Side-Channel Vulnerability Variants 3a and 4

ronjor · May 21, 2018

Original release date: May 21, 2018

Overview
On May 21, 2018, new variants—known as Spectre 3A and 4—of the side-channel central processing unit (CPU) hardware vulnerability were publically disclosed. These variants can allow an attacker to obtain access to sensitive information on affected systems.
Mitigation
NCCIC recommends users and administrators
Refer to their hardware and software vendors for patches or microcode,
Use a test environment to verify each patch before implementing, and
Ensure that performance is monitored for critical applications and services.
Consult with vendors and service providers to mitigate any degradation effects, if possible.
Consult with Cloud Service Providers to mitigate and resolve any impacts resulting from host operating system patching and mandatory rebooting, if applicable.
Click to expand...

Discussion. https://www.wilderssecurity.com/posts/2758267/

ronjor · May 21, 2018

CPU hardware utilizing speculative execution may be vulnerable to cache side-channel attacks

Original Release date: 21 May 2018 | Last revised: 21 May 2018
Overview
CPU hardware utilizing speculative execution may be vulnerable to cache timing side-channel analysis. Also known as "Variant 4" or "SpectreNG".
Solution
Update system software
Affected users should check with OEM and system software vendors and apply any available updates as soon as possible. Microcode updates and other system updates are expected to be available within the coming weeks. The Vendor Status links below provide further information.
Click to expand...

Log in or Sign up

Side-Channel Vulnerability Variants 3a and 4

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Side-Channel Vulnerability Variants 3a and 4

ronjor Global Moderator

ronjor Global Moderator

Useful Searches