NetSight
high7.5

CVE-2017-5925

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors.

Impact

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.

Affected products

VendorProductAffected versions
AllwinnerA64
All versions
AmdAthlon Ii 640 X4
All versions
AmdE-350
All versions
AmdFx-8120 8-Core
All versions
AmdFx-8320 8-Core
All versions
AmdFx-8350 8-Core
All versions
AmdPhenom 9550 4-Core
All versions
IntelAtom C2750
All versions
IntelCeleron N2840
All versions
IntelCore I5 M480
All versions
IntelCore I7-2620qm
All versions
IntelCore I7-3632qm
All versions

Weakness classification

References