{"uuid": "06ed3712-a9e2-4ca7-9287-f3c172949de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-5754", "type": "exploited", "source": "https://t.me/information_security_channel/14437", "content": "In late January, Krzanich revealed that the company had started working on processors with\u00a0built-in protections (https://www.securityweek.com/intel-working-cpus-meltdown-spectre-protections) for attacks similar to Meltdown and Spectre. Additional details have now been provided and Intel even published a video (https://www.youtube.com/watch?v=pi2ftnlfImo) that explains on a high level how these side-channel attacks work and how it plans on preventing them.\nMeltdown attacks rely on a vulnerability identified as CVE-2017-5754, while Spectre attacks are possible due to CVE-2017-5753 (Variant 1) and CVE-2017-5715 (Variant 2). Meltdown and Variant 1 can be addressed with software patches, but Variant 2 also requires microcode updates.\nIntel\u2019s new CPUs, both for data centers and PCs, will be redesigned to protect against Meltdown and Spectre Variant 2.\n\u201cWe have redesigned parts of the processor to introduce new levels of protection through partitioning that will protect against both Variants 2 and 3. Think of this partitioning as additional \u2018protective walls\u2019 between applications and user privilege levels to create an obstacle for bad actors,\u201d Krzanich explained.\nThese protections are expected to become available in the second half of the year with the release of Intel Xeon Scalable (Cascade Lake) and 8th Generation Intel Core processors.\n\u201cAs we bring these new products to market, ensuring that they deliver the performance improvements people expect from us is critical. Our goal is to offer not only the best performance, but also the best secure performance,\u201d Krzanich said.\nRelated: IBM Releases Spectre, Meltdown Patches for Power Systems (https://www.securityweek.com/ibm-releases-spectre-meltdown-patches-power-systems)\nRelated: New AMD Processors to Include Protections for Spectre-like Exploits (https://www.securityweek.com/new-amd-processors-include-protections-spectre-exploits)\nRelated: Microsoft, Intel Share Data on Performance Impact of CPU Flaw Patches (https://www.securityweek.com/microsoft-intel-share-data-performance-impact-cpu-flaw-patches)", "creation_timestamp": "2018-03-15T21:51:29.000000Z"}