Intel patches new ME vulnerabilities

#1

Post by nh2 » Sun, Jul 22, 2018, 1:09 PM UTC

Intel patches new ME vulnerabilities
blog.ptsecurity.com

Re: Intel patches new ME vulnerabilities

#2

Post by nh2 » Sun, Jul 22, 2018, 1:12 PM UTC

Intel advisory: https://www.intel.com/content/www/us/en/security-center/advi...

CVE-2018-3628 - "Buffer overflow in HTTP handler"

Affected processor list (simplified reordered by me to reflect relevance and improve readability):

• Core i3/i5/i7, generation 1-8 (that is, all of them)

• Xeon E3-1200 v5/v6

• Xeon Scalable

• Xeon W

• Core 2 Duo vPro, Centrino 2 vPro

Re: Intel patches new ME vulnerabilities

#3

Post by Macha » Sun, Jul 22, 2018, 1:27 PM UTC

nh2 wrote: post #2

Intel advisory: https://www.intel.com/content/www/us/en/security-center/advi... CVE-2018-3628 - "Buffer overflow in HTTP handler" Affected processor list (simplified reordered by me to reflect relevance and improve readability): • Core i3/i5/i7, generation 1-8 (that is, all of them) • Xeon E3-1200 v5/v6 • Xeon Scalable • Xeon W • Core 2 Duo vPro, Centrino 2 vPro

Also worth noting that they're not patching it for 1st, 2nd or 3rd generation Core CPUs. I'm sure there's plenty of Sandy Bridge/Ivy Bridge CPUs in the wild, and it's not like you have an option to discontinue use of the Intel ME :(

Re: Intel patches new ME vulnerabilities

#4

Post by deathhand » Sun, Jul 22, 2018, 1:30 PM UTC

Do we really need remote code execution on the bios level? Is this a case of 'we can, but should we?'

Re: Intel patches new ME vulnerabilities

#5

Post by baybal2 » Sun, Jul 22, 2018, 1:30 PM UTC

I wonder, who ever uses these "management engines," let alone put them open on WANs?

When first news of IME being compromised, I was surprised that Shodan showed such a small number of machines.

Re: Intel patches new ME vulnerabilities

#6

Post by simooooo » Sun, Jul 22, 2018, 1:34 PM UTC

nh2 wrote: post #2

Intel advisory: https://www.intel.com/content/www/us/en/security-center/advi... CVE-2018-3628 - "Buffer overflow in HTTP handler" Affected processor list (simplified reordered by me to reflect relevance and improve readability): • Core i3/i5/i7, generation 1-8 (that is, all of them) • Xeon E3-1200 v5/v6 • Xeon Scalable • Xeon W • Core 2 Duo vPro, Centrino 2 vPro

What about i9?

Re: Intel patches new ME vulnerabilities

#7

Post by nebulous1 » Sun, Jul 22, 2018, 1:34 PM UTC

Macha wrote: post #3

nh2 wrote: post #2

Intel advisory: https://www.intel.com/content/www/us/en/security-center/advi... CVE-2018-3628 - "Buffer overflow in HTTP handler" Affected processor list (simplified reordered by me to reflect relevance and improve readability): • Core i3/i5/i7, generation 1-8 (that is, all of them) • Xeon E3-1200 v5/v6 • Xeon Scalable • Xeon W • Core 2 Duo vPro, Centrino 2 vPro

Also worth noting that they're not patching it for 1st, 2nd or 3rd generation Core CPUs. I'm sure there's plenty of Sandy Bridge/Ivy Bridge CPUs in the wild, and it's not like you have an option to discontinue use of the Intel ME :(

My i7-2600 is still a beast (well, still gong strong anyway). They did the same thing with Meltdown/Spectre fixes.

Re: Intel patches new ME vulnerabilities

#8

Post by Dinux » Sun, Jul 22, 2018, 1:35 PM UTC

Here we go again

Re: Intel patches new ME vulnerabilities

#9

Post by NullPrefix » Sun, Jul 22, 2018, 1:38 PM UTC

Macha wrote: post #3

nh2 wrote: post #2

Intel advisory: https://www.intel.com/content/www/us/en/security-center/advi... CVE-2018-3628 - "Buffer overflow in HTTP handler" Affected processor list (simplified reordered by me to reflect relevance and improve readability): • Core i3/i5/i7, generation 1-8 (that is, all of them) • Xeon E3-1200 v5/v6 • Xeon Scalable • Xeon W • Core 2 Duo vPro, Centrino 2 vPro

Also worth noting that they're not patching it for 1st, 2nd or 3rd generation Core CPUs. I'm sure there's plenty of Sandy Bridge/Ivy Bridge CPUs in the wild, and it's not like you have an option to discontinue use of the Intel ME :(

No real advancement after Sandy Bridge was made. Only incremental 10% with each gen. That means current gen is only 2x as fast when comparing the same lines (i7 to i7). If you can't make new things better, just gimp the old ones, like Spectre/Meltdown.

Re: Intel patches new ME vulnerabilities

#10

Post by NullPrefix » Sun, Jul 22, 2018, 1:38 PM UTC

nebulous1 wrote: post #7

Macha wrote: post #3

Earlier quoted context omitted.

Also worth noting that they're not patching it for 1st, 2nd or 3rd generation Core CPUs. I'm sure there's plenty of Sandy Bridge/Ivy Bridge CPUs in the wild, and it's not like you have an option to discontinue use of the Intel ME :(

My i7-2600 is still a beast (well, still gong strong anyway). They did the same thing with Meltdown/Spectre fixes.

Grandpa, it's time to upgrade.