Re: AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5%
Hector Marco-Gisbert <[email protected]> Thu, 07 May 2015 16:48:46 +0200
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.full-disclosure,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <[email protected]> |
SGksCgpQYVggc29sdXRpb24gaGFzIGFjdHVhbGx5IDE2IHJhbmRvbSBiaXRzIGZvciBtbWFwIG9i amVjdHMgaW4gMzJiaXQgc3lzdGVtcyBvbiAKbm9uIGFmZmVjdGVkIHN5c3RlbXMuIE9uIGFmZmVj dGVkIHN5c3RlbXMgdGhlIHJhbmRvbSBiaXRzIGFyZSBkZWdyYWRlZCB0byAyXjEzLgpVbmZvcnR1 bmF0ZWx5LCBkZXBlbmRpbmcgb24gdGhlIFBhWCBLZXJuZWwgY29uZmlndXJhdGlvbiBzZXF1ZW5j ZSwgc29tZSBmZWF0dXJlcwptYXkgbm90IGJlIGVuYWJsZWQuIFRoZXJlIGFyZSBzZXF1ZW5jZXMg b2YgUGFYIGNvbmZpZ3VyYXRpb24gd2hpY2ggZG9lcyBub3QgZ2l2ZQp0aGUgZXhwZWN0ZWQgcmVz dWx0LgoKVGhlIGNvbmZpZ3VyYXRpb24gc2VxdWVuY2UgdGhhdCByZXN1bHRzIGluIGEgbWlzcy1j b25maWd1cmVkIHN5c3RlbSBpczoKCiAgICAgMS4tIFN0YXJ0aW5nIGZyb20gYSBjbGVhbiBMaW51 eCB0cmVlIHdpdGggUGFYIHBhdGNoIGFwcGxpZWQuCgogICAgIDIuLSBFbmFibGVkIHRoZSAiR3Jz ZWN1cml0eSIgb3B0aW9uICh3aGljaCBzZXRzICJTZWN1cml0eSBNZXRob2QiIHRvCiJDdXN0b20i KSBhbmQgY29tcGlsZSZ0ZXN0OgogICAgIE9ic2VydmVkIG1tYXAgZW50cm9weTogMl41IChhcyBl eHBlY3RlZCkuCgogICAgIDMuLSBUaGVuIHNldCAiU2VjdXJpdHkgTWV0aG9kIiB0byAiQXV0b21h dGljIiAod2hpY2ggc2V0cyAiUmVxdWlyZWQgClByaW9yaXRpZXMiIHRvICJQZXJmb3JtYW5jZSIp IGFuZCBjb21waWxlJnRlc3Q6CiAgICAgT2JzZXJ2ZWQgbW1hcCBlbnRyb3B5OiAyXjUuCgogICAg IDQuLSBMYXN0IHRlc3Q6IHNlbGVjdCAiU2VjdXJpdHkiIG9uIHRoZSAiUmVxdWlyZWQgUHJpb3Jp dGllcyIgb3B0aW9uIGFuZApjb21waWxlJnRlc3Q6CiAgICAgT2JzZXJ2ZWQgbW1hcCBlbnRyb3B5 OiAyXjUuCgogICAgIDUuLSBBdCB0aGlzIHBvaW50LCBpdCBzZWVtcyB0aGF0IHRoZSAiUmVxdWly ZWQgUHJpb3JpdGllcyIgb3B0aW9uIGhhcyBubwplZmZlY3QsIHRoYXQgaXMsIHN3aXRjaGluZyBm cm9tICJQZXJmb3JtYW5jZSIgdG8gIlNlY3VyaXR5IiBvciB0aGUgb3RoZXIgd2F5CmFyb3VuZCAo YXMgbWF5IHRpbWVzIGFzIGRlc2lyZWQpIGRvZXMgbm90IGVuYWJsZS9kaXNhYmxlIHRoZSBleHBl Y3RlZCBmZWF0dXJlcywKaW5jbHVkaW5nIHRoZSBtbWFwIHJhbmRvbWl6YXRpb24uCgpJZiBzdGVw cyAyIGFuZCAzLCBvciAyIGFuZCA0IGFyZSBjb25maWd1cmVkIGF0IG9uY2UgKHdpdGhvdXQgZXhp dGluZyBmcm9tIHRoZQptZW51Y29uZmlnKSwgdGhlbiB0aGUgc3lzdGVtIGdldHMgcHJvcGVybHkg Y29uZmlndXJlZC4KCgpJdCBzZWVtcyB0aGF0IHNvbWV0aGluZyBpbiB0aGUgUGFYIEtjb25maWcg ZmlsZXMgYXJlIG5vdCBwcm9wZXJseSBkb25lLiBDb3VsZCAKYW55b25lIGNoZWNrIGl0ID8gU28s IGlmIHlvdSBhcmUgdXNpbmcgUGFYLCBpdCB3b3J0aCB0byBlbnN1cmUgdGhhdCB5b3UgYXJlIG5v dCAKbG9zaW5nIGFueSBQYVggZmVhdHVyZS4KCi0tIApIZWN0b3IgTWFyY28tR2lzYmVydCBAIGh0 dHA6Ly9obWFyY28ub3JnLwpDeWJlciBTZWN1cml0eSBSZXNlYXJjaGVyIEAgaHR0cDovL2N5YmVy c2VjdXJpdHkudXB2LmVzClVuaXZlcnNpdGF0IFBvbGl0w6hjbmljYSBkZSBWYWzDqG5jaWEgKFNw YWluKQoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KU2Vu dCB0aHJvdWdoIHRoZSBGdWxsIERpc2Nsb3N1cmUgbWFpbGluZyBsaXN0Cmh0dHBzOi8vbm1hcC5v cmcvbWFpbG1hbi9saXN0aW5mby9mdWxsZGlzY2xvc3VyZQpXZWIgQXJjaGl2ZXMgJiBSU1M6IGh0 dHA6Ly9zZWNsaXN0cy5vcmcvZnVsbGRpc2Nsb3N1cmUv