Meltdown and Spectre Chip Flaws Affect Billions of Devices
Remember last year, I said worst year for Internet because of Wannacry Ransomware. Now may be its not, here is more worse coming up. On the eve of New Year, popular instant messaging service Whatsapp is goes down globally for hours.
Here again Google Project team have hit back the backbone of the technology. Researcher from Google Project team have disclosed the vulnerabilities potentially impact all major CPUs, including those from AMD, ARM, and Intel threatening almost all PCs, laptops, tablets, and smartphones, regardless of manufacturer or operating system.
The disclosed vulnerabilities have been categorized in Two attacks- Meltdown (CVE-2017-5754) and Spectre (CVE-2017-5753 and CVE-2017-5715), which could allow attackers to steal sensitive data which is currently processed on the computer.
Both vulnerabilities, exploit the one of the features of chips know as “Speculative Execution”, a technique that was used in almost every modern CPU to optimize the performance.
Meltdown and Spectre work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider’s infrastructure, it might be possible to steal data from other customers.
- Windows — Microsoft has issued an out-of-band patch update for Windows 10, while other versions of Windows will be patched on the traditional Patch Tuesday on January 9, 2018.
- MacOS — Apple had already fixed most of these security holes in macOS High Sierra 10.13.2 last month, but MacOS 10.13.3 will enhance or complete these mitigations.
- Linux — Linux kernel developers have also released patches by implementing kernel page-table isolation (KPTI) to move the kernel into an entirely separate address space.
- Android — Google has released security patches for Pixel/Nexus users as part of the Android January security patch update. Other users have to wait for their device manufacturers to release a compatible security update.