medium5.5Public exploit code
CVE-2018-3639
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are know…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AMD / ARM / Intel - Speculative Execution Variant 4 Speculative Store Bypass2018-05-22 · dos · hardware · Verified
Impact
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Atom C | Versions c2308, c3308, c3338, c3508, c3538, c3558 |
| Intel | Atom E | Versions e3805, e3815, e3825, e3826, e3827, e3845 |
| Intel | Atom X5-E3930 | All versions |
| Intel | Atom X5-E3940 | All versions |
| Intel | Atom X7-E3950 | All versions |
| Intel | Atom Z | Versions z2420, z2460, z2480, z2520, z2560, z2580 |
| Intel | Celeron J | Versions j3455, j4005, j4105 |
| Intel | Celeron N | Version n3450 |
| Intel | Core I3 | Versions 32nm, 45nm |
| Intel | Core I5 | Versions 32nm, 45nm |
| Intel | Core I7 | Versions 32nm, 45nm |
| Intel | Core M | Versions 32nm, 45nm |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html
- http://support.lenovo.com/us/en/solutions/LEN-22133
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- http://www.openwall.com/lists/oss-security/2020/06/10/1
- http://www.openwall.com/lists/oss-security/2020/06/10/2
- http://www.openwall.com/lists/oss-security/2020/06/10/5
- http://www.securityfocus.com/bid/104232
- http://www.securitytracker.com/id/1040949
- http://www.securitytracker.com/id/1042004
- http://xenbits.xen.org/xsa/advisory-263.html
- https://access.redhat.com/errata/RHSA-2018:1629
- https://access.redhat.com/errata/RHSA-2018:1630
- https://access.redhat.com/errata/RHSA-2018:1632
- https://access.redhat.com/errata/RHSA-2018:1633
- https://access.redhat.com/errata/RHSA-2018:1635
- https://access.redhat.com/errata/RHSA-2018:1636
- https://access.redhat.com/errata/RHSA-2018:1637
- https://access.redhat.com/errata/RHSA-2018:1638
- https://access.redhat.com/errata/RHSA-2018:1639
- https://access.redhat.com/errata/RHSA-2018:1640
- https://access.redhat.com/errata/RHSA-2018:1641
- https://access.redhat.com/errata/RHSA-2018:1642
- https://access.redhat.com/errata/RHSA-2018:1643