NetSpectre Vulnerability Can Reveal Arbitrary Memory Over Network

Written by Michael Larabel in Linux Security on 27 July 2018 at 12:05 AM EDT. 11 Comments
LINUX SECURITY
NetSpectre is a new network-based speculative attack vulnerability that doesn't require exploited code to be running on the target machine.

NetSpectre is a Spectre V1 style attack but for proper exploit requires precise timing among other caveats. The biggest caveat though is NetSpectre is only able to leak at an incredibly low rate of 15~60 bits per hour depending upon the processor.

Besides the slow rate of data leakage, if your system is patched against the other known Spectre vulnerabilities, it's believed you should be largely same from NetSpectre.

Those wishing to learn more about NetSpectre can do so via the whitepaper (PDF).
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week