Foreshadow Flaw Found in Intel CPUs
For the more than a billion computers that depend on Intel CPUs, the flaws just keep coming. Thanks to work by researchers from KU Leuven University in Belgium, along with the universities of Adelaide and Michigan, Intel has been made aware of yet another major weakness in their processor chip sets.
Since the first flaws announced earlier this year lead to the Spectre and Meltdown attacks, this new exploit has been named ‘Foreshadow’. Intel has published a list of the affected products, which you can find below this article.According to the cyber security arm of the US government, “an attacker could exploit this vulnerability to obtain sensitive information”. However, Intel has stated that “We are not aware of reports that any of these methods have been used in real-world exploits.” They have also pledged to ensure future processors would be built in ways to prevent vulnerability to Foreshadow.
Intel has released three CVEs to address this new issue: CVE-2018-3615, CVE-2018-3620, and CVE-2018-3646.
Patching and Mitigation
Systems that have applied updates made available by Intel earlier this year should already be protected against Foreshadow, Intel said.
Using an IT solution like Syxsense can simplify this complex task. Maintenance windows can be set so updates are deployed around business hours.Updates can also be deployed on demand, so that emergency fixes can be applied immediately. Syxsense provides flexibility and adaptability to accommodate the remediation strategy that best fits your business.
Learn more about the better way to manage your environment. Start a trial with Syxsense.
Impacted products:
The following Intel-based platforms are potentially impacted by these issues. Intel may modify this list at a later time.
Intel® Core™ i3 processor (45nm and 32nm)
Intel® Core™ i5 processor (45nm and 32nm)
Intel® Core™ i7 processor (45nm and 32nm)
Intel® Core™ M processor family (45nm and 32nm)
2nd generation Intel® Core™ processors
3rd generation Intel® Core™ processors
4th generation Intel® Core™ processors
5th generation Intel® Core™ processors
6th generation Intel® Core™ processors
7th generation Intel® Core™ processors
8th generation Intel® Core™ processors
Intel® Core™ X-series Processor Family for Intel® X99 platforms
Intel® Core™ X-series Processor Family for Intel® X299 platforms
Intel® Xeon® processor 3400 series
Intel® Xeon® processor 3600 series
Intel® Xeon® processor 5500 series
Intel® Xeon® processor 5600 series
Intel® Xeon® processor 6500 series
Intel® Xeon® processor 7500 series
Intel® Xeon® Processor E3 Family
Intel® Xeon® Processor E3 v2 Family
Intel® Xeon® Processor E3 v3 Family
Intel® Xeon® Processor E3 v4 Family
Intel® Xeon® Processor E3 v5 Family
Intel® Xeon® Processor E3 v6 Family
Intel® Xeon® Processor E5 Family
Intel® Xeon® Processor E5 v2 Family
Intel® Xeon® Processor E5 v3 Family
Intel® Xeon® Processor E5 v4 Family
Intel® Xeon® Processor E7 Family
Intel® Xeon® Processor E7 v2 Family
Intel® Xeon® Processor E7 v3 Family
Intel® Xeon® Processor E7 v4 Family
Intel® Xeon® Processor Scalable Family
Intel® Xeon® Processor D (1500, 2100)
