Details of VAR-201503-0498

ID

VAR-201503-0498

TITLE

DRAM 'Rowhammer' Memory Bit Flipping Privilege Escalation Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2015-01688

DESCRIPTION

DRAM is dynamic random access memory, the most common system memory. DRAM devices have security vulnerabilities that allow local users to run programs, continuously access DRAM, flip a cell's value from 1 to 0, or conversely, boost privileges and execute arbitrary code.

Trust: 0.6

sources: CNVD: CNVD-2015-01688

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2015-01688

AFFECTED PRODUCTS

vendor:

dram

model:

dram

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2015-01688

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2015-01688
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2015-01688
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2015-01688

EXTERNAL IDS

db:

CNVD

id:

CNVD-2015-01688

Trust: 0.6

sources: CNVD: CNVD-2015-01688

REFERENCES

url:

http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html

Trust: 0.6

sources: CNVD: CNVD-2015-01688

SOURCES

db:

CNVD

id:

CNVD-2015-01688

LAST UPDATE DATE

2022-05-04T09:48:02.291000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2015-01688

date:

2015-03-17T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2015-01688

date:

2015-03-17T00:00:00