AMD confirms flaws found by CTS-labs; promises patches with fixes

Costea Lestoc By: Costea Lestoc
2 minute read

Home » News » AMD confirms flaws found by CTS-labs; promises patches with fixes

AMD has finally confirmed the flaws announced by CTS-Labs, but it also downplayed their severity. The company promised to release fixes via firmware patches shortly.

CTS-Labs is a small security company that became famous after going public with 13 claimed security flaws that affect AMD’s Zen-based processor families. This happened after CTS-Labs alerted the company privately and when a substantial short on AMD’s stock got issued.

Here are the claimed vulnerabilities, according to AMD

The flaws aka Ryzenfall, Masterkey, Fallout, and Chimera sparked controversy regarding their severity and validity. Everyone was curious what AMD plans to do about this. AMD issued the first statement in which it confirms the flaws but says they have a less severe impact than previously presented by the security firm. AMD also mentioned the Spectre vulnerability that is related to design flaws in the Zen microarchitecture unlike the ones mentioned above.

AMD’s Mark Papermaster stated that the flaws found by CTS-Labs are associated with the firmware managing the embedded security control processor in some AMD products and the chipset used in some socket AM4 and socket TR4 desktop platforms that support AMD CPUs.

AMD said that all these issues require administrative access to the system that grants the user unrestricted access and the right to delete, create or modify any of the system’s data. Attackers would have increased power of exploits. AMD also said that modern Oss have adequate security controls that would prevent this from happening.

AMD confirms that it will release fixes

The company promised that it would release fixes for all these issues as soon as possible via firmware updates. These will have to be integrated into updates coming from each motherboard manufacturer and for each model. In other words, the fixes will probably need a long time and the affected products will receive the patches not as soon as expected. These will not affect the performance or functionality of the affected systems. AMD concluded saying that these flaws are definitely less easy to exploit compared to Spectre and Meltdown ones.

RELATED STORIES TO CHECK OUT:

Discussions

Next up

Cortana, Google Assistant and Alexa may soon work together

Rabia Noureen avatar. By: Rabia Noureen
2 minute read

Cortana may not be enjoying the same sort of success as Google Assistant and Amazon’s Alexa. As such, Microsoft has no plans to compete with Google […]

Continue Reading

5 excellent USB privacy software to protect your flash drives

Loredana Paraianu avatar. By: Loredana Paraianu
Less than a 1 minute read

If you use a USB stick in public places or on shared workstations, it is a good idea to protect your privacy. For this purpose, […]

Continue Reading

Windows 10 Mail and Calendar app gets improved dark mode

Rabia Noureen avatar. By: Rabia Noureen
2 minute read

Microsoft aims to offer the same dark mode across the entire application ecosystem in order to achieve consistency. The update will soon be rolled out […]

Continue Reading