medium5.6
CVE-2018-3620
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data …
Impact
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Core I3 | Versions 330e, 330m, 330um, 350m, 370m, 380m |
| Intel | Core I5 | Versions 430m, 430um, 450m, 460m, 470um, 480m |
| Intel | Core I7 | Versions 7y75, 610e, 620le, 620lm, 620m, 620ue |
| Intel | Core M | Versions 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 |
| Intel | Core M3 | Versions 6y30, 7y30, 7y32 |
| Intel | Core M5 | Versions 6y54, 6y57 |
| Intel | Core M7 | Version 6y75 |
| Intel | Xeon | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.lenovo.com/us/en/solutions/LEN-24163
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
- http://www.securityfocus.com/bid/105080
- http://www.securitytracker.com/id/1041451
- http://www.vmware.com/security/advisories/VMSA-2018-0021.html
- http://xenbits.xen.org/xsa/advisory-273.html
- https://access.redhat.com/errata/RHSA-2018:2384
- https://access.redhat.com/errata/RHSA-2018:2387
- https://access.redhat.com/errata/RHSA-2018:2388
- https://access.redhat.com/errata/RHSA-2018:2389
- https://access.redhat.com/errata/RHSA-2018:2390
- https://access.redhat.com/errata/RHSA-2018:2391
- https://access.redhat.com/errata/RHSA-2018:2392
- https://access.redhat.com/errata/RHSA-2018:2393
- https://access.redhat.com/errata/RHSA-2018:2394
- https://access.redhat.com/errata/RHSA-2018:2395
- https://access.redhat.com/errata/RHSA-2018:2396
- https://access.redhat.com/errata/RHSA-2018:2402
- https://access.redhat.com/errata/RHSA-2018:2403
- https://access.redhat.com/errata/RHSA-2018:2404
- https://access.redhat.com/errata/RHSA-2018:2602
- https://access.redhat.com/errata/RHSA-2018:2603
- https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://foreshadowattack.eu/