CVE-2017-5754
intel atom_c: Sicherheitsluecke
mediumEPSS 84.2%
Description
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
Source: cvelistv5NVD (NIST)
Affected products
The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.
armcortex-a
intelatom_c
intelatom_e
intelatom_x3
intelatom_z
intelceleron_j
intelceleron_n
intelcore_i3
intelcore_i5
intelcore_i7
intelcore_m
intelcore_m3
intelcore_m5
intelcore_m7
intelpentium_j
intelpentium_n
intelxeon
intelxeon_bronze_3104
intelxeon_bronze_3106
intelxeon_e-1105c
intelxeon_e3
intelxeon_e3_1105c_v2
intelxeon_e3_1125c
intelxeon_e3_1125c_v2
intelxeon_e3_1220
intelxeon_e3_12201
intelxeon_e3_12201_v2
intelxeon_e3_1220_v2
intelxeon_e3_1220_v3
intelxeon_e3_1220_v5
intelxeon_e3_1220_v6
intelxeon_e3_1220l_v3
intelxeon_e3_1225
intelxeon_e3_1225_v2
intelxeon_e3_1225_v3
intelxeon_e3_1225_v5
intelxeon_e3_1225_v6
intelxeon_e3_1226_v3
intelxeon_e3_1230
intelxeon_e3_1230_v2
intelxeon_e3_1230_v3
intelxeon_e3_1230_v5
intelxeon_e3_1230_v6
intelxeon_e3_1230l_v3
intelxeon_e3_1231_v3
intelxeon_e3_1235
intelxeon_e3_1235l_v5
intelxeon_e3_1240
Metrics
99.7 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
Show all metrics
Severity
medium
107.50
no public PoC known
5.6
Published
2018-01-04 13:00 UTC
References & sources
- http://nvidia.custhelp.com/app/answers/detail/a_id/4609x_refsource_CONFIRM
- https://usn.ubuntu.com/3523-1/vendor-advisoryx_refsource_UBUNTU
- https://usn.ubuntu.com/usn/usn-3525-1/vendor-advisoryx_refsource_UBUNTU
- https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinx_refsource_CONFIRM
- https://security.gentoo.org/glsa/201810-06vendor-advisoryx_refsource_GENTOO
- https://www.debian.org/security/2018/dsa-4082vendor-advisoryx_refsource_DEBIAN
- https://support.citrix.com/article/CTX234679x_refsource_CONFIRM
- https://usn.ubuntu.com/3540-2/vendor-advisoryx_refsource_UBUNTU
- https://usn.ubuntu.com/3522-3/vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/security/vulnerabilities/speculativeexecutionx_refsource_CONFIRM
- https://lists.debian.org/debian-lts-announce/2018/01/msg00004.htmlmailing-listx_refsource_MLIST
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002x_refsource_CONFIRM
- https://usn.ubuntu.com/3597-1/vendor-advisoryx_refsource_UBUNTU
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlvendor-advisoryx_refsource_SUSE
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611x_refsource_CONFIRM
- https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlx_refsource_MISC
- https://cert.vde.com/en-us/advisories/vde-2018-002x_refsource_CONFIRM
- https://www.debian.org/security/2018/dsa-4120vendor-advisoryx_refsource_DEBIAN
- https://support.f5.com/csp/article/K91229003x_refsource_CONFIRM