fix for AsrDrv103.sys CVE-2020-15368 £

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Is there a fix for driver AsrDrv103.sys which has a critical security flaw (CVE-2020-15368) and is even blocked by Microsoft when Memory Integrity is enabled?

AsrDrv10x.sys is a driver used in several ASRock utilities which does not work if Windows Memory Integrity is switched on because it violates the most basic security rules.  The reason it fails is that this driver is nothing but a test driver that allows any user space program to change anything in the Kernel using just a few lines of code and for which exploits can even be purchased.  Yikes!!!  AsrDrv10x.sys drivers work if Memory Integrity is off which is most systems, so if I'm reading all this right, almost all ASRock systems are vulnerable.

The CVE is considered a CRITICAL security error and I haven't been able to find any replacement so I am having to avoid ASRock utilities entirely.  I can't turn on Memory Integrity because other programs like VMWare don't run with it enabled, so if I install the ASRock utilities, my system is basically wide open.  But I really want to use the A-Tuning utility.

Since this is now 2 or 3 years old, is there any hope for a patch or did I miss one?

Thanks

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
waltz49 Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 24 Mar 2023 Status: Offline Points: 20	Post Options Post Reply Quote waltz49 Report Post Thanks(0) Quote Reply Topic: fix for AsrDrv103.sys CVE-2020-15368 £ Posted: 24 Mar 2023 at 8:44am
	Is there a fix for driver AsrDrv103.sys which has a critical security flaw (CVE-2020-15368) and is even blocked by Microsoft when Memory Integrity is enabled? AsrDrv10x.sys is a driver used in several ASRock utilities which does not work if Windows Memory Integrity is switched on because it violates the most basic security rules. The reason it fails is that this driver is nothing but a test driver that allows any user space program to change anything in the Kernel using just a few lines of code and for which exploits can even be purchased. Yikes!!! AsrDrv10x.sys drivers work if Memory Integrity is off which is most systems, so if I'm reading all this right, almost all ASRock systems are vulnerable. The CVE is considered a CRITICAL security error and I haven't been able to find any replacement so I am having to avoid ASRock utilities entirely. I can't turn on Memory Integrity because other programs like VMWare don't run with it enabled, so if I install the ASRock utilities, my system is basically wide open. But I really want to use the A-Tuning utility. Since this is now 2 or 3 years old, is there any hope for a patch or did I miss one? Thanks

threadzipper1957 Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 05 Mar 2022 Status: Offline Points: 9335	Post Options Post Reply Quote threadzipper1957 Report Post Thanks(0) Quote Reply Posted: 24 Mar 2023 at 9:57pm
	I don't think this is a question for the forum, and it's best to use the support form. https://tw.asrock.com/events/tsd.asp Without knowing which board, which hardware and which BIOS, it's difficult to answer. Tech support should probably know. Check Your spam folder for replies.
	Kind Regards