{"id":22220,"date":"2015-03-16T15:00:00","date_gmt":"2015-03-16T15:00:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/2015\/03\/16\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/"},"modified":"2015-03-16T15:00:00","modified_gmt":"2015-03-16T15:00:00","slug":"dram-rowhammer-allows-hackers-to-gain-kernel-privileges","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/","title":{"rendered":"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges"},"content":{"rendered":"

\"dram_rowhammer\"Google\u2019s \u201cProject Zero\u201d security initiative is bearing fruit, unearthing security issues we\u2019ve never seen before, in hopes of getting them patched before the hacking community can begin to exploit them. In this instance, the hack has nothing to do with software, but with RAM, making it an exceptionally dangerous, exotic bug.<\/p>\n

The technique, dubbed \u201cRowhammer\u201d by Yoongu Kim in a paper titled \u201cFlipping Bits in Memory Without Accessing Them,\u201d should be considered an unintended side effect of accessing memory, rather than a proper bug. It relies on the physical structure of certain DRAM chips, the memory components of which are arrayed in rows. By repeatedly accessing one \u201crow\u201d of memory, you can sometimes alter an adjacent row. In other words, hammer one row of memory, and you can disturb and adjacent region, thus, its name.<\/p>\n

As the title of this piece indicates, when done correctly, it can allow a hacker to gain kernel privileges, essentially giving them run of the entire machine.<\/p>\n

Google\u2019s Project Zero team tested a variety of laptops built between 2010 and 2014, using an assortment of DDR3 DRAM chips and found the vulnerability to be present in 15 of the 29 tested. Their report can be found here<\/a>.<\/p>\n

Manufacturers of these devices were aware of the problem but failed to report it or notify the public and instead regarded it as a simple reliability issue. The Google team, however, found a way to exploit the \u201creliability issue\u201d to gain control of the machine. Their conclusion is that if the companies manufacturing these machines with \u201creliability issues\u201d been more forthcoming, more attention would have been paid to the problem sooner and a patch or fix found. As it stands, they assumed that it would be too exotic and difficult to exploit.<\/p>\n

One Bright Spot<\/strong><\/p>\n

The good news in this case is that DDR4 DRAM chips are not vulnerable to Rowhammer style attacks. The bad news is that there are a number of machines in service today, built between 2010 and 2014 using potentially-vulnerable DDR3 DRAM.<\/p>\n

How Dangerous Is it?<\/strong><\/p>\n

It should be noted that the Google team was only able to gain kernel privileges using extraordinary techniques and exploits. This is not to say that it would be impossible for a determined hacker to do likewise, but in terms of threat level, this has to be regarded as fairly low. Is it cause for concern? Absolutely yes, because if such an attack were to succeed on your system a hacker could gain total control.<\/p>\n

The best way to reduce your exposure to zero is to upgrade to DDR4 DRAM. Is it likely to be exploited? That is impossible to say, but the odds seem low. It is not outside the realm of possibility, but bugs like FREAK and Heartbleed from several months ago represent a much greater, more immediate threat and should be handled with greater urgency.<\/p>\n

Kudos to the Google Project Zero team for bringing another security flaw to light. This one might not be as dire as some of the others we\u2019ve seen in recent months, but it still bears further investigation.<\/p>\n

Used with permission from Article Aggregator<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Google\u2019s \u201cProject Zero\u201d security initiative is bearing fruit, unearthing security issues we\u2019ve never seen before, in hopes of getting them patched before the hacking community can begin to exploit them. In this instance, the hack has nothing to do with software, but with RAM, making it an exceptionally dangerous, exotic bug. The technique, dubbed \u201cRowhammer\u201d […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\nDRAM Rowhammer Allows Hackers to Gain Kernel Privileges<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges\" \/>\n<meta property=\"og:description\" content=\"Google\u2019s \u201cProject Zero\u201d security initiative is bearing fruit, unearthing security issues we\u2019ve never seen before, in hopes of getting them patched before the hacking community can begin to exploit them. In this instance, the hack has nothing to do with software, but with RAM, making it an exceptionally dangerous, exotic bug. The technique, dubbed \u201cRowhammer\u201d […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2015-03-16T15:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg\" \/>\n<meta name=\"author\" content=\"Cloudways\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cloudways\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/\"},\"author\":{\"name\":\"Cloudways\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\"},\"headline\":\"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges\",\"datePublished\":\"2015-03-16T15:00:00+00:00\",\"dateModified\":\"2015-03-16T15:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/\"},\"wordCount\":529,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/\",\"url\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/\",\"name\":\"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg\",\"datePublished\":\"2015-03-16T15:00:00+00:00\",\"dateModified\":\"2015-03-16T15:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage\",\"url\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg\",\"contentUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\",\"name\":\"Cloudways\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"caption\":\"Cloudways\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/","og_locale":"en_US","og_type":"article","og_title":"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges","og_description":"Google\u2019s \u201cProject Zero\u201d security initiative is bearing fruit, unearthing security issues we\u2019ve never seen before, in hopes of getting them patched before the hacking community can begin to exploit them. In this instance, the hack has nothing to do with software, but with RAM, making it an exceptionally dangerous, exotic bug. The technique, dubbed \u201cRowhammer\u201d […]","og_url":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2015-03-16T15:00:00+00:00","og_image":[{"url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg"}],"author":"Cloudways","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cloudways","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/"},"author":{"name":"Cloudways","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828"},"headline":"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges","datePublished":"2015-03-16T15:00:00+00:00","dateModified":"2015-03-16T15:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/"},"wordCount":529,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg","articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/","url":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/","name":"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg","datePublished":"2015-03-16T15:00:00+00:00","dateModified":"2015-03-16T15:00:00+00:00","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#primaryimage","url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg","contentUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/03\/dram_rowhammer-300x225.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/dram-rowhammer-allows-hackers-to-gain-kernel-privileges\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"DRAM Rowhammer Allows Hackers to Gain Kernel Privileges"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828","name":"Cloudways","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","caption":"Cloudways"}}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/22220"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=22220"}],"version-history":[{"count":0,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/22220\/revisions"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=22220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=22220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=22220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}