Updation on CPU Security Vulnerabilities : Meltdown and Spectre affecting Servers, Desktops and Laptops

Dear All,

We would like to bring to your notice the following important update:

You’ve probably already read about one of the most widespread security issues in modern computing history — colloquially known as “Meltdown” (CVE-2017-5754) and “Spectre” (CVE-2017-5753 and CVE-2017-5715) — affecting practically every computer including Home Pcs and Laptops built in the last 20 years, running any operating system.

What are Spectre and Meltdown?

Spectre and Meltdown are the names of the flaws found in a number of processors from Intel, ARM and AMD that could allow hackers to access passwords, encryption keys and other private information from open applications.

The flaws, found by a number of people including a member of Google’s Project Zero, are sending shock waves through the IT world. Namely, it was revealed that they had been present in chip designs for over 20 years, and that they affect a number of companies’ processors, meaning the flaws could be found on a huge number of devices, from PCs to web servers and even smartphones.

So should you be worried?

So far it doesn’t look like the Spectre or Meltdown flaws have been used in an attack, and device manufacturers are working with Intel, ARM and AMD to fix these flaws.

Intel has claimed that the exploits can't corrupt, modify or delete data. While it’s good to see companies set aside their differences to find a fix for these flaws, it has emerged that one flaw, Spectre, may need a processor redesign to fix.

However, this does mean that future processors should be free from the Spectre and Meltdown security flaws. So, don’t be too alarmed, but keep an eye on any updates your device offers, and follow our advice on how to protect against the Meltdown and Spectre CPU security flaws.

Before making any changes:

We have already patched our Shared/Reseller/Corporate Hosting Servers (Both Linux and Windows). Cloud Hosting and Other dedicated infrastructures will be patched very soon. We are waiting for the new patches and will do as and when required.

However, if you have VPS/Dedicated Server/Cloud Server package(s) with us, please perform the following steps depending on the Operating System installed on your order.

In case of Managed Servers, please reach out to us in case you face any issues while following the provided steps.

For Debian/Ubuntu:

For CentOS/Fedora/RedHat

For Windows:

Please Note: Applying the patches may have a negative impact on overall performance.

Steps 1 and 2 are documented on Microsoft's website.

Due to the way this vulnerability was made public, not all patches and updates may not be currently available.