Loading

×Sorry to interrupt
This page has an error. You might just need to refresh it.
[NoErrorObjectAvailable] Uncaught ReferenceError: addCTracking is not defined
Failing descriptor: {markup://c:KM_ArticleThemeLayout}

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

VMware 虚拟设备和 CVE-2017-5753、CVE-2017-5715 (Spectre) 和 CVE-2017-5754 (Meltdown) (52264)

Last Updated: 3/5/2020Categories: SecurityTotal Views: 1Language:
Chinese (Simplified)JapaneseEnglish

Subscribe to get an email
newsletter with new updates

Please provide article feedback:

Symptoms

免责声明：本文是 VMware Virtual Appliances and CVE-2017-5753, CVE-2017-5715 (Spectre), CVE-2017-5754 (Meltdown) 的翻译版本。尽管我们会不断努力为本文提供最佳翻译版本，但本地化的内容可能会过时。有关最新内容，请参见英文版本。

Purpose

更新：KB55807 中所述的特定于操作系统的缓解措施是累积的，可以减轻本文所述问题的问题。

VMware 安全工程、通信和响应组 (vSECR) 正在调查这些漏洞可能对 VMware 虚拟设备产生的影响。

CPU 数据缓存计时可能会被软件滥用，从错误推断的 CPU 执行泄漏信息，导致在各种环境中导致出现跨本地安全边界的任意虚拟内存读取漏洞（最坏的情况）。Google Project Zero 和其他安全研究人员最近发现了三个变体；它们可能会影响许多现代处理器，其中包括某些 Intel、AMD 和 ARM 处理器：

变体 1：绕过边界检查 (CVE-2017-5753)，也称为 Spectre 攻击的一部分。
变体 2：分支目标注入 (CVE-2017-5715)，也称为 Spectre 攻击的一部分。
变体 3：恶意数据缓存加载 (CVE-2017-5754)，也称为 Meltdown 攻击。

必须对操作系统 (OS)、虚拟机、虚拟设备、管理程序、服务器固件和 CPU 微码进行全面修补或升级，以便有效减轻这些已知变体的影响。

本文档重点介绍与 VMware 虚拟设备相关的特定于操作系统的缓解措施。
请查看 KB52245：VMware 对推测执行安全问题 CVE-2017-5753、CVE-2017-5715、CVE-2017-5754（亦称 Spectre 和 Meltdown）的响应，全面了解 VMware 对这些问题的响应。

Resolution

重要信息：

随着调查继续进行，本部分将更新更多的相关虚拟设备。

除了 vCenter Sever 版本中添加的管理程序辅助的客户机缓解措施（如 VMSA-2018-0004 中所述）以外，还针对 vCenter Server Appliance 本身实施了特定于操作系统的缓解措施。

特定于操作系统的缓解措施将包括虚拟机硬件更新和客户机操作系统修复。不支持手动更新 VMware 虚拟设备中的虚拟机硬件。

受影响的虚拟设备：

vSECR 已评估以下设备，并确定这些设备可能会受到 CVE-2017-5753、CVE-2017-5715 或 CVE-2017-5754 的影响。

请在 Security-Announce mailing list 中注册以接收新的和更新的 VMware 安全公告，单击此页面右侧的“Subscribe to Article”以在此文档更新时收到提醒。如果未列出特定版本号，则该条目指的是所有受支持的设备版本。

以下受影响虚拟设备的缓解措施和解决办法现已记录在 VMSA-2018-0007 中。

VMware vCloud Usage Meter

VMware Identity Manager

VMware vCenter Server 6.5

VMware vCenter Server 6.0

VMware vSphere Data Protection

VMware vSphere Integrated Containers

VMware vRealize Automation

不受影响的虚拟设备：

vSECR 已完成下列设备的评估，并确定在支持的配置下，这些设备将不受影响，因为必须使用管理特权才能执行任意代码。此情况假设底层管理程序已根据 VMSA-2018-0002 进行修补，可缓解 CVE-2017-5753 和 CVE-2017-5715。如果未列出特定版本号，则表示该条目适用于所有受支持版本的设备。

VMware AppDefense 设备

VMware Horizon DaaS Platform

VMware Horizon Mirage

VMware HCX

VMware Integrated OpenStack

VMware IoT Pulse

VMware Mirage

VMware NSX for vSphere

VMware NSX-T

VMware Skyline Appliance

VMware Unified Access Gateway

VMware vCenter Server 5.5

VMware vCloud Availability for vCloud Director

VMware vCloud Director Extender

VMware vRealize Business for Cloud

VMware vRealize Log Insight

VMware vRealize Network Insight

VMware vRealize Operations

VMware vRealize Orchestrator

VMware vSphere Replication

VMware Workbench

注意：自动漏洞扫描程序可能会报告这些设备易受 CVE-2017-5753、CVE-2017-5715 或 CVE-2017-5754 的攻击，即使不会攻击该问题也是如此。这些产品仍会在计划的维护版本中作为预防措施更新各自的内核。

Changelog：

01/18/18：添加了 VMware AppDefense、VMware vCloud Extender、VMware Horizon Mirage、VMware vRealize Business for Cloud、VMware Workbench、VMware HCX、VMware IoT Pulse 和 VMware vSphere Data Protection。更新了 VMware vRealize Automation 并提供了解决办法。
01/22/18：将 VMware vCloud Usage Meter 添加到受影响产品的列表，并提供了解决办法。
01/25/18：添加了适用于 vRealize Automation 6.2.x 的解决办法。
02/08/18：缓解措施和解决办法信息已随 vSphere Integrated Containers 缓解措施的发布一起移动到 VMSA-2018-0007。请在 Security-Announce mailing list 中注册，以接收新的和更新的 VMware 安全公告。
04/09/19：更新了知识库文章，说明 KB55807 中所述的特定于操作系统的缓解措施是累积的，可以减轻本文所述的问题

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)JapaneseEnglish

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
Download and Install VMware Fusion (2014097)

Results 1-2 of 2

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware Virtual Appliances

Related Versions:

Support Assistant