Category Archives: ASLR

A Simple JavaScript Exploit Bypasses ASLR Protection On 22 CPU Architectures

Posted on by

Security researchers have discovered a chip flaw that could nullify hacking protections for millions of devices regardless of their operating system or application running on them, and the worse — the flaw can not be entirely fixed with any mere software update.

The vulnerability resides in the way the memory management unit (MMU), a component of many CPUs, works and leads to bypass the

Continue reading A Simple JavaScript Exploit Bypasses ASLR Protection On 22 CPU Architectures→

ASLR^CACHE Attack Defeats Address Space Layout Randomization

Posted on by

Researchers from VUSec found a way to break ASLR via an MMU sidechannel attack that even works in JavaScript. Does this matter? Yes, it matters. A lot. The discovery of this security flaw along with the practical implementation is really important mainly because of two factors: what it means for ASLR to be broken and how the MMU sidechannel attack works inside the processor.

Address Space Layout Randomization or ASLR is an important defense mechanism that can mitigate known and, most importantly, unknown security flaws. ASLR makes it harder for a malicious program to compromise a system by, as the …read more

Continue reading ASLR^CACHE Attack Defeats Address Space Layout Randomization→