Hewlett Packard Enterprise Product Security Vulnerability Alerts

AMD Processor Security Vulnerabilities (Fallout/Masterkey/Ryzenfall/Chimera)

Version 3.0 :  Last Updated: June 25, 2018

This website is updated frequently, as new product information becomes available.

On March 13, 2018, CTS Labs publicly released information regarding research into security vulnerabilities impacting some AMD products. In terms of HPE Servers, the relevant vulnerabilities impact the AMD Secure Processor (PSP) utilized in the AMD EPYC 7000 Series processor used on the HPE ProLiant DL385 Gen10 and HPE Cloudline CL3150 Gen10 servers. No other HPE server products are impacted by these potential vulnerabilities.

As HPE, working with AMD, learns more information, we will update our communications.

HPE is working with AMD to determine the extent of the vulnerability and what precautions might be needed to mitigate any exposure. Fortunately, the new HPE DL385 Gen10 product ships with all the new HPE security features, including the HPE Silicon Root of Trust. This new HPE technology protects against typical denial of service or permanent denial of service conditions that might be caused by one part of this vulnerability.

• Resources
• HPE Vulnerability Homepage
• HPE Security Bulletin
• AMD Statement

 

Use the following table to find vulnerability information.