critical10.0Public exploit code
CVE-2015-0565
NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rowhammer - NaCl Sandbox Escape2015-03-09 · local · linux_x86-64 · Verified
- Linux Kernel (x86-64) - Rowhammer Privilege Escalation2015-03-09 · local · linux_x86-64 · Verified
Impact
NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Native Client | Version 2015 |
Weakness classification
References
- NVD record
- CVE.org record
- https://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html
- https://www.exploit-db.com/exploits/36310/
- https://www.exploit-db.com/exploits/36311/
- https://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html
- https://www.exploit-db.com/exploits/36310/
- https://www.exploit-db.com/exploits/36311/