CVE-2017-5754 PoC — Intel和ARM CPU芯片信息泄露漏洞

Source

https://github.com/jdmulloy/meltdown-aws-scanner

Associated Vulnerability

Title: Intel和ARM CPU芯片信息泄露漏洞 (CVE-2017-5754)
Description:Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Description

Naive shell script to verify Meltdown (CVE-2017-5754) patch status of EC2 instances

Readme

# meltdown-aws-scanner #
Naive shell script to verify Meltdown (CVE-2017-5754) patch status of EC2 instances

# Requirements #
* aws cli with working configuration

# Using the script #
## Scan all EC2 instances in default account and region ##
    $ ./check_meltdown.sh | tee $(date '+%Y-%m-%d').csv
## Scan a subset of EC2 instances in default account and region ##
    $ ./check_meltdown.sh --filters "Name=tag:Name,Values=prod-*"

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →