December 5, 2016 By Larry Loeb 2 min read

Rowhammer is a specific kind of attack that involves an exploit of the physical hardware in dynamic random-access memory (DRAM). It changes the contents of the memory stored at a given location, which can contribute to unauthorized user escalation and other undesirable consequences.

DRAMs have grown denser over time, leading to interactions between adjacent rows of memory. Google researchers first noted this attack in March 2015. Recently, it was improved with the added capability to root Android phones.

Slamming Rowhammer

So far, the best mitigation technique is a physical redesign of DRAM to eliminate the bit flipping that occurs in adjacent memory rows after repeated read/writes to a specific location. But this kind of solution ignores the vulnerable devices that have been produced and are currently in use.

In response, researchers from the Technische Universität Darmstadt and the University of Duisburg-Essen in Germany devised two methods that use software to mitigate these kinds of attacks.

The first method, called B-CATT, requires no changes to the OS and is compatible with all x86 systems, according to SecurityWeek. It is a bootloader extension designed to locate and disable any exploitable physical memory. It also identifies memory locations vulnerable to Rowhammer and marks them as unavailable to the system for storage.

The second method, G-CATT, aims to protect the memory locations that correspond to high-privileged security domains. It stops bit flips in those strategic locations by making sure that the user memory from which an attack could be launched is physically at least one row away from those critical areas.

Experts Not Impressed

Other researchers were only moderately impressed by the mitigation. Based on their first impressions, some thought it was an important contribution, but most emphasized that there were several issues that still needed to be addressed.

One researcher told SecurityWeek that the proposed method “does not break Rowhammer completely, it only prevents the strong double-sided Rowhammer. Furthermore, an attack from one application to another is also not prevented, only from user applications to the kernel.”

Rowhammer-style attacks are still possible, but researchers will likely find a working mitigation eventually.

More from

Skills shortage directly tied to financial loss in data breaches

2 min read - The cybersecurity skills gap continues to widen, with serious consequences for organizations worldwide. According to IBM's 2024 Cost Of A Data Breach Report, more than half of breached organizations now face severe security staffing shortages, a whopping 26.2% increase from the previous year.And that's expensive. This skills deficit adds an average of $1.76 million in additional breach costs.The shortage spans both technical cybersecurity skills and adjacent competencies. Cloud security, threat intelligence analysis and incident response capabilities are in high demand. Equally…

Cyberattack on American Water: A warning to critical infrastructure

3 min read - American Water, the largest publicly traded United States water and wastewater utility, recently experienced a cybersecurity incident that forced the company to disconnect key systems, including its customer billing platform. As the company’s investigation continues, there are growing concerns about the vulnerabilities that persist in the water sector, which has increasingly become a target for cyberattacks. The breach is a stark reminder of the critical infrastructure risks that have long plagued the industry. While the water utility has confirmed that…

What’s behind unchecked CVE proliferation, and what to do about it

4 min read - The volume of Common Vulnerabilities and Exposures (CVEs) has reached staggering levels, placing immense pressure on organizations' cyber defenses. According to SecurityScorecard, there were 29,000 vulnerabilities recorded in 2023, and by mid-2024, nearly 27,500 had already been identified.Meanwhile, Coalition's 2024 Cyber Threat Index forecasts that the total number of CVEs for 2024 will hit 34,888—a 25% increase compared to the previous year. This upward trend presents a significant challenge for organizations trying to manage vulnerabilities and mitigate potential exploits.What’s behind…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today