News / Security

In regards to the recently discovered MDS vulnerabilities (also known as Zombieload, RIDL, and Fallout) in Intel CPUs, we want to assure our clients that all of our machines have been secured. Since our servers use Intel CPUs, our system administrators have applied the necessary security updates in order to protect our customers from these Microarchitectural Data Sampling vulnerabilities.

We take security very seriously, and although we aren't aware of any real world attack, we cannot risk having such a security hole in our server configuration.

A privilege escalation vulnerability (CVE-2019-0211) in the Apache web server was recently discovered. This vulnerability is particularly bad for some shared hosting providers, as it may allow unprivileged scripts to take over the main Apache process.

The Apache instances running on our servers are not affected by this vulnerability, as they are protected by the suEXEC security mechanism. Nonetheless, since our system administrators regularly update all software on our servers, a patch for this vulnerability has already been applied.

If you are following news on the Internet, and especially if you have any interest in security matters, then probably you have heard about Meltdown. This is a security vulnerability in popular CPUs, that affects most devices on the Internet, including servers, personal computers, and smartphones. Although the technical details of the vulnerabiliy are rather long, in a summary - they allow unauthorized access to system resources and sensitive data between users, programs, and virtualization platforms.

Our servers were also among the devices that were possibly affected by Meltdown.

Over the weekend, our system administrators performed emergency software updates on our production servers, including kernel updates that fix the Meltdown vulnerability.

Security is a primary concern for us, and our customers can rest assured that we are putting 100% effort to resolve any security issues as soon as possible.