Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PROPOSAL] Transient Execution Weaknesses #5

Open
wants to merge 10 commits into
base: main
Choose a base branch
from

Commits on Feb 10, 2023

  1. Configuration menu
    Copy the full SHA
    a3f7a0e View commit details
    Browse the repository at this point in the history
  2. Fixed formatting in transient.md

    Fixed formatting issues that emerged after the docx->md translation
    scottconstable authored Feb 10, 2023
    Configuration menu
    Copy the full SHA
    a8e4417 View commit details
    Browse the repository at this point in the history

Commits on Mar 24, 2023

  1. Configuration menu
    Copy the full SHA
    0957b58 View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2023

  1. Configuration menu
    Copy the full SHA
    0adef88 View commit details
    Browse the repository at this point in the history

Commits on Aug 16, 2023

  1. Configuration menu
    Copy the full SHA
    81b68ff View commit details
    Browse the repository at this point in the history
  2. The updated PR has reframed the CWEs to incorporate more condition-or…

    …iented language. Specifically:
    
    - CWE-B describes the condition where transient operations are allowed to access and operate on data in a shared microarchitectural structure
    - CWE-C describes the condition where a hardware exception causes incorrect/stale data to be forwarded to dependent transient operations
    - CWE-D is only a renaming of CWE-C in the previous proposal. CWE-D describes the condition of sharing microarchitectural predictor state
    - CWE-E is only a renaming of CWE-D in the previous proposal. CWE-E describes the condition of a microarchitectural predictor causing transient execution
    - CWE-A is a catch-all for transient execution, and would be a parent of CWE-[B-E]. Since CWE-B and CWE-C have been refined into specific conditions, I saw no way to avoid introducing a catch-all.
    scottconstable committed Aug 16, 2023
    Configuration menu
    Copy the full SHA
    4c84009 View commit details
    Browse the repository at this point in the history

Commits on Sep 19, 2023

  1. September 2023 transient execution weakness update.

    - We removed a CWE that applied exclusively to predictor-based transient execution not involving shared predictor state. We believe that CWE-A suffices to cover these cases.
    - Some of that CWE's extended description has been updated and merged into CWE-A.
    - There is a placeholder CWE-E that will cover "speculation oracle" weaknesses such as Pacman.
    scottconstable committed Sep 19, 2023
    Configuration menu
    Copy the full SHA
    2fcde6b View commit details
    Browse the repository at this point in the history

Commits on Oct 26, 2023

  1. Configuration menu
    Copy the full SHA
    47bbf67 View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2023

  1. Configuration menu
    Copy the full SHA
    6fc8137 View commit details
    Browse the repository at this point in the history
  2. fixes to formatting

    scottconstable committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    b14189c View commit details
    Browse the repository at this point in the history