Retina Customer Alert: Intel, AMD and ARM Chipset Vulnerability (Spectre and Meltdown)
Jan 24, 2018
Author:
Alejandro DaCosta
Product Manager
Retina Customer Alert: Intel, AMD and ARM Chipset Vulnerability (Spectre and Meltdown)
Alejandro DaCosta
Product Manager
As you have likely heard by now, the kernel-memory-leaking processor vulnerability (Spectre and Meltdown) extends beyond the Intel chipset; it is now known to affect AMD and ARM chipsets as well supporting Windows, Unix, Linux and MacOS. The massive scope of this vulnerability has led to some OS vendors to release emergency patches in order to mitigate this vulnerability.
For customers, BeyondTrust has added the following detection in Retina’s audit release 3365 based on the latest patches currently available.
Updated: 1/24/2018
67245 Microsoft Security Update for SQL Server - Jan 2018 - 4057118 2016 GDR
67246 Microsoft Security Update for Windows - Jan 2018 - Mitigation
67247 Microsoft Security Update for SQL Server - Jan 2018 - 4058561 2016 CU7
67248 Microsoft Security Update for SQL Server - Jan 2018 - 4057122 2017 GDR
67249 Microsoft Security Update for SQL Server - Jan 2018 - 4058562 2017 CU3
67107 Microsoft Security Update for Windows 10 - Jan 2018
67108 Microsoft Security Update for Windows - Jan 2018 - 7 / 2008R2
67109 Microsoft Security Update for Windows - Jan 2018 - 8.1 / 2012R2
67110 Microsoft Security Update for Windows - Jan 2018 - 2012
67111 Microsoft Cumulative Security Update for Internet Explorer - Jan 2018
67557 - Intel SA-000088: Speculative Execution Vulnerability - Mac OS X*
* These are informational checks that use either WMI or SSH to determine the processor model. If the model is affected, then the audit will flag. Note that we cannot check to see if the microcode has been patched in firmware, so these audits are informational only and should be used to help prioritize OS level patching.
BeyondTrust will continue to add more audits as additional patches become available. Watch here for more details. If you have any questions in the meantime, please contact customer support.
Prefers reduced motion setting detected. Animations will now be reduced as a result.