Retour
-
Titre
Fend against Intel Downfall vulnerabilities with syslog-ng Store Box (SSB) Appliance BIOS updates. -
Description
The above-mentioned vulnerability currently has no known exploits on syslog-ng Store Box (SSB) Appliances, however, it is possible to fend against it by applying the hardware manufacturer-provided BIOS updates.
Affected syslog-ng Store Box (SSB) Appliances
- syslog-ng Store Box (SSB) Appliance 3000 is affected due to its Intel® Xeon® CPU E3-1275 v6 processor (CPUID Family_Model: 06_9EH, Stepping: 9, CPUID: 906E9).
- syslog-ng Store Box (SSB) Appliance 3500 is affected due to its Intel® Xeon® Silver 4110 processor (CPUID Family_Model: 06_55H, Stepping: 4, CPUID: 50654).
- syslog-ng Store Box (SSB) Appliance 4000 is affected due to its Intel® Xeon® Silver 4310T processor (CPUID Family_Model: 06_6AH, Stepping: 6, CPUID: 606A6).
See the list of all affected Intel CPUs at Affected Processors: Guidance for Security Issues on Intel® Processors.
The BIOS update is supported in syslog-ng Store Box (SSB) LTS 7.0.3 and newer releases.
The BIOS update is currently unsupported in any syslog-ng Store Box (SSB) 6 LTS or 6 Feature branch versions, and neither is supported on the 7 Feature branch.
There are plans to support the BIOS update in a future feature release.
-
Cause
Intel Downfall, also known as Gather Data Sampling (GDS) by Intel, is a vulnerability tracked as CVE-2022-40982.
External Links- Downfall
- CVE-2022-40982 @ cve.mitre.org
- CVE-2022-40982 @ nvd.nist.gov
- 2023.3 IPU - Intel® Processor Advisory
- Affected Processors: Guidance for Security Issues on Intel® Processors
- BIOS / BMC / Bundle Firmware for MBD-X11SSW-F @ Supermicro BIOS / BMC / Bundle Firmware Download Center
- BIOS / BMC / Bundle Firmware for MBD-X11DPU @ Supermicro BIOS / BMC / Bundle Firmware Download Center
- BIOS / BMC / Bundle Firmware for MBD-X12SPW-TF @ Supermicro BIOS / BMC / Bundle Firmware Download Center
-
Résolution
BIOS update
1) Confirm that your syslog-ng Store Box (SSB) Appliance is listed in the affected syslog-ng Store Box (SSB) Appliances and your installed
syslog-ng Store Box (SSB) version is listed in the list of syslog-ng Store Box (SSB) releases supporting the BIOS update.
2) Download the hardware manufacturer-provided BIOS:
For syslog-ng Store Box (SSB) Appliance 3000 download BIOS version 3.0 or newer from BIOS / BMC / Bundle Firmware for MBD-X11SSW-F @ Supermicro BIOS / BMC / Bundle Firmware Download Center.
For syslog-ng Store Box (SSB) Appliance 3500 download BIOS version 4.0 or newer from BIOS / BMC / Bundle Firmware for MBD-X11DPU @ Supermicro BIOS / BMC / Bundle Firmware Download Center.
For syslog-ng Store Box (SSB) Appliance 4000 download BIOS version 1.6 or newer from BIOS / BMC / Bundle Firmware for MBD-X12SPW-TF @ Supermicro BIOS / BMC / Bundle Firmware Download Center.
3) Update the BIOS of your syslog-ng Store Box (SSB) Appliance by following the steps included in the downloaded BIOS bundle.
Please note that if you would like to update your BIOS via the IPMI web interface, then you will have to acquire a Supermicro Out of Band (OOB) Software License Key (SFT-OOB-LIC) in case you are either using a syslog-ng Store Box (SSB) Appliance 3000 or a syslog-ng Store Box (SSB) Appliance 3500 hardware.