Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- aceraspire@aceraspire:~$ wget -O meltdown.sh https://raw.githubusercontent.com/speed47/spectre-meltdown-checker/master/spectre-meltdown-checker.sh && sudo sh meltdown.sh
- --2018-01-13 02:29:33-- https://raw.githubusercontent.com/speed47/spectre-meltdown-checker/master/spectre-meltdown-checker.sh
- Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.16.133
- Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.16.133|:443... connected.
- HTTP request sent, awaiting response... 200 OK
- Length: 31879 (31K) [text/plain]
- Saving to: ‘meltdown.sh’
- meltdown.sh 100%[=======================================================================>] 31.13K --.-KB/s in 0.02s
- 2018-01-13 02:29:33 (1.64 MB/s) - ‘meltdown.sh’ saved [31879/31879]
- [sudo] password for aceraspire:
- Spectre and Meltdown mitigation detection tool v0.28
- Checking for vulnerabilities against running kernel Linux 4.13.0-25-generic #29-Ubuntu SMP Mon Jan 8 21:14:41 UTC 2018 x86_64
- CPU is Intel(R) Celeron(R) CPU N3050 @ 1.60GHz
- CVE-2017-5753 [bounds check bypass] aka 'Spectre Variant 1'
- * Checking count of LFENCE opcodes in kernel: NO
- > STATUS: VULNERABLE (only 29 opcodes found, should be >= 70, heuristic to be improved when official patches become available)
- CVE-2017-5715 [branch target injection] aka 'Spectre Variant 2'
- * Mitigation 1
- * Hardware (CPU microcode) support for mitigation: NO
- * Kernel support for IBRS: NO
- * IBRS enabled for Kernel space: NO
- * IBRS enabled for User space: NO
- * Mitigation 2
- * Kernel compiled with retpoline option: NO
- * Kernel compiled with a retpoline-aware compiler: NO
- > STATUS: VULNERABLE (IBRS hardware + kernel support OR kernel with retpoline are needed to mitigate the vulnerability)
- CVE-2017-5754 [rogue data cache load] aka 'Meltdown' aka 'Variant 3'
- * Kernel supports Page Table Isolation (PTI): YES
- * PTI enabled and active: YES
- > STATUS: NOT VULNERABLE (PTI mitigates the vulnerability)
- A false sense of security is worse than no security at all, see --disclaimer
Advertisement
Add Comment
Please, Sign In to add comment