Meltdown and Spectre10 Jan 2018
As you might have heard, there are 2 new major vulnerabilities and they are called Meltdown and Spectre.
Both are tie to the CPU manufacturing and to a process of preparing in cache the next cpu instruction leading this to a vulnerability called “speculative execution”
But I’m here just to show some real effects in AWS Cloud.
Everyone that has any instance at AWS should update their machines.
At this moment, new RedHat instances are patched but new Ubuntu instances are not yet patched so they need to be patched ASAP after creation.
It’s not yet the final solution but it patches some stuff.
Please check the pictures provided.
RedHat out-of-the-box (only git was installed)
Ubuntu 16.04 straight from AWS
Ubuntu 16.04 updated
There are tons of reading to do if you want. Some I found that where interesting are: https://en.wikipedia.org/wiki/Meltdown_(security_vulnerability) https://en.wikipedia.org/wiki/Spectre_(security_vulnerability)
Git repo used to show the status: https://github.com/abacao/spectre-meltdown-checker