1

Can a meltdown attack also violate data integrity of other processes by obtaining different passwords or is it just violating data secrecy by reading data it is unauthorized to do?

0

Meltdown is an attack that allows overcoming memory isolation completely by providing a simple way for any user process to read the entire kernel memory of the machine. Attacker can get password, private keys and valuable information. You can access the research paper here.

0

Meltdown does not directly impact integrity, but it totally violates confidentiality. Whether or not the violation of confidentiality is sufficient to also violate integrity (e.g. read root password, become root, and load malicious kernel module) depends entirely on your system.

In other words, Meltdown on its own is exclusively a read vulnerability, not a write vulnerability.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.