medium5.6
CVE-2018-3640
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system…
Impact
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Atom C | Versions c2308, c3308, c3338, c3508, c3538, c3558 |
| Intel | Atom E | Versions e3805, e3815, e3825, e3826, e3827, e3845 |
| Intel | Atom Z | Versions z2420, z2460, z2480, z2520, z2560, z2580 |
| Intel | Celeron J | Versions j3455, j4005, j4105 |
| Intel | Celeron N | Version n3450 |
| Intel | Core I3 | Versions 32nm, 45nm |
| Intel | Core I5 | Versions 32nm, 45nm |
| Intel | Core I7 | Versions 32nm, 45nm |
| Intel | Core M | Versions 32nm, 45nm |
| Intel | Pentium | Versions n4000, n4100, n4200 |
| Intel | Pentium J | Version j4205 |
| Intel | Pentium Silver | Versions j5005, n5000 |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.lenovo.com/us/en/solutions/LEN-22133
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- http://www.securityfocus.com/bid/104228
- http://www.securitytracker.com/id/1040949
- http://www.securitytracker.com/id/1042004
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
- https://security.netapp.com/advisory/ntap-20180521-0001/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel
- https://usn.ubuntu.com/3756-1/
- https://www.debian.org/security/2018/dsa-4273
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.kb.cert.org/vuls/id/180049
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
- https://www.synology.com/support/security/Synology_SA_18_23
- https://www.us-cert.gov/ncas/alerts/TA18-141A
- http://support.lenovo.com/us/en/solutions/LEN-22133
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- http://www.securityfocus.com/bid/104228