AMD confirms flaws found by CTS-labs; promises patches with fixes

Costea Lestoc By: Costea Lestoc
2 minute read

Home » News » AMD confirms flaws found by CTS-labs; promises patches with fixes

AMD has finally confirmed the flaws announced by CTS-Labs, but it also downplayed their severity. The company promised to release fixes via firmware patches shortly.

CTS-Labs is a small security company that became famous after going public with 13 claimed security flaws that affect AMD’s Zen-based processor families. This happened after CTS-Labs alerted the company privately and when a substantial short on AMD’s stock got issued.

Here are the claimed vulnerabilities, according to AMD

The flaws aka Ryzenfall, Masterkey, Fallout, and Chimera sparked controversy regarding their severity and validity. Everyone was curious what AMD plans to do about this. AMD issued the first statement in which it confirms the flaws but says they have a less severe impact than previously presented by the security firm. AMD also mentioned the Spectre vulnerability that is related to design flaws in the Zen microarchitecture unlike the ones mentioned above.

AMD’s Mark Papermaster stated that the flaws found by CTS-Labs are associated with the firmware managing the embedded security control processor in some AMD products and the chipset used in some socket AM4 and socket TR4 desktop platforms that support AMD CPUs.

AMD said that all these issues require administrative access to the system that grants the user unrestricted access and the right to delete, create or modify any of the system’s data. Attackers would have increased power of exploits. AMD also said that modern Oss have adequate security controls that would prevent this from happening.

AMD confirms that it will release fixes

The company promised that it would release fixes for all these issues as soon as possible via firmware updates. These will have to be integrated into updates coming from each motherboard manufacturer and for each model. In other words, the fixes will probably need a long time and the affected products will receive the patches not as soon as expected. These will not affect the performance or functionality of the affected systems. AMD concluded saying that these flaws are definitely less easy to exploit compared to Spectre and Meltdown ones.

RELATED STORIES TO CHECK OUT:

Discussions

Next up

Download VPN Unlimited for Windows 10 to access geo-restricted content

Rabia Noureen avatar. By: Rabia Noureen
2 minute read

Most of us are sick of the messages informing us that the content is unavailable when we access Hulu or Netflix apps. This notification appears […]

Continue Reading

What to do if your VPN stopped working in Dubai

Daniel Segun By: Daniel Segun
7 minute read

Are you resident in Dubai? Are you having problems with your VPN? If so, follow this guide to fix it. Here, we’ll be showing you […]

Continue Reading

Here’s how you can fix error 0x80070780 on Windows 10

Matthew Adams By: Matthew Adams
4 minute read

Error 0x80070780 arises for some users when they try to copy, delete, back up or edit certain files in Windows 10. The error message states: […]

Continue Reading