Missing Protection for Mirrored Regions in On-Chip Fabric Firewall

Opis

The firewall in an on-chip fabric protects the main addressed region, but it does not protect any mirrored memory or memory-mapped-IO (MMIO) regions.

Few fabrics mirror memory and address ranges, where mirrored regions contain copies of the original data. This redundancy is used to achieve fault tolerance. Whatever protections the fabric firewall implements for the original region should also apply to the mirrored regions. If not, an attacker could bypass existing read/write protections by reading from/writing to the mirrored regions to leak or corrupt the original data.

Skutki

• Confidentiality, Integrity, Access Control

  Modify Memory; Read Memory; Bypass Protection Mechanism

Zapobieganie

• Architecture and Design

  The fabric firewall should apply the same protections as the original region to the mirrored regions.

• Implementation

  The fabric firewall should apply the same protections as the original region to the mirrored regions.

Słabość nadrzędna

• CWE-284 Improper Access Control

Pokrewna

• CWE-1251 Mirrored Regions with Different Values

Kiedy powstaje

• Architecture and Design
• Implementation

Dotyczy

Not Language-Specific, Not OS-Specific, Not Architecture-Specific, Not Technology-Specific

Źródła

1. Address Range Memory Mirroring — Taku Izumi, Fujitsu Limited, 2016