Intel's Cascade Lake CPUs Impacted By New Zombieload v2 Attack

'The Zombieload vulnerability disclosed earlier this year in May has a
second variant that also works against more recent Intel processors,
not just older ones, including Cascade Lake, Intel's latest line of
high-end CPUs -- initially thought to have been unaffected. From a
report:

Intel is releasing microcode (CPU firmware) updates today to address
this new Zombieload attack variant, as part of its monthly Patch
Tuesday -- known as the Intel Platform Update (IPU) process. Back in
May, two teams of academics disclosed a new batch of vulnerabilities
that impacted Intel CPUs. Collectively known as MDS attacks, these are
security flaws in the same class as Meltdown, Spectre, and Foreshadow.
The attacks rely on taking advantage of the speculative execution
process, which is an optimization technique that Intel added to its
CPUs to improve data processing speeds and performance.
Vulnerabilities like Meltdown, Spectre, and Foreshadow, showed that
the speculative execution process was riddled with security holes.
Disclosed in May, MDS attacks were just the latest line of
vulnerabilities impacting speculative execution. They were different
from the original Meltdown, Spectre, and Foreshadow bugs disclosed in
2018 because they attacked different areas of a CPU's speculative
execution process.'

-- source: https://hardware.slashdot.org/story/19/11/12/1924232

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list -- [email protected] | To unsubscribe send an email to [email protected]
Unsubscribe: https://list.waikato.ac.nz/postorius/lists/wlug.list.waikato.ac.nz