Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerabilities of Intel and ARM processors stem from the use of speculative execution and memory reading before returning addresses of previous write operations to memory. This allows attackers to exploit these vulnerabilities to disclose protected information.

🗓️ 26 Feb 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Intel and ARM speculative execution flaws allow memory reads to disclose protected information.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)
24 Jan 201912:55
–ibm
IBM Security Bulletins		Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018
28 Jan 201917:05
–ibm
IBM Security Bulletins		Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754 (known as Spectre and Meltdown).
23 Sep 202101:45
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)
24 Jan 201912:55
–ibm
IBM Security Bulletins		Security Bulletin: IBM Netezza Host Management is affected by the vulnerability known as Variant 4 or SpectreNG.
18 Oct 201903:36
–ibm
IBM Security Bulletins		Security Bulletin: IBM i has released PTFs in response to the vulnerabilities known as Spectre and Meltdown.
7 Oct 202416:26
–ibm
IBM Security Bulletins		Security Bulletin: This Power Hardware Management Console (HMC) Security Bulletin is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2018-3639 (Variant 4) and CVE-2018-3640 (Variant 3a).
23 Sep 202101:45
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.
17 Sep 201915:34
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in NTP, OpenSSL and Intel CPU's affect IBM Netezza Firmware Diagnostics.
18 Oct 201903:10
–ibm
IBM Security Bulletins		Security Bulletin: IBM PureApplication System is affected by a vulnerability (CVE-2018-3639) pertaining third-party CPU hardware
25 Jan 201912:25
–ibm
Rows per page
Vulners
Node
juniper_networksjunos_space_network_management_platformRange≤18.3r1linux
OR
siemens_agsimatic_itc1500Range<3.1linux
OR
siemens_agsimatic_itc1500_proRange<3.1linux
OR
siemens_agsimatic_itc1900Range<3.1linux
OR
siemens_agsimatic_itc1900_proRange<3.1linux
OR
siemens_agsimatic_itc2200Range<3.1linux
OR
siemens_agsimatic_itc2200_proRange<3.1linux
OR
siemens_agsimatic_field_pg_m5Range<22.01.06linux
OR
siemens_agsimatic_ipc427eRange<21.01.09linux
OR
siemens_agsimatic_ipc477eRange<21.01.09linux
OR
siemens_agsimatic_ipc627dRange<19.02.11linux
OR
siemens_agsimatic_ipc647dRange<19.01.14linux
OR
siemens_agsimatic_ipc677dRange<19.02.11linux
OR
siemens_agsimatic_ipc847dRange<19.01.14linux
OR
siemens_agsimatic_itp1000Range<23.01.04linux
OR
siemens_agsimatic_et_200sp_open_controllerRange<2.6linux
OR
siemens_agsimatic_field_pg_m4Range<18.01.09linux
OR
siemens_agsimatic_ipc427dRange<17.0x.14linux
OR
siemens_agsimatic_ipc477dRange<17.0x.14linux
OR
siemens_agsimatic_ipc477e_proRange<21.01.09linux
OR
siemens_agsimatic_ipc627cRange<15.02.15linux
OR
siemens_agsimatic_ipc647cRange<15.01.14linux
OR
siemens_agsimatic_ipc677cRange<15.02.15linux
OR
siemens_agsimatic_ipc827cRange<15.02.15linux
OR
siemens_agsimatic_ipc847cRange<15.01.14linux
OR
siemens_agsimatic_s7-1500_cpu_s7-1518-4_pn/dp_mfpRange<2.6linux
OR
siemens_agsimatic_s7-1500_cpu_s7-1518f-4_pn/dp_mfpRange<2.6linux
OR
siemens_agsimotion_p320-4eRange<17.0x.14linux
OR
siemens_agsimotion_p320-4sRange<17.0x.14linux
OR
siemens_agsinumerik_pcu_50.5Range<15.02.15linux
OR
siemens_agsimatic_et_200_sp_open_controller_(f)Range<2.6linux
OR
siemens_agsimatic_ipc3000_smart_v2Range<1.5linux
OR
siemens_agsimatic_ipc347eRange<1.5linux
OR
siemens_agsimatic_s7-1500_cpu_s7-1518-4_pn/dp_odkRange<2.6linux
OR
siemens_agsimatic_s7-1500_cpu_s7-1518f-4_pn/dp_odkRange<2.6linux
OR
siemens_agsimatic_s7-1500_software_controllerRange<2.6linux
OR
red_hatred_hat_virtualizationMatch4linux
OR
red_hatred_hat_enterprise_mrgMatch2.0linux
OR
red_hatred_hat_openstack_platformMatch9.0linux
OR
red_hatred_hat_openstack_platformMatch10linux
OR
red_hatred_hat_virtualizationMatch3linux
OR
red_hatred_hat_virtualization_engineMatch4.3linux
OR
red_hatred_hat_virtualization_engineMatch4.2linux
OR
red_hatrhev_managerMatch3.6linux
OR
red_hatred_hat_openstack_platformMatch13linux
OR
intelintel_management_engineRange<1.5linux
OR
intelintel_management_engineRange<15.01.14linux
OR
intelintel_management_engineRange<15.02.15linux
OR
intelintel_management_engineRange<17.0x.14linux
OR
intelintel_management_engineRange<18.01.09linux
OR
intelintel_management_engineRange<19.01.14linux
OR
intelintel_management_engineRange<19.02.11linux
OR
intelintel_management_engineRange<2.6linux
OR
intelintel_management_engineRange<21.01.09linux
OR
intelintel_management_engineRange<22.01.06linux
OR
intelintel_management_engineRange<23.01.04linux
OR
intelintel_management_engineRange<3.1linux
OR
intelintel_management_engineRange<7.6.0linux
OR
red_hatred_hat_enterprise_linuxMatch6
OR
oraclesolarisMatch11
OR
red_hatred_hat_enterprise_linuxMatch7
OR
novellopensuse_leapMatch42.3
OR
novellopensuse_leapMatch15.0

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Mar 2026 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 24.6
CVSS 35.5
EPSS0.60631
speculative executionmemory readsintel vulnerabilitiesarm vulnerabilitiesprotected information
2