The Patching Friars' AlmanacA calendar of CVE saints

November 23

ECCploitHoly card for eccploit, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 01 ECCploit MALLEUS SUPER ECC
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint ECCploit, Who Hammered Even Error-Correcting Memory

Patron of ECC memory, Rowhammer attacks, and everyone who thought corrected bits were safe.

Life

On 23 November 2018 VUSec presented ECCploit: ECC memory, which automatically corrects single bad bits and was believed immune to Rowhammer, could still be bent. By patiently studying the timing of the corrections, the researchers worked out how to cause enough bit flips to defeat the ECC protection and alter memory. The defence was no magic: it slowed the attack down, it did not make it impossible.

Prayer

O Saint ECCploit, who hammers until the correction gives way, let our memory not place all its trust in parity bits. Amen.

How to celebrate

Celebrated by choosing memory and controllers more resistant to Rowhammer, without the illusion that ECC alone is enough.

Correct one bit and you still have not stopped the hammer.

Technical record

Disclosed on
November 23 2018
CVE
CVE-2018-18904CVE-2018-18905CVE-2018-18906

Sources: vusec.net

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.