1872
Related Attack Patterns
CAPEC-ID Attack Pattern Name
663 Exploitation of Transient Instruction Execution
References
[REF-11]Paul Kocher, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp,
Stefan Mangard, Thomas Prescher, Michael Schwarz and Yuval Yarom. "Spectre Attacks:
Exploiting Speculative Execution". 2018 January 3. < https://arxiv.org/abs/1801.01203 >.
[REF-12]Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Stefan
Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom and Mike Hamburg. "Meltdown". 2018 January
3. < https://arxiv.org/abs/1801.01207 >.
CWE-1038: Insecure Automated Optimizations
Weakness ID : 1038
Structure : Simple
Abstraction : Class
Description
The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic
such as performance, but the optimizations can have an unintended side effect that might violate
an intended security assumption.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 758 Reliance on Undefined, Unspecified, or Implementation-
Defined Behavior