Logo for the Load Value Injection security vulnerability
CVE identifier(s)
CVE-2020-0551
Date discovered
March 2020; 4 years ago (2020-03)
Affected hardware
Intel x86 microprocessors
Website
lviattack.eu
Load value injection (LVI) is an attack on Intel microprocessors that can be used to attack Intel's Software Guard Extensions (SGX) technology.[1] It is a development of the previously known Meltdown security vulnerability. Unlike Meltdown, which can only read hidden data, LVI can inject data values, and is resistant to the countermeasures so far used to mitigate the Meltdown vulnerability.[2][3]
In theory, any processor affected by Meltdown may be vulnerable to LVI,[4] but as of March 2020[update], LVI is only known to affect Intel microprocessors.[2] Intel has published a guide to mitigating the vulnerability by using compiler technology, requiring existing software to be recompiled to add LFENCE memory barrier instructions at every potentially vulnerable point in the code.[5] However, this mitigation appears likely to result in substantial performance reductions in the recompiled code.[6]
^"Load Value Injection". software.intel.com. 2020-03-10. Retrieved 2020-03-11.
^ abCimpanu, Catalin. "Intel CPUs vulnerable to new LVI attacks". ZDNet. Retrieved 2020-03-11.
^Alcorn, Paul (10 March 2020). "New Load Value Injection Vulnerability Found In Intel Chips". Tom's Hardware. Retrieved 2020-03-11.
^Claburn, Thomas (10 Mar 2020). "Meltdown The Sequel strikes Intel chips – and full mitigation against data-meddling LVI flaw will slash performance". www.theregister.co.uk. Retrieved 2020-03-11.
^"An Optimized Mitigation Approach for Load Value Injection". software.intel.com. Retrieved 2020-03-11.
^Cutress, Ian. "Load Value Injection: A New Intel Attack Bypasses SGX with Significant Performance Mitigation Concerns". www.anandtech.com. Retrieved 2020-03-11.
and 21 Related for: Load value injection information
Loadvalueinjection (LVI) is an attack on Intel microprocessors that can be used to attack Intel's Software Guard Extensions (SGX) technology. It is a...
2018 and updated on March 20, 2020. LoadValueInjection injects data into a program aiming to replace the value loaded from memory which is then used...
computer programming, DLL injection is a technique used for running code within the address space of another process by forcing it to load a dynamic-link library...
In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into...
areas, including branch prediction in pipelined processors, value prediction for exploiting value locality, prefetching memory and files, and optimistic concurrency...
system. Code injection can be used malevolently for many purposes, including: Arbitrarily modifying values in a database through SQL injection. The impact...
is applied to the return value of the function that has been called introducing a fault into the system. Runtime Injection techniques use a software...
Livingstone, Zambia Landcare Victoria Inc., an Australian organisation Loadvalueinjection, a security vulnerability Lymphovascular invasion, invasion of cancer...
exploit: "Slowly" store a value at a memory location "Quickly" load that value from that memory location Utilize the value that was just read to disrupt...
possible to use part of the FPU state as the address in a memory load, triggering a load into the processor's cache. Exploitation then follows the same...
vulnerabilities have been labeled Fallout, RIDL (Rogue In-Flight Data Load), ZombieLoad., and ZombieLoad 2. The vulnerabilities are in the implementation of speculative...
high-pressure fuel lines and achieves a more consistent injection. Under full load, the injection pressure can reach up to 220 MPa. Unit injectors are operated...
port fuel-injection typically run lower boost pressures and/or compression ratios than direct injected engines because port fuel injection causes the...
The High Value engine family from General Motors is a group of cam-in-block or overhead valve V6 engines. These engines feature cast iron blocks and aluminum...
Stratospheric aerosol injection is a proposed method of solar geoengineering (or solar radiation modification) to reduce global warming. This would introduce...
the load feeds energy back to the intermediate circuit. This arises, for example, when a magnetized motor is being rotated by an overhauling load and...
the useful load Z S {\displaystyle Z_{S}} , which in turn keeps an excitation current I S {\displaystyle I_{S}} flowing through the useful load Z S {\displaystyle...
Global Information