medium5.6Public exploit code
CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local u…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Multiple CPUs - 'Spectre' Information Disclosure2018-01-03 · local · multiple
Impact
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Atom C | Versions c2308, c2316, c2338, c2350, c2358, c2508 |
| Intel | Atom E | Versions e3805, e3815, e3825, e3826, e3827, e3845 |
| Intel | Atom X3 | Versions c3130, c3200rk, c3205rk, c3230rk, c3235rk, c3265rk |
| Intel | Atom X5-E3930 | All versions |
| Intel | Atom X5-E3940 | All versions |
| Intel | Atom X7-E3950 | All versions |
| Intel | Atom Z | Versions z2420, z2460, z2480, z2520, z2560, z2580 |
| Intel | Celeron J | Versions j1750, j1800, j1850, j1900, j3060, j3160 |
| Intel | Celeron N | Versions n2805, n2806, n2807, n2808, n2810, n2815 |
| Intel | Core I3 | Versions 330e, 330m, 330um, 350m, 370m, 380m |
| Intel | Core I5 | Versions 430m, 430um, 450m, 460m, 470um, 480m |
| Intel | Core I7 | Versions 7y75, 610e, 620le, 620lm, 620m, 620ue |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
- http://nvidia.custhelp.com/app/answers/detail/a_id/4609
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611
- http://nvidia.custhelp.com/app/answers/detail/a_id/4613
- http://nvidia.custhelp.com/app/answers/detail/a_id/4614
- http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt
- http://www.kb.cert.org/vuls/id/584653
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.securityfocus.com/bid/102371
- http://www.securitytracker.com/id/1040071
- http://xenbits.xen.org/xsa/advisory-254.html
- https://access.redhat.com/errata/RHSA-2018:0292
- https://access.redhat.com/security/vulnerabilities/speculativeexecution
- https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/
- https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
- https://cdrdv2.intel.com/v1/dl/getContent/685359
- https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://cert.vde.com/en-us/advisories/vde-2018-002