{"id":10154,"date":"2018-01-15T21:28:17","date_gmt":"2018-01-15T21:28:17","guid":{"rendered":"https:\/\/www.accuwebhosting.com\/blog\/?p=10154"},"modified":"2024-12-31T07:46:26","modified_gmt":"2024-12-31T07:46:26","slug":"protect-server-meltdown-spectre-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.accuwebhosting.com\/blog\/protect-server-meltdown-spectre-vulnerabilities\/","title":{"rendered":"Protect Your Server Against Meltdown and Spectre Vulnerabilities"},"content":{"rendered":"

\"\"<\/a>

You may not know that most of the world’s computer processors are vulnerable to the Meltdown and Spectre vulnerabilities. What are Meltdown and Spectre, and what should you do to protect your server? In this article, we’ll take a look at these vulnerabilities, and talk about the major hardware vendors that are affected. Most importantly, we’ll explain the steps you should take on your Windows and Linux servers to secure your data.<\/p>

Let’s dive in!<\/p>

What are the Meltdown and Spectre Vulnerabilities?<\/h2>

Meltdown and Spectre are critical vulnerabilities in computer processors. They permit programs to leak information as they run, making that information available to hackers. Modern computer systems are set up so that programs can’t access data from other programs unless the user specifically allows that to happen. The Meltdown and Spectre vulnerabilities make it possible for an attacker to access program data without the user’s permission (and usually without the user’s knowledge). This means that an attacker could potentially access your personal photos, email, any passwords you’ve stored in your browser’s password manager, instant messages, corporate documents, tax returns, and more.<\/p>

Meltdown<\/strong> permits any application to gain access to the entire system memory. Operating system patches and firmware updates are required to mitigate this vulnerability.<\/p>

Why is it called Meltdown?<\/strong>
\nThis vulnerability “melts” security boundaries that are in place to protect your sensitive information.<\/p>

Spectre<\/strong>, on the other hand, permits one application to force another application to access some portion of its memory. This vulnerability is harder to exploit than Meltdown, but also harder to mitigate.<\/p>

Why is it called Spectre?<\/strong>
\nThe name is based on the process that is the root cause of the vulnerability, “speculative execution”. (Also, because it’s difficult to fix and will haunt us for some time!)<\/p>

Which hardware vendors are affected?<\/h2>

Intel’s core architecture and AMD processors are the most widely affected. However, there are 131+ affected vendors<\/i><\/a> for these vulnerabilities.<\/p>

Which devices are affected by Meltdown?<\/strong>
\nDesktop, laptop, and cloud computers are all affected by Meltdown. Every Intel processor made after 1995 that uses speculative execution is potentially affected, with the exception of Intel Itanium and Atom. Itanium and Atom processors made after 2013 are not affected by Meltdown.<\/p>

Which devices are affected by Spectre?<\/strong>
\nSpectre affects desktops, laptops, cloud servers, and smartphones. All modern processors can be affected by the Spectre vulnerability. Spectre has been confirmed on Intel, AMD, and ARM processors.<\/p>

How to protect your Windows server from the Meltdown and Spectre vulnerabilities?<\/h2>

it’s important to check to see if your windows system is vulnerable. If it is, you’ll need to take action. We’ve made it easy for you by giving you step-by-step instructions.<\/p>

How to check to see if your Windows server is protected against these vulnerabilities?<\/strong><\/p>

    \n
  1. Log in to your server and run Windows PowerShell<\/strong> as an administrator and run the following command:\n
    <\/div>\n
    Install-Module SpeculationControl<\/pre>\n
    <\/div>\n
    \"\"<\/a><\/p><\/li>\n
  2. Type “Y<\/strong>” and press Enter to enable NuGet provider.<\/li>\n
  3. Type “Y<\/strong>” and press Enter if you are asked if you want to install a package from an untrusted source – this is fine!<\/li>\n
  4. Run the following command to save the current execution policy.\n
    <\/div>\n
    $SaveExecutionPolicy = Get-ExecutionPolicy<\/pre>\n
    <\/div>\n<\/li>\n
  5. Run the following command to ensure you can import the module in the next step.\n
    <\/div>\n
     Set-ExecutionPolicy RemoteSigned -Scope Currentuser<\/pre>\n
    <\/div>\n<\/li>\n
  6. Type “Y<\/strong>” and press Enter to confirm the execution policy change.<\/li>\n
  7. Run the following command to import SpeculationControl module.\n
    <\/div>\n
     Import-Module SpeculationControl<\/pre>\n
    <\/div>\n<\/li>\n
  8. Finally, run the following command to make sure your device has the necessary updates.\n
    <\/div>\n
    Get-SpeculationControlSettings<\/pre>\n
    <\/div>\n
    \"\"<\/a><\/p><\/li>\n<\/ol>
    You’ll be able to see if your server is still vulnerable to the Meltdown and Spectre security flaws. This screenshot shows a Windows system that is not protected.<\/p>
    How to protect your Windows server from these vulnerabilities?<\/strong><\/p>
    Microsoft has worked with CPU vendors and released important security updates. You will need to:<\/p>
      \n
    1. Install all security updates.<\/li>\n
    2. Apply an applicable firmware update from the OEM device manufacturer.<\/li>\n<\/ol>
      When you check for Windows Updates, you may not get the security updates released in January 2018. In order to get these updates, you will need to add the following registry key on your virtual server:<\/p>
      Key=<\/strong>“HKEY_LOCAL_MACHINE” Subkey=<\/strong>“SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat” Value=”cadca5fe-87d3-4b96-b7fb-a231484277cc”
      \nType=<\/strong>“REG_DWORD”
      \nData=<\/strong>“0x00000000”<\/p>
      Once you’ve added this registry key, reboot your server. After your system starts up again, check for the updates. Install all new updates and reboot the server again.<\/p>
      You’ll also need to make sure that you have following security patches installed:<\/p>
      Windows Server, version 1709 (Server Core Installation) – 4056892<\/i><\/a>
      \nWindows Server 2016 –       4056890<\/i><\/a>
      \nWindows Server 2012 R2 –       4056898<\/i><\/a>
      \nWindows Server 2008 R2 –       4056897<\/i><\/a><\/p>
      If you still see that these patches are not installed, you can download them from the links mentioned on the update code.<\/p>
      Once you have updated the system and applied required firmware updates from the OEM device manufacturer, run the following commands again from the Windows PowerShell to make sure that your server is safe:<\/p>
      \n$SaveExecutionPolicy = Get-ExecutionPolicy\nSet-ExecutionPolicy RemoteSigned -Scope Currentuser\nImport-Module SpeculationControl\nGet-SpeculationControlSettings\nSet-ExecutionPolicy $SaveExecutionPolicy -Scope Currentuser<\/pre>
      <\/div>
      \"\"<\/a><\/p>
      You’re out of the danger zone now! This screenshot shows a Windows system that’s protected from the Specter and Meltdown vulnerabilities.<\/p>
      How to protect a Linux server from the Meltdown and Spectre vulnerabilities?<\/h2>
      Because these vulnerabilities are hardware-based, almost all Linux systems are affected by them. Many Linux distributions have released software updates that mitigate Meltdown and Spectre by disabling or working around the processor behavior that leads to the vulnerabilities. Linux systems are not yet fully patched.<\/p>
      Below is the list of Linux distributions that have released kernel updates with partial mitigation:<\/p>