logo
DATABASE RESOURCES PRICING ABOUT US

Intel Side-Channel L1TF Vulnerability

Description

Intel has released recommendations to address a side-channel vulnerability called L1 Terminal Fault (L1TF) that affects multiple Intel microprocessors. An attacker could exploit this vulnerability to obtain sensitive information. NCCIC encourages users and administrators to review Intel's Security Advisory [INTEL-SA-00161](<https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html>), apply the necessary mitigations, and refer to software vendors for appropriate patches, when available. Additional resources include: * [Intel Security First](<https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html>) * [Intel Resources and Response to Side Channel L1 Terminal Fault](<https://www.intel.com/content/www/us/en/architecture-and-technology/l1tf.html>) * [Vulnerability Note VU#982149](<https://www.kb.cert.org/vuls/id/982149>) * NCCIC TA18-141A: Side-Channel Vulnerability Variants 3a and 4 * NCCIC TA18-004A: Meltdown and Spectre Side-Channel Vulnerability Guidance This product is provided subject to this Notification and this [Privacy & Use](<https://www.dhs.gov/privacy-policy>) policy. **Please share your thoughts.** We recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ncas/current-activity/2018/08/14/Intel-Side-Channel-Vulnerability>); we'd welcome your feedback.