Security Bulletin: Undervoltages in Intel Processors can lead to possible security flaws.
"Undervoltages" in Intel Processors can lead to possible security flaws.
A security bulletin released recently by Sophos disclosed a flaw in Intel Processors whereby an attacker could take advantage of the voltage control mechanism of a computer. By slightly lowering the voltage the computer processor would start to generate small, undetectable errors in mathematical computations. This would allow the attacker to bypass certain security features built into Intel processors. The new exploit has been dubbed "Plundervolt" (an exploit is defined as getting a program to do something the author did NOT intend).
Considerable details about the flaw (including technical jargon) are provided [here] at sophos.com. Videos regarding the exploit are also available [here] at the official "Plundervolt" website.
Intel has released a security advisory regarding the exploit [here]. Their recommendation is to update the BIOS of your computer. The BIOS, also known as the Basic Input/Output System, is responsible for the most rudimentary communication between devices and peripherals on your computer.
Unfortunately, for older computers, some of these updates are no longer available on the Intel website. If you check the recommended BIOS update page at the Intel website [here], you will see a notice indicating that Intel has stopped providing updates for their Desktop Boards. More details about this "End of Life" policy is provided at the Bleeping Computer website [here]. This article offered a solution for some users by providing a link to a "mirror" archive of the older Intel software. This archive can be accessed [here].
IN SHORT: Decreasing the voltage of a computer processor to less than the required amount will cause it to generate errors. Attackers can use this to access sensitive parts of memory or feed incorrect information to built-in security programs. The recommended fix is to update the BIOS of your computer if you have one of these affected processors. Users of older computers may have difficulty finding the proper update. A possible solution for older hardware has been provided at the Bleeping Computer website.
Also, keep The Nerd Cave in mind if you have issues with your computer.
Some basic maintenance checks include:
- Checking for slow start-up programs.
- Removing unwanted background programs that could be slowing down your computer.
- Virus and malware scanning.
- Making sure effective Anti-Virus software is installed and working.
- Scanning for a corrupt file system that could lead to damaged or missing files in the future.
- Checking for possible hardware upgrades that could improve PC performance.
I also offer a number of personalized computer services such as resolving specific software or configuration issues with your computer or other hardware. Check us out at the link below.
Take Care,
Jeffrey Cobb (Owner/Operator)
Comments
Post a Comment