NetSight
IP …
medium5.6

CVE-2018-3646

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data …

Impact

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

Affected products

VendorProductAffected versions
IntelCore I3
Versions 330e, 330m, 330um, 350m, 370m, 380m
IntelCore I5
Versions 430m, 430um, 450m, 460m, 470um, 480m
IntelCore I7
Versions 7y75, 610e, 620le, 620lm, 620m, 620ue
IntelCore M
Versions 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70
IntelCore M3
Versions 6y30, 7y30, 7y32
IntelCore M5
Versions 6y54, 6y57
IntelCore M7
Version 6y75
IntelXeon
All versions

Weakness classification

CWE-200

References