fix for AsrDrv103.sys CVE-2020-15368 £
Printed From: ASRock.com
Category: Technical Support
Forum Name: AMD Motherboards
Forum Description: Question about ASRock AMD motherboards
URL: https://forum.asrock.com/forum_posts.asp?TID=25660
Printed Date: 27 Apr 2024 at 10:54am
Software Version: Web Wiz Forums 12.04 - http://www.webwizforums.com
Topic: fix for AsrDrv103.sys CVE-2020-15368 £
Posted By: waltz49
Subject: fix for AsrDrv103.sys CVE-2020-15368 £
Date Posted: 24 Mar 2023 at 8:44am
Is there a fix for driver AsrDrv103.sys which has a critical security flaw (CVE-2020-15368) and is even blocked by Microsoft when Memory Integrity is enabled?
AsrDrv10x.sys is a driver used in several ASRock utilities which does not work if Windows Memory Integrity is switched on because it violates the most basic security rules. The reason it fails is that this driver is nothing but a test driver that allows any user space program to https://github.com/stong/CVE-2020-15368" rel="nofollow - change anything in the Kernel using just a few lines of code and for which exploits can even be purchased. Yikes!!! AsrDrv10x.sys drivers work if Memory Integrity is off which is most systems, so if I'm reading all this right, almost all ASRock systems are vulnerable.
The CVE is considered a CRITICAL security error and I haven't been able to find any replacement so I am having to avoid ASRock utilities entirely. I can't turn on Memory Integrity because other programs like VMWare don't run with it enabled, so if I install the ASRock utilities, my system is basically wide open. But I really want to use the A-Tuning utility.
Since this is now 2 or 3 years old, is there any hope for a patch or did I miss one?
Thanks
|
Replies:
Posted By: threadzipper1957
Date Posted: 24 Mar 2023 at 9:57pm
I don't think this is a question for the forum, and it's best to use the support form. https://tw.asrock.com/events/tsd.asp" rel="nofollow - https://tw.asrock.com/events/tsd.asp
Without knowing which board, which hardware and which BIOS, it's difficult to answer.
Tech support should probably know.
Check Your spam folder for replies.
-------------
Kind Regards
|
|