Intel Processors Data Leakage Advisory

krzemien · 29 Jan 2020

Can't keep up, methinks...

So: is there any (updated) vulnerability checker available? Standalone or or Powershell-based?

Cliff S · 29 Jan 2020

AMDMan2016 · 29 Jan 2020

For years i was using AMD based systems up til 2017, when i happened to be awarded some extra social security disability backpay money, so Friends in another PC game was like dude get Intel based system, and Nvidia video for great game performance. So Picked out Intel Gaming Desktop from Asus.

and Later in December an Intel Based Gaming Laptop

When in reality i should've went AMD Ryzen and i wouldn't probably have to worry on Processor security holes, Oh well i guess, just be happy as i can with these systems

Cliff S · 29 Jan 2020

CVEID: CVE-2020-0548
Description: Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Base Score: 2.8 Low
CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

CVEID: CVE-2020-0549
Description: Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Base Score: 6.5 Medium
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

If you all, like me, do not let anyone on your machine and secure it using Windows Hello(if you can, if you can't a good password and not 123456

) this really isn't going to effect you.

Barman58 · 29 Jan 2020

Well thanks @Cliff S

Now I have to change my password again after your posted it

Cliff S · 29 Jan 2020

Barman58 said:

Well thanks @Cliff S

Now I have to change my password again after your posted it

Try abcdef, I'm pretty sure no one uses that one

sygnus21 · 29 Jan 2020

151tom said:

Unfortunately intel doesn't care about it's consumers as none of my intel core 2 duo e7500 processors will ever receive a patch.

Unfortunately there has to be a cut off somewhere and that is an 11 year old processor that's been discontinued.

sygnus21 · 29 Jan 2020

eLPuSHeR said:

I am fed up with Intel vulnerabilities every day. I should have got a Ryzen cpu.

Sure, and you'd be crying you should have stayed with Intel when AMD releases their advisory.

That said, this is getting pretty annoying now. And yeah, my i9-9900K is listed.

krzemien · 29 Jan 2020

sygnus21 said:

Unfortunately there has to be a cut off somewhere and that is an 11 year old processor that's been discontinued.

Where is the cut off though? And - under circumstances as it transpires that it was pi$$-poor deliberate Intel's approach over the years from the day one - why should there be any?

For instance my 6.5 years' old VAIO laptop with 8.1 onboard is absolutely fine and I'd rather have it sorted instead of shelling £££s for a new one.

sygnus21 · 29 Jan 2020

I merely pointed out the obvious - Intel has a cutoff point. The how's and why's need to be directed towards Intel since I don't work for them.