Spoiler (security vulnerability)

Spoiler is a security vulnerability on modern computer central processing units that use speculative execution. It exploits side-effects of speculative execution to improve the efficiency of Rowhammer and other related memory and cache attacks. According to reports, all modern Intel Core CPUs are vulnerable to the attack as of 2019^[update].^[1][2] AMD has stated that its processors are not vulnerable.^[3][4]

Spoiler

CVE identifier(s)	CVE-2019-0162
Date discovered	November 2018; 5 years ago (2018-11)
Discoverer	Worcester Polytechnic Institute University of Lübeck
Affected hardware	Modern Intel microprocessors

Spoiler was issued a Common Vulnerabilities and Exposures ID of CVE-2019-0162.

See also

• Transient execution CPU vulnerability
• Hardware security bug

References

1. Tung, Liam. "All Intel chips open to new Spoiler non-Spectre attack: Don't expect a quick fix". ZDNet. Retrieved 2019-03-18.
2. Owen, Malcolm (March 5, 2019). "New 'Spoiler' vulnerability in all Intel Core processors exposed by researchers". AppleInsider. Retrieved 2019-03-18.
3. "Spoiler | AMD". www.amd.com. Retrieved 2019-03-18.
4. "AMD Confirms Its Processors Aren't Impacted by Spoiler Vulnerability". Tom's Hardware. 2019-03-17. Retrieved 2019-03-18.

External links

• Islam, Saad; Moghimi, Ahmad; Bruhns, Ida; Krebbel, Moritz; Gulmezoglu, Berk; Eisenbarth, Thomas; Sunar, Berk (2019-03-01). "Spoiler: Speculative Load Hazards Boost Rowhammer and Cache Attacks". arXiv:1903.00446v1 [cs.CR].
• CVE-2019-0162 at National Vulnerability Database