9289 matches found
HPSBHF03581 rev. 4 - AMD Secure Processor and Promontory Chipset Exploits
Potential Security Impact Circumvention of platform security controls, unauthorized access to system memory, installation of difficult to detect malware. Source: CTS Reported By: CTS VULNERABILITY SUMMARY Vulnerability | Description | Impact ---|---|--- MASTERKEY | Attacker who already has...
AMD Acknowledges Vulnerabilities, Will Roll Out Patches In Coming Week
AMD on Tuesday acknowledged several vulnerabilities that had been previously reported in its Ryzen and EPYC chips, and said that it would roll out firmware patches for those flaws in the coming weeks. The response comes a week after Israel-based CTS-Labs said that it has discovered 13 critical...
Israeli Security Attacks AMD by Publishing Zero-Day Exploits
Last week, the Israeli security company CTS Labs published a series of exploits against AMD chips. The publication came with the flashy website, detailed whitepaper, cool vulnerability names -- RYZENFALL, MASTERKEY, FALLOUT, and CHIMERA -- and logos we've come to expect from these sorts of things...
New Microsoft Bug Bounty Program Looks To Squash The Next Spectre, Meltdown
In the wake of the Meltdown and Spectre flaws, Microsoft has rolled out a new bug bounty program targeting speculative execution side channel vulnerabilities. The limited time program is open until December 31, and offers up to $250,000 for identifying new categories of speculative execution...
openSUSE Security Update : kernel-firmware (openSUSE-2018-262)
This update for kernel-firmware fixes the following issues : - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix a ethernet flow control vulnerability in SRIOV devices bsc1077355 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Networ...
Hyperbole Swirls Around AMD Processor Security Threat
Maybe it was the exaggerated threats against AMD’s business or the semi-unprofessional way the threats were brought to light but no matter — security start-up CTS-Labs claims of security holes in the chipmaker’s Ryzen and Epic processor lines are now being lambasted across the security community...
Mitigating speculative execution side channel hardware vulnerabilities
On January 3rd, 2018, Microsoft released an advisory and security updates related to a newly discovered class of hardware vulnerabilities involving speculative execution side channels known as Spectre and Meltdown that affect AMD, ARM, and Intel CPUs to varying degrees. If you haven’t had a chanc...
Mitigating speculative execution side channel hardware vulnerabilities
On January 3rd, 2018, Microsoft released an advisory and security updates related to a newly discovered class of hardware vulnerabilities involving speculative execution side channels known as Spectre and Meltdown that affect AMD, ARM, and Intel CPUs to varying degrees. If you haven’t had a chanc...
13 Critical Flaws Discovered in AMD Ryzen and EPYC Processors
Security researchers claimed to have discovered 13 critical Spectre/Meltdown-like vulnerabilities throughout AMD's Ryzen and EPYC lines of processors that could allow attackers to access sensitive data, install persistent malware inside the chip, and gain full access to the compromised systems. A...
AMD Investigating Reports of 13 Critical Vulnerabilities Found in Ryzen, EPYC Chips
Researchers on Tuesday said they found several critical security vulnerabilities in various AMD chips, allegedly opening them up to attackers who want to steal sensitive data and install malware on AMD servers, workstations and laptops. Israel-based CTS-Labs said that it has discovered 13 critica...
PT-2018-1085
Name of the Vulnerable Software and Affected Versions AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips affected versions not specified Description The issue is related to the insufficient enforcement of Hardware Validated Boot in AMD processor chips. This allows an attacker wit...
PT-2018-1089
Name of the Vulnerable Software and Affected Versions Promontory chipset versions affected versions not specified Description The issue concerns a backdoor in the firmware of the Promontory chipset, used in AMD Ryzen and Ryzen Pro platforms. This backdoor allows an attacker with administrative...
PT-2018-1087
Name of the Vulnerable Software and Affected Versions AMD Ryzen and Ryzen Pro processor chips affected versions not specified Description The vulnerability is related to insufficient access control for the Secure Processor in AMD Ryzen and Ryzen Pro processor chips. An attacker with access to the...
PT-2018-1086
Name of the Vulnerable Software and Affected Versions AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips affected versions not specified Description The issue is related to insufficient access control for the Secure Processor in AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips. This...
PT-2018-1088
Name of the Vulnerable Software and Affected Versions AMD EPYC Server processor affected versions not specified Description The issue is related to the implementation of the AMD Secure Processor technology in the AMD EPYC Server processor, specifically with the bootloader responsible for checking...
hw: cpu: speculative execution permission faults handling
An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...
OracleVM 3.4 : xen (OVMSA-2018-0020) (Meltdown) (Spectre)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=9ccc143584e12027a8db854d19ce8a120d22cfac - BUILDINFO: QEMU upstream...
Intel Issues Updated Spectre Firmware Fixes For Newer Processors
Intel has issued updated microcode to help protect its newer processors from Spectre security exploits. The Santa Clara, Calif.-based company’s new microcode updates – which impact its newer chip platforms, such as Kaby Lake, Coffee Lake, and Skylake – have been released to OEM customers and...
