SimplerCloud Pte Ltd

×
×

News: Security Advisory: CPU Vulnerabilities - Microarchitectural Data Sampling (MDS)

Published: 15/05/2019 Back

CRITICAL VULNERABILITIES - MICROARCHITECTURAL DATA SAMPLING (MDS)


Microarchitectural Data Sampling (MDS) is a new CPU-based vulnerability made public by Intel last night (14 May 2019), affecting major Intel CPUs. More details:


https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/MDS
https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html




WHAT YOU MUST DO TO PROTECT YOUR SERVERS


All customers are strongly advised to to update and patch their servers' operating systems to mitigate the impacts of the vulnerabilities on the guest OS level.


Here are the basic instructions, depending on your service plan with SimplerCloud.  Please open a support ticket by logging into our client area portal and go to Support > Open New Support Ticket so we can assist you further.

Customers who are running their own custom ISO should continue to follow security best practices and apply security updates to their images.



UPDATING YOUR OPERATING SYSTEM


- On Windows Servers:

Run Windows Update to install the latest patches. Restart the server for the new patches to take effect.


- On Ubuntu/Debian system:


apt-get update
apt-get dist-upgrade


Restart the server for the new patches to take effect.


- On CentOS system:

yum update

Restart the server for the new patches to take effect.




NOTE ON SIMPLERCLOUD INFRASTRUCTURE


We are currently working with our vendors to understand the nature of this vulnerability and for us to put up a plan to install the latest patches and updates to mitigate this vulnerability. Any further updates will be posted here.