Intel’s Data Direct I/O (DDIO) technology gives peripheral devices direct access to the processors internal cache to achieve better performance, less power consumption, and higher data throughput. Intel awarded a bounty for the vulnerability but assigned a low severity score to it — 2.6 out of 10 on the CVSS scale. Researchers from the VUSec group at Vrije Universiteit Amsterdam have now shown that DDIO’s cache access can be exploited in a similar manner. With a direct network connection to the server, an attacker can leak potentially sensitive information about other clients.”]

