medium5.6
CVE-2018-9056
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-…
Impact
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Atom C | Versions c2308, c2316, c2338, c2350, c2358, c2508 |
| Intel | Atom E | Versions e3805, e3815, e3825, e3826, e3827, e3845 |
| Intel | Atom X3 | Versions c3130, c3200rk, c3205rk, c3230rk, c3235rk, c3265rk |
| Intel | Atom Z | Versions z2420, z2460, z2480, z2520, z2560, z2580 |
| Intel | Celeron J | Versions j1750, j1800, j1850, j1900, j3060, j3160 |
| Intel | Celeron N | Versions n2805, n2806, n2807, n2808, n2810, n2815 |
| Intel | Core I3 | Versions 330e, 330m, 330um, 350m, 370m, 380m |
| Intel | Core I5 | Versions 430m, 430um, 450m, 460m, 470um, 480m |
| Intel | Core I7 | Versions 7y75, 610e, 620le, 620lm, 620m, 620ue |
| Intel | Core M | Versions 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 |
| Intel | Core M3 | Versions 6y30, 7y30, 7y32 |
| Intel | Core M5 | Versions 6y54, 6y57 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf
- https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/
- http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf
- https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/