Every Android device is susceptible to a hardware vulnerability called RAMpage
Saturday, June 30, 2018 IST
We have consistently seen various vectors of attack rear their head when it comes to Android smartphones. We’ve seen Shattered Trust, Cloak and Dagger, and Rowhammer, just to name a few. RAMpage is the latest one on the block, and while it is a hardware vulnerability, it doesn’t necessarily need physical access to your device to exploit. How it works is relatively simple.
When a CPU reads or writes a row of bits in the RAM module present on the device, the neighboring rows are slightly affected due to a tiny electric discharge. This isn’t usually a problem as we know RAM does this and that’s why it’s periodically refreshed to make sure nothing goes wrong. But what if we start “hammering” the same “row”? What if we continuously read or write to the same row in order to disrupt neighboring rows? This can cause a bit-flip in a memory row that we shouldn’t own or have access to at all. That’s what Rowhammer is, and it’s being used as part of a larger vulnerability called RAMpage. The CVE is CVE-2018-9442 and it affects devices shipped with LPDDR2, LPDDR3, or LPDDR4 RAM. We’ve already covered Rowhammer in greater depth
here.
The Team Behind RAMpage
Vrije Universiteit Amsterdam
TU Wien
EURECOM
*Harikrishnan Padmanabha Pillai, MSc.
IBM
UC Santa Barbara
UC Santa Barbara
Vrije Universiteit Amsterdam
Vrije Universiteit Amsterdam
What is RAMpage?
RAMpage isn’t exactly new, so to say. RAMpage is a hardware vulnerability which implements Rowhammer and other, smaller exploits. RAMpage can be used to gain root access on a device, but the researchers managed to get it to do a whole lot more as well. It could be used to bypass JavaScript sandboxes and even perform an attack running on another virtual machine on the same computer on x86 devices. ARM-based devices are also vulnerable, and that’s where our Android phones come in. DRAMMER stands for “Deterministic Rowhammer Attacks on Mobile Devices,” and it was able to be used against a number of Android phones in the past to gain root access.
Related Topics
Trending News & Articles
If you think Wills are only for the rich, you are absolutely wrong. A Will is an essential part of any estate plan. It is the primary document for transferring your...
Recently posted . 8K views . 5 min read
Godrej Properties Ltd. (GPL) today announced that it has sold 340 homes with an area of more than half a million square feet on the first day of launch
Recently posted . 4K views . 1 min read
An intestate death often causes chaos with family often ending up fighting to get property. The succession act was created to resolve the impending chaos when a per...
Recently posted . 3K views . 2 min read
The unprecedented crisis put across by the COVID-19 outbreak has impacted the residential real estate significantly. Here are a few notable trends that are likely t...
Recently posted . 3K views . 1 min read
More in Electronics & Gadgets
What are the factors that differentiate a luxury apartment from a regular home and will the demand for luxury homes continue to remain strong? We examine…
Recently posted. 1K views . 1 min read
What are the financial and income tax consequences that follow, if a property deal is called off or cancelled? We examine
Recently posted. 1K views . 0 min read
Let’s admit it – the terms and jargon thrown at us by agents and realtors have us staring at them cluelessly most of the time. While buying a house, ter...
Recently posted. 1K views . 3 min read
Recently posted . 3K views
Recently posted . 2K views
Recently posted . 3K views
We examine the property rights of daughters, of daughters-in-law, abandoned first wife, second-wife, converts, adopted children, widows, mothers, etc., under the ...
Recently posted. 1K views . 1 min read
Union Minister, Hardeep Singh Puri said that a lot of people do not want to give their properties on rent because they think that "if you have a weak legal sys...
Recently posted. 1K views . 1 min read