# MA-727.052019: MyCERT Alert - Microarchitectural Data Sampling (MDS) Vulnerabilities

**Date:** 16 May 2019  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-727.052019  
**Advisory ID:** MA-727.052019

---

**1.0    Overview**
MyCERT is aware of a set of security vulnerabilities known as RIDL, Fallout and Zombieload which a new group vulnerability collectively called Microarchitectural Data Sampling (MDS). MDS is a sub-class of previously disclosed speculative execution side channel vulnerabilities and is comprised of four 
**2.0    Description**
RIDL, Fallout and Zombieload are side-channel attack methods similar to Meltdown and Spectre. MDS speculative execution side channel methods can be used to expose data in the following microarchitectural structures:
- Microarchitectural Store Buffer Data Sampling (MSBDS) CVE-2018-12126
- Microarchitectural Fill Buffer Data Sampling (MFBDS) CVE-2018-12130
- Microarchitectural Load Port Data Sampling (MLPDS) CVE-2018-12127
- Microarchitectural Data Sampling Uncacheable Memory (MDSUM) CVE-2019-11091
**3.0    Impact**
Exploitation of these vulnerabilities could let hackers execute code or extract sensitive data that are otherwise protected by the Intel processors’ architectural mechanisms.
**4.0    Affected Product**
MDS is addressed in hardware starting with select 8th and 9th Generation Intel® Core™ processors, as well as the 2nd Generation Intel® Xeon® Scalable processor family.
**5.0 Recommendations**
Users and administrators are recommended to review the below URL and perform the necessary update. Kindly refer to the below URL provided by Intel:
- <https://software.intel.com/security-software-guidance/software-guidance/microarchitectural-data-sampling>
Intel is not recommending that Intel® HT be disabled, and it’s important to understand that doing so does not alone provide protection against MDS.
In this year, MyCERT had released several Alerts and Advisories on current threats and vulnerabilities. System Administrators and Internet Users must be aware of these threats and vulnerabilities by applying necessary patches and updates.
The Alerts and Advisories are available at:
<https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2019&ctype=&keyword=>
For incident reporting and other enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](cyber999@cybersecurity.my) or [[email protected]](mycert@mycert.org.my)
Phone: 1-300-88-2999(monitored during business hours)
Fax: +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**6.0    References**
- <https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html>
- <https://software.intel.com/security-software-guidance/software-guidance/microarchitectural-data-sampling>
- <https://www.intel.com/content/www/us/en/architecture-and-technology/engineering-new-protections-into-hardware.html>
- <https://www.trendmicro.com/vinfo/hk-en/security/news/vulnerabilities-and-exploits/side-channel-attacks-ridl-fallout-and-zombieload-affects-millions-of-vulnerable-intel-processors>
- [https://www.bleepingcomputer.com/news/security/new-ridl-and-fallout-attacks-impact-all-modern-intel-cpus/](https://www.bleepingcomputer.com/news/security/new-ridl-and-fallout-attacks-impact-all-modern-intel-cpus/ )