medium5.6
CVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker wit…
Impact
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Atom C | Versions c2308, c2316, c2338, c2350, c2358, c2508 |
| Intel | Atom E | Versions e3805, e3815, e3825, e3826, e3827, e3845 |
| Intel | Atom X3 | Versions c3130, c3200rk, c3205rk, c3230rk, c3235rk, c3265rk |
| Intel | Atom Z | Versions z2420, z2460, z2480, z2520, z2560, z2580 |
| Intel | Celeron J | Versions j1750, j1800, j1850, j1900, j3060, j3160 |
| Intel | Celeron N | Versions n2805, n2806, n2807, n2808, n2810, n2815 |
| Intel | Core I3 | Versions 330e, 330m, 330um, 350m, 370m, 380m |
| Intel | Core I5 | Versions 430m, 430um, 450m, 460m, 470um, 480m |
| Intel | Core I7 | Versions 7y75, 610e, 620le, 620lm, 620m, 620ue |
| Intel | Core M | Versions 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 |
| Intel | Core M3 | Versions 6y30, 7y30, 7y32 |
| Intel | Core M5 | Versions 6y54, 6y57 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
- http://nvidia.custhelp.com/app/answers/detail/a_id/4609
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611
- http://nvidia.custhelp.com/app/answers/detail/a_id/4613
- http://nvidia.custhelp.com/app/answers/detail/a_id/4614
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt
- http://www.kb.cert.org/vuls/id/584653
- http://www.securityfocus.com/bid/102378
- http://www.securityfocus.com/bid/106128
- http://www.securitytracker.com/id/1040071
- http://xenbits.xen.org/xsa/advisory-254.html
- https://access.redhat.com/errata/RHSA-2018:0292
- https://access.redhat.com/security/vulnerabilities/speculativeexecution
- https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/
- https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
- https://cdrdv2.intel.com/v1/dl/getContent/685358
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://cert.vde.com/en-us/advisories/vde-2018-002
- https://cert.vde.com/en-us/advisories/vde-2018-003
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability