Meltdown and Spectre Vulnerability

[Justin.Abendroth]

Are PA devices effected by the meltdown and spectre vulnerability and if so, are these signatures known yet by PA?

[bvandivier]

Any specific statements regarding Wildfire or other products as they relate to meltdown/spectre will be shared in future updates to the official advisory.

https://live.paloaltonetworks.com/t5/Customer-Advisories/Information-about-Meltdown-and-Spectre-find...

https://researchcenter.paloaltonetworks.com/2018/01/threat-brief-meltdown-spectre-vulnerabilities/

[justamoment]

---

@Ronelle wrote:

The new 762 update sent out last night was applied to our PA500 and "broke" it.

We had lots of resources-unavailable session end reasons.

We had to revert and restart the dataplane.

Has anyone else had these issues?

-Ronelle

---

We have 5 with no issues (well 4 - 1 is an A/P pair).

[LawrenceLiang]

Singature just released: "Name: Multiple CPUs Side-Channel Information Disclosure Vulnerability, Unique Threat ID: 30276"

[Scott_Holland]

Is there a test site where we can see what the endpoints will look like when the palo triggers a drop?

[chyates]

default action = alert.  surprising.