5 ms·
> Currently, we have only verified Meltdown on Intel processors. At the moment, it is unclear whether ARM and AMD processors are also affected by Meltdown. > I
by dom96 9y ago
> Currently, we have only verified Meltdown on Intel processors. At the moment, it is unclear whether ARM and AMD processors are also affected by Meltdown.
> In particular, we have verified Spectre on Intel, AMD, and ARM processors.
Interesting. So there are two different vulnerabilities. Spectre has been verified to affect Intel and AMD whereas Meltdown may affect both.
Edit: based on this statement,[1] AMD states they are not affected at all. This seems to be contrary to what the researchers have found?
1 - https://twitter.com/rhhackett/status/948676213505232897 https://twitter.com/rhhackett/status/948676213505232897
- bonzini 9y agoMeltdown is the one that AMD is not vulnerable to (at least according to AMD, of course). When AMD says they are "not susceptible to all three variants", that's a NAND, not a NOR.
- dom96 9y agoIndeed. But surely they wouldn't risk embarrassment by lying about this, would they? :)
- PuffinBlue 9y agoFrom Google Security Blog [0] >The Project Zero researchers discovered three methods (variants) of attack, which are effective under different conditions. All three attack variants can allow a process with normal user privileges to perform unauthorized reads of memory data, which may contain sensitive information such as passwords, cryptographic key material, etc. > There is no single fix for all three attack variants; each requires protection independently. Many vendors have patches available for one or more of these attacks. That would suggest the possibility of a third unnamed attack variant. [0] https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html https://security.googleblog.com/2018/01/todays-cpu-vulnerabi...
- bonzini 9y agoSpectre has two variants, CVE-2017-5053 and CVE-2017-5715.
- PuffinBlue 9y agoAh, I missed that, thanks!