Processors
Processors (Intel® Core™, Intel® Xeon®, etc); processor utilities and programs (Intel® Processor Identification Utility, Intel® Extreme Tuning Utility, Intel® Easy Streaming Wizard, etc.)
Announcements
This community is designed for sharing of public information. Please do not share Intel or third-party confidential information here.
12350 Discussions

To mitigate meltdown insecurity threat CVE-2017-5754 Rogue Data Access using C/C++ high level software

schav7
Beginner
345 Views

I have a query on spectre and meltdown insecurity threats to modern Intel CPUs. How can software developers can mitigate these in their c/c++ code. I have a query. Can we mitigate meltdown variant CVE-2017-5754 called as Rogue Data Access in c/c++ logic? or in MSVC compiler? or in Visual Studio compiler?

regards

sachindeo

 

0 Kudos
4 Replies
Wanner_G_Intel
Moderator
143 Views

Hello schav7,

 

Thank you for posting on this Intel Community.

 

End users and systems administrators should check with their operating system vendors and system manufacturers, and apply any available updates as soon as they are available. You should do this whether you use an Intel-based system, or other computer or mobile device. The most effective solution to this situation can vary, and may include updates to the operating system and firmware.

 

For additional information on Side-channel Vulnerability and Mitigation Methods, please review the following support link:

 

Side-channel Vulnerability and Mitigation Methods

 

Wanner G.

Intel Customer Support Technician

Under Contract to Intel Corporation

schav7
Beginner
143 Views

Hi Wanner

Thank for the reply actually am looking for implementing a custom software sunction in c/c++ that will mitigate spectre variant 2 and 4 ,

Variant 4 is CVE-2017-5754 Rogue Data Access

Variant 2 is (CVE-2017-5715) Branch target injection

 

regards

sachin

Wanner_G_Intel
Moderator
143 Views

Hello schav7,

 

We will investigate this issue further and get back to you soon.

 

Wanner G.

Intel Customer Support Technician

Under Contract to Intel Corporation

Wanner_G_Intel
Moderator
143 Views

Hello schav7,

 

We noted that you opened another thread describing the same issue - https://forums.intel.com/s/question/0D50P00004Mt1Bc

 

In this scenario, we recommend contacting the Intel® Developer Zone, create an account and submit your inquiry. 

 

Regards,

 

Wanner G.

Intel Customer Support Technician

Under Contract to Intel Corporation

Reply