CVE-2017-5753
intel atom_c: Sicherheitsluecke
Affected
- synology/router_manager
between 1.1..1.1.7-6941-1 - synology/virtual_machine_manager
lt *..6.2-23739 - synology/diskstation_manager
between 5.2..6.2.2-24922 - siemens/simatic_itc1500_firmware
lt *..3.1 - siemens/simatic_itc1500_pro_firmware
lt *..3.1 - siemens/simatic_itc1900_firmware
lt *..3.1 - siemens/simatic_itc1900_pro_firmware
lt *..3.1 - siemens/simatic_itc2200_firmware
lt *..3.1 - siemens/simatic_itc2200_pro_firmware
lt *..3.1 - siemens/simatic_winac_rtx_\(f\)_2010_firmware
lt *..2010 - vmware/fusion
between 8.0.0..8.5.9 - vmware/workstation
between 12.0.0..12.5.8
Description
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Affected operating systems
linux
debian / debian_linux8.0
linux
debian / debian_linux9.0
linux
oracle / solaris10
linux
oracle / solaris11.3
linux
suse / suse_linux_enterprise_desktop12
linux
suse / suse_linux_enterprise_server11
linux
suse / suse_linux_enterprise_server12
linux
suse / suse_linux_enterprise_software_development_kit11
linux
suse / suse_linux_enterprise_software_development_kit12
linux
canonical / ubuntu_linux12.04
linux
canonical / ubuntu_linux14.04
linux
canonical / ubuntu_linux16.04
linux
canonical / ubuntu_linux17.04
linux
canonical / ubuntu_linux17.10
os
phoenixcontact / bl2_bpc_1000_firmware
os
phoenixcontact / bl2_bpc_2000_firmware
os
phoenixcontact / bl2_bpc_7000_firmware
os
phoenixcontact / bl2_ppc_1000_firmware
os
phoenixcontact / bl2_ppc_2000_firmware
os
phoenixcontact / bl2_ppc_7000_firmware
os
phoenixcontact / bl_bpc_2000_firmware
os
phoenixcontact / bl_bpc_2001_firmware
os
phoenixcontact / bl_bpc_3000_firmware
os
phoenixcontact / bl_bpc_3001_firmware
Affected products
The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.
Metrics
Show all metrics
References & sources
- http://nvidia.custhelp.com/app/answers/detail/a_id/4609x_refsource_CONFIRM
- https://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlmailing-listx_refsource_MLIST
- https://www.debian.org/security/2018/dsa-4187vendor-advisoryx_refsource_DEBIAN
- https://usn.ubuntu.com/3542-2/vendor-advisoryx_refsource_UBUNTU
- https://security.gentoo.org/glsa/201810-06vendor-advisoryx_refsource_GENTOO
- https://usn.ubuntu.com/3540-2/vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/security/vulnerabilities/speculativeexecutionx_refsource_CONFIRM
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002x_refsource_CONFIRM
- https://usn.ubuntu.com/3597-1/vendor-advisoryx_refsource_UBUNTU
- https://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlmailing-listx_refsource_MLIST
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlvendor-advisoryx_refsource_SUSE
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611x_refsource_CONFIRM
- https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlx_refsource_MISC
- https://cert.vde.com/en-us/advisories/vde-2018-002x_refsource_CONFIRM
- https://usn.ubuntu.com/3580-1/vendor-advisoryx_refsource_UBUNTU
- https://support.f5.com/csp/article/K91229003x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlvendor-advisoryx_refsource_SUSE
- https://www.debian.org/security/2018/dsa-4188vendor-advisoryx_refsource_DEBIAN
- https://access.redhat.com/errata/RHSA-2018:0292vendor-advisoryx_refsource_REDHAT