CVE-2018-3639

intel atom_c: Sicherheitsluecke

Affected

  • siemens/itc1500_firmware lt *..3.1
  • siemens/itc1500_pro_firmware lt *..3.1
  • siemens/itc1900_firmware lt *..3.1
  • siemens/itc1900_pro_firmware lt *..3.1
  • siemens/itc2200_firmware lt *..3.1
  • siemens/itc2200_pro_firmware lt *..3.1
  • oracle/local_service_management_system between 13.0..13.3
  • siemens/simatic_et_200_sp_firmware lt *..2.6
  • siemens/simatic_field_pg_m4_firmware lt *..18.01.09
  • siemens/simatic_field_pg_m5_firmware lt *..22.01.06
  • siemens/simatic_ipc3000_smart_firmware lt *..1.5
  • siemens/simatic_ipc347e_firmware lt *..1.5
  • siemens/simatic_ipc427d_firmware lt *..17.0x.14
  • siemens/simatic_ipc427e_firmware lt *..21.01.09
  • siemens/simatic_ipc477d_firmware lt *..17.0x.14
  • siemens/simatic_ipc477e_firmware lt *..21.01.09
  • siemens/simatic_ipc477e_pro_firmware lt *..21.01.09
  • siemens/simatic_ipc547e_firmware lt *..r1.30.0
  • siemens/simatic_ipc547g_firmware lt *..r1.23.0
  • siemens/simatic_ipc627c_firmware lt *..15.02.15
  • siemens/simatic_ipc627d_firmware lt *..19.02.11
  • siemens/simatic_ipc647c_firmware lt *..15.01.14
  • siemens/simatic_ipc647d_firmware lt *..19.01.14
  • siemens/simatic_ipc677d_firmware lt *..19.02.11
  • siemens/simatic_ipc677c_firmware lt *..15.02.15
  • siemens/simatic_ipc827c_firmware lt *..15.02.15
  • siemens/simatic_ipc827d_firmware lt *..19.02.11
  • siemens/simatic_ipc847c_firmware lt *..15.01.14
  • siemens/simatic_ipc847d_firmware lt *..19.01.14
  • siemens/simatic_itp1000_firmware lt *..23.01.04
  • siemens/simatic_s7-1500_firmware lt *..2.6
  • siemens/simotion_p320-4e_firmware lt *..17.0x.14
  • siemens/sinumerik_pcu_50.5_firmware lt *..15.02.15
  • schneider-electric/struxureware_data_center_expert lt *..7.6.0
  • nvidia/jetson_tx1 lt *..r28.3
  • nvidia/jetson_tx2 lt *..r28.3

Description

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Affected operating systems

  • linux

    debian / debian_linux8.0

  • linux

    debian / debian_linux9.0

  • linux

    redhat / enterprise_linux_desktop6.0

  • linux

    redhat / enterprise_linux_desktop7.0

  • linux

    redhat / enterprise_linux_eus6.7

  • linux

    redhat / enterprise_linux_eus7.3

  • linux

    redhat / enterprise_linux_eus7.4

  • linux

    redhat / enterprise_linux_eus7.5

  • linux

    redhat / enterprise_linux_eus7.6

  • linux

    redhat / enterprise_linux_eus7.7

  • linux

    redhat / enterprise_linux_server6.0

  • linux

    redhat / enterprise_linux_server7.0

  • linux

    redhat / enterprise_linux_server_aus5.9

  • linux

    redhat / enterprise_linux_server_aus6.4

  • linux

    redhat / enterprise_linux_server_aus6.5

  • linux

    redhat / enterprise_linux_server_aus6.6

  • linux

    redhat / enterprise_linux_server_aus7.2

  • linux

    redhat / enterprise_linux_server_aus7.3

  • linux

    redhat / enterprise_linux_server_aus7.4

  • linux

    redhat / enterprise_linux_server_aus7.7

  • linux

    redhat / enterprise_linux_server_tus6.6

  • linux

    redhat / enterprise_linux_server_tus7.2

  • linux

    redhat / enterprise_linux_server_tus7.3

  • linux

    redhat / enterprise_linux_server_tus7.4

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

armcortex-a
intelatom_c
intelatom_e
intelatom_x5-e3930
intelatom_x5-e3940
intelatom_x7-e3950
intelatom_z
intelceleron_j
intelceleron_n
intelcore_i3
intelcore_i5
intelcore_i7
intelcore_m
intelpentium
intelpentium_j
intelpentium_silver
intelxeon_e-1105c
intelxeon_e3
intelxeon_e3_1105c_v2
intelxeon_e3_1125c_v2
intelxeon_e3_12201
intelxeon_e3_12201_v2
intelxeon_e3_1220_v2
intelxeon_e3_1220_v3
intelxeon_e3_1220_v5
intelxeon_e3_1220_v6
intelxeon_e3_1220l_v3
intelxeon_e3_1225
intelxeon_e3_1225_v2
intelxeon_e3_1225_v3
intelxeon_e3_1225_v5
intelxeon_e3_1225_v6
intelxeon_e3_1226_v3
intelxeon_e3_1230
intelxeon_e3_1230_v2
intelxeon_e3_1230_v3
intelxeon_e3_1230_v5
intelxeon_e3_1230_v6
intelxeon_e3_1230l_v3
intelxeon_e3_1231_v3
intelxeon_e3_1235
intelxeon_e3_1235l_v5
intelxeon_e3_1240
intelxeon_e3_1240_v2
intelxeon_e3_1240_v3
intelxeon_e3_1240_v5
intelxeon_e3_1240_v6
intelxeon_e3_1240l_v3

Metrics

5.5
Source: nvd-v3
99.1 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
Show all metrics
Severity
medium
no public PoC known
60.6 %
High — model estimates ≥ 50% chance of real-world exploitation within 30 days.
Published
2018-05-22 12:00 UTC

References & sources

Linked advisories