www.exploit-db.com/exploits/36310/https://www.exploit-db.com/exploits/36311/https://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html https://nvd.nist.gov https://github.com/jfbastien/ponies https://www.exploit-db.com/exploits/36311/

CVE-2015-0565

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect