Meltdown and Spectre – Vendor Patches
In early January we became aware of a set of security vulnerabilities known as Meltdown and Spectre that affect modern computer processors. Exploitation of these vulnerabilities could allow an attacker to obtain access to sensitive information.
Microsoft has temporarily halted updates for AMD machines. More information can be found here: https://support.microsoft.com/en-us/help/4073707/windows-os-security-update-block-for-some-amd-based-devices
The three Vulnerabilities have been disclosed:
- CVE-2017-5753
- CVE-2017-5715 (1 & 2 are collectively known as Spectre)
- CVE-2017-5754 (Meltdown)
The following table contains links to advisories and patches published in response to the vulnerabilities. This table will be updated as information becomes available.
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.