Two New Security Vulnerabilities to Affect AMD EPYC Processors

[mtcn77]

Oh, so you're implying that my post are redundant.

Don't take his snarks personal. In some sense he is right, there is no vulnerability unless we know it...

 

[1d10t]

Don't take his snarks personal. In some sense he is right, there is no vulnerability unless we know it...

I never took seriously what was on the internet, especially on open forum
Previously we had a discussion with similar topic, point is that security vulnerabilities are important even if they are only "case studies", so that we can decide to disable certain features to minimize impact.

 

[lexluthermiester]

Don't take his snarks personal.

Irony...

Oh, so you're implying that my post are redundant.

More or less. Nothing personal.

 

[DeathtoGnomes]

Unless you're a high profile target, you still have almost completely nothing to worry about.

Absolutely right, but the tinfoil hat comment implies that there is wider spread conspiracy theory that targets everyone buying the chips.

we can decide to disable certain features to minimize impact.

this still assumes there is an active issue to take precautionary measures. if there is no actual problem no protective steps are needed. acting on theories is a waste of time.

 

[mtcn77]

this still assumes there is an active issue to take precautionary measures. if there is no actual problem no protective steps are needed. acting on theories is a waste of time.

Yeah, why is security important when the criminals aren't going to gain access to your computer...

Irony...

Puns are not ironic, they are on point.

 

[zlobby]

I love that 1st sentence.

 

[1d10t]

this still assumes there is an active issue to take precautionary measures. if there is no actual problem no protective steps are needed. acting on theories is a waste of time.

"Security is as good as its weakest point". Barring the door for fear burglar breaking into your home may sound paranoid, but if you do it after theft, you probably shouldn't because there's nothing left. Just a matter of perspective.

 

[R-T-B]

It should be noted that both of the vulnerabilities listed in this article are awaiting analysis and verification.

NVD - CVE-2020-12967

nvd.nist.gov

NVD - CVE-2021-26311

nvd.nist.gov

It should also be noted it affects an enterprise only feature related to secure-vms.

Consumer chips are unaffected.

 

[Imsochobo]

Somewhat significant, but if you have to compromise the Hypervisor to do it, its really only of concern when running in public cloud and you don't trust the vendor running it to secure the hypervisor.

and it's a feature that is new with 2nd or 3rd gen epyc cpu's, did not exist prior to it.
Intel doesn't have it, or maybe icelake-x brought it, either way it's really fresh so we were mostly fine before, but as said it's a selling point for cloud vendors "we cannot snoop anymore" or wait, we can by using these cve's.

time will tell, but this should tell people what it's about

 

[voltage]

well, I suppose if arm and intel can have vulnerability, why not amd. join in the fun amd!

 

[Makaveli]

Since all 3 generations use the same socket, this will be a good way to get them to upgrade to a Milan chip so they can enable SEV-SNP.

 

[Tardian]

well, I suppose if arm and intel can have vulnerability, why not amd. join in the fun amd!

fun: fugged up nightmare?

 

[DeathtoGnomes]

"Security is as good as its weakest point". Barring the door for fear burglar breaking into your home may sound paranoid, but if you do it after theft, you probably shouldn't because there's nothing left. Just a matter of perspective.

True enough, you cant fix something if you dont know what to look for, so the process waits on the white paper.

Yeah, why is security important when the criminals aren't going to gain access to your computer..

this is out of context of what I was replying to.

 

[z1n0x]

Now since AMD are catching up with market share, I won't be surprised if they ended having more vulnerabilities than Intel. LUL

Since all 3 generations use the same socket, this will be a good way to get them to upgrade to a Milan chip so they can enable SEV-SNP.

These vulnerabilities are quite profitable.

 

[Redwoodz]

I'm just here to say the first sentence is not only misleading it is patently FALSE. Amazed this is still going on from a supposed professional site.

The truth
"The exploits mentioned in both papers require a malicious administrator to have access in order to compromise the server hypervisor."
So you need admin priv to make system insecure...lmao

From the original- " While our approach is also applicable to traditional virtualization environments, its severity significantly increases with the attacker model of SEV-ES."
LMAO! How can it be more severe if you already have admin privelidge? TOTAL BS

Here's a list of Intel Xeon cpu's that are vulnerable as well.

Intel product specifications

Intel® product specifications, features and compatibility quick reference guide and code name decoder. Compare products including processors, desktop boards, server products and networking products.

ark.intel.com