News

VMware’s Virtual Appliances Receive Meltdown & Spectre Fixes

Meltdown & Spectre are still hard to beat.

Another company that’s been working hard on Meltdown & Spectre fixes is VMware. The cloud computing and platform virtualization software provider has recently issued some patches and workarounds for various virtual appliances. These virtual appliances are apparently vulnerable to Meltdown & Spectre, especially when it comes to CPU data cache timing. The company issued an official warning, stating that the abuse could “leak information out of mis-speculated CPU execution, leading to (at worst) arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts.”

Worst case scenario, the cache timing exploit could lead to information disclosure.

How many patches are out so far?

VMware has only released a single patch at the time of writing. This patch is for the vSphere Integrated Containers (VIC) products, but mitigation tips are available for all other affected products. The complete list of affected VMware products is as follows:  vCloud Usage Meter (UM), Identity Manager (vIDM), vCenter Server (vCSA), vSphere Data Protection (VDP), vSphere Integrated Containers (VIC), and vRealize Automation (vRA). However, the company also advises users to not implement workarounds for products that are not present on the list. Below you will find a complete list of workarounds, which are useful until official patches arrive.

  • vCloud Usage Meter (UM): KB52467
  • Identity Manager (vIDM) 3.x, 2.x: KB52284
  • vCenter Server (vCSA) 6.0, 6.5: KB52312 [5.5 isn’t affected]
  • vSphere Data Protection (VDP): Unavailable
  • vSphere Integrated Containers (VIC): Patch available
  • vRealize Automation (vRA): 7.x KB52377 | 6.x KB52497

Support eTeknix.com

By supporting eTeknix, you help us grow and continue to bring you the latest news, reviews, and competitions. Follow us on Facebook and Twitter to keep up with the latest technology, share your favourite articles, chat with the team and more. Also check out eTeknix YouTube, where you’ll find our latest video reviews, event coverage and features in 4K!

Check out our Latest Video

Cernescu Andrei

Candrei is a writer for eTeknix who loves the latest technology news and gaming.

Disqus Comments Loading...

Recent Posts

Assassin’s Creed Boss Calls Shadows’ Inclusivity Backlash ‘Devastating’

The Assassin's Creed Shadows development team has been facing a difficult time amid an ongoing…

2 hours ago

Yoshi-P Says He Would Like a Re-Release of Vagrant Story and Final Fantasy Tactics

More than twenty years after the launch of Vagrant Story, many are still dreaming of…

2 hours ago

Still Wakes the Deep 

LIVE THE HORROR: An immersive disaster story aboard a stunningly realised North Sea oil rig,…

7 hours ago

PHILIPS 275V8LA – 27 Inch QHD Monitor

The Philips VA LED display uses an advanced multi-domain vertical alignment technology that gives you…

7 hours ago

EPOMAKER Ajazz AK820 Pro 75% Gasket-mounted Mechanical Keyboard 

【TFT Screen: The Interactive Interface】This 75% mechanical keyboard comes equipped with a TFT Screen, serving…

7 hours ago

Funko Fusion

FANDOM FUSION Play as your favorite characters and wield their unique weapons and skills. Team…

7 hours ago