K35558453: Intel SGX L1 Terminal Fault vulnerability CVE-2018-3615

🗓️ 21 Feb 2023 18:31:41Reported by f5Type

f5🔗 my.f5.com👁 83 Views

Systems with Intel SGX and speculative execution may allow unauthorized information disclosure to local attackers via side-channel analysis. Vulnerability CVE-2018-3615 also known as Foreshadow

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private Cloud Foundry (CVE-2018-3646, CVE-2018-3615, CVE-2018-3620)	19 Nov 201815:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by Foreshadow Spectre Variant vulnerability (CVE-2018-3646 CVE-2018-3615 CVE-2018-3620)	26 Oct 201820:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to Spectre variants 4 and 3a (CVE-2018-3639 CVE-2018-3640)	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Foreshadow Spectre Variant vulnerabilities affect IBM OS Image for Red Hat Linux Systems in IBM PureApplication System (CVE-2018-3615 CVE-2018-3620 CVE-2018-3646)	25 Jan 201912:10	–	ibm
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2018-1058) (Foreshadow)	15 Aug 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : kernel (ALAS-2018-1058) (Foreshadow)	15 Aug 201800:00	–	nessus
Tenable Nessus	Debian DLA-1506-1 : intel-microcode security update (Foreshadow) (Spectre)	17 Sep 201800:00	–	nessus
Tenable Nessus	Windows Speculative Execution Configuration Check	18 Dec 201900:00	–	nessus
Tenable Nessus	Slackware 14.2 : Slackware 14.2 kernel (SSA:2018-240-01) (Foreshadow)	29 Aug 201800:00	–	nessus
Tenable Nessus	KB4343885: Windows 10 Version 1703 August 2018 Security Update (Foreshadow)	14 Aug 201800:00	–	nessus

Vulners

Node

f5 big-ip_aamMatch14.0.0

OR

f5 big-ip_aamMatch13.1.1

OR

f5 big-ip_aamMatch13.1.0

OR

f5 big-ip_aamMatch13.0.1

OR

f5 big-ip_aamMatch13.0.0

OR

f5 big-ip_aamMatch12.1.3

OR

f5 big-ip_aamMatch12.1.2

OR

f5 big-ip_aamMatch12.1.1

OR

f5 big-ip_aamMatch12.1.0

OR

f5 big-ip_aamMatch11.6.3

OR

f5 big-ip_aamMatch11.6.2

OR

f5 big-ip_aamMatch11.6.1

OR

f5 big-ip_aamMatch11.5.7

OR

f5 big-ip_aamMatch11.5.6

OR

f5 big-ip_aamMatch11.5.5

OR

f5 big-ip_aamMatch11.5.4

OR

f5 big-ip_aamMatch11.5.3

OR

f5 big-ip_aamMatch11.5.2

OR

f5 big-ip_aamMatch11.5.1

OR

f5 big-ip_afmMatch14.0.0

OR

f5 big-ip_afmMatch13.1.1

OR

f5 big-ip_afmMatch13.1.0

OR

f5 big-ip_afmMatch13.0.1

OR

f5 big-ip_afmMatch13.0.0

OR

f5 big-ip_afmMatch12.1.3

OR

f5 big-ip_afmMatch12.1.2

OR

f5 big-ip_afmMatch12.1.1

OR

f5 big-ip_afmMatch12.1.0

OR

f5 big-ip_afmMatch11.6.3

OR

f5 big-ip_afmMatch11.6.2

OR

f5 big-ip_afmMatch11.6.1

OR

f5 big-ip_afmMatch11.5.7

OR

f5 big-ip_afmMatch11.5.6

OR

f5 big-ip_afmMatch11.5.5

OR

f5 big-ip_afmMatch11.5.4

OR

f5 big-ip_afmMatch11.5.3

OR

f5 big-ip_afmMatch11.5.2

OR

f5 big-ip_afmMatch11.5.1

OR

f5 big-ip_analyticsMatch14.0.0

OR

f5 big-ip_analyticsMatch13.1.1

OR

f5 big-ip_analyticsMatch13.1.0

OR

f5 big-ip_analyticsMatch13.0.1

OR

f5 big-ip_analyticsMatch13.0.0

OR

f5 big-ip_analyticsMatch12.1.3

OR

f5 big-ip_analyticsMatch12.1.2

OR

f5 big-ip_analyticsMatch12.1.1

OR

f5 big-ip_analyticsMatch12.1.0

OR

f5 big-ip_analyticsMatch11.6.3

OR

f5 big-ip_analyticsMatch11.6.2

OR

f5 big-ip_analyticsMatch11.6.1

OR

f5 big-ip_analyticsMatch11.5.7

OR

f5 big-ip_analyticsMatch11.5.6

OR

f5 big-ip_analyticsMatch11.5.5

OR

f5 big-ip_analyticsMatch11.5.4

OR

f5 big-ip_analyticsMatch11.5.3

OR

f5 big-ip_analyticsMatch11.5.2

OR

f5 big-ip_analyticsMatch11.5.1

OR

f5 big-ip_analyticsMatch11.2.1

OR

f5 big-ip_apmMatch14.0.0

OR

f5 big-ip_apmMatch13.1.1

OR

f5 big-ip_apmMatch13.1.0

OR

f5 big-ip_apmMatch13.0.1

OR

f5 big-ip_apmMatch13.0.0

OR

f5 big-ip_apmMatch12.1.3

OR

f5 big-ip_apmMatch12.1.2

OR

f5 big-ip_apmMatch12.1.1

OR

f5 big-ip_apmMatch12.1.0

OR

f5 big-ip_apmMatch11.6.3

OR

f5 big-ip_apmMatch11.6.2

OR

f5 big-ip_apmMatch11.6.1

OR

f5 big-ip_apmMatch11.5.7

OR

f5 big-ip_apmMatch11.5.6

OR

f5 big-ip_apmMatch11.5.5

OR

f5 big-ip_apmMatch11.5.4

OR

f5 big-ip_apmMatch11.5.3

OR

f5 big-ip_apmMatch11.5.2

OR

f5 big-ip_apmMatch11.5.1

OR

f5 big-ip_apmMatch11.2.1

OR

f5 big-ip_asmMatch14.0.0

OR

f5 big-ip_asmMatch13.1.1

OR

f5 big-ip_asmMatch13.1.0

OR

f5 big-ip_asmMatch13.0.1

OR

f5 big-ip_asmMatch13.0.0

OR

f5 big-ip_asmMatch12.1.3

OR

f5 big-ip_asmMatch12.1.2

OR

f5 big-ip_asmMatch12.1.1

OR

f5 big-ip_asmMatch12.1.0

OR

f5 big-ip_asmMatch11.6.3

OR

f5 big-ip_asmMatch11.6.2

OR

f5 big-ip_asmMatch11.6.1

OR

f5 big-ip_asmMatch11.5.7

OR

f5 big-ip_asmMatch11.5.6

OR

f5 big-ip_asmMatch11.5.5

OR

f5 big-ip_asmMatch11.5.4

OR

f5 big-ip_asmMatch11.5.3

OR

f5 big-ip_asmMatch11.5.2

OR

f5 big-ip_asmMatch11.5.1

OR

f5 big-ip_asmMatch11.2.1

OR

f5 big-ip_dnsMatch14.0.0

OR

f5 big-ip_dnsMatch13.1.1

OR

f5 big-ip_dnsMatch13.1.0

OR

f5 big-ip_dnsMatch13.0.1

OR

f5 big-ip_dnsMatch13.0.0

OR

f5 big-ip_dnsMatch12.1.3

OR

f5 big-ip_dnsMatch12.1.2

OR

f5 big-ip_dnsMatch12.1.1

OR

f5 big-ip_dnsMatch12.1.0

OR

f5 big-ip_fpsMatch14.0.0

OR

f5 big-ip_fpsMatch13.1.1

OR

f5 big-ip_fpsMatch13.1.0

OR

f5 big-ip_fpsMatch13.0.1

OR

f5 big-ip_fpsMatch13.0.0

OR

f5 big-ip_gtmMatch11.6.3

OR

f5 big-ip_gtmMatch11.6.2

OR

f5 big-ip_gtmMatch11.6.1

OR

f5 big-ip_gtmMatch11.5.7

OR

f5 big-ip_gtmMatch11.5.6

OR

f5 big-ip_gtmMatch11.5.5

OR

f5 big-ip_gtmMatch11.5.4

OR

f5 big-ip_gtmMatch11.5.3

OR

f5 big-ip_gtmMatch11.5.2

OR

f5 big-ip_gtmMatch11.5.1

OR

f5 big-ip_gtmMatch11.2.1

OR

f5 big-ip_link_controllerMatch14.0.0

OR

f5 big-ip_link_controllerMatch13.1.1

OR

f5 big-ip_link_controllerMatch13.1.0

OR

f5 big-ip_link_controllerMatch13.0.1

OR

f5 big-ip_link_controllerMatch13.0.0

OR

f5 big-ip_link_controllerMatch12.1.3

OR

f5 big-ip_link_controllerMatch12.1.2

OR

f5 big-ip_link_controllerMatch12.1.1

OR

f5 big-ip_link_controllerMatch12.1.0

OR

f5 big-ip_link_controllerMatch11.6.3

OR

f5 big-ip_link_controllerMatch11.6.2

OR

f5 big-ip_link_controllerMatch11.6.1

OR

f5 big-ip_link_controllerMatch11.5.7

OR

f5 big-ip_link_controllerMatch11.5.6

OR

f5 big-ip_link_controllerMatch11.5.5

OR

f5 big-ip_link_controllerMatch11.5.4

OR

f5 big-ip_link_controllerMatch11.5.3

OR

f5 big-ip_link_controllerMatch11.5.2

OR

f5 big-ip_link_controllerMatch11.5.1

OR

f5 big-ip_link_controllerMatch11.2.1

OR

f5 big-ip_ltmMatch14.0.0

OR

f5 big-ip_ltmMatch13.1.1

OR

f5 big-ip_ltmMatch13.1.0

OR

f5 big-ip_ltmMatch13.0.1

OR

f5 big-ip_ltmMatch13.0.0

OR

f5 big-ip_ltmMatch12.1.3

OR

f5 big-ip_ltmMatch12.1.2

OR

f5 big-ip_ltmMatch12.1.1

OR

f5 big-ip_ltmMatch12.1.0

OR

f5 big-ip_ltmMatch11.6.3

OR

f5 big-ip_ltmMatch11.6.2

OR

f5 big-ip_ltmMatch11.6.1

OR

f5 big-ip_ltmMatch11.5.7

OR

f5 big-ip_ltmMatch11.5.6

OR

f5 big-ip_ltmMatch11.5.5

OR

f5 big-ip_ltmMatch11.5.4

OR

f5 big-ip_ltmMatch11.5.3

OR

f5 big-ip_ltmMatch11.5.2

OR

f5 big-ip_ltmMatch11.5.1

OR

f5 big-ip_ltmMatch11.2.1

OR

f5 big-ip_pemMatch14.0.0

OR

f5 big-ip_pemMatch13.1.1

OR

f5 big-ip_pemMatch13.1.0

OR

f5 big-ip_pemMatch13.0.1

OR

f5 big-ip_pemMatch13.0.0

OR

f5 big-ip_pemMatch12.1.3

OR

f5 big-ip_pemMatch12.1.2

OR

f5 big-ip_pemMatch12.1.1

OR

f5 big-ip_pemMatch12.1.0

OR

f5 big-ip_pemMatch11.6.3

OR

f5 big-ip_pemMatch11.6.2

OR

f5 big-ip_pemMatch11.6.1

OR

f5 big-ip_pemMatch11.5.7

OR

f5 big-ip_pemMatch11.5.6

OR

f5 big-ip_pemMatch11.5.5

OR

f5 big-ip_pemMatch11.5.4

OR

f5 big-ip_pemMatch11.5.3

OR

f5 big-ip_pemMatch11.5.2

OR

f5 big-ip_pemMatch11.5.1

OR

f5 big-iq_centralized_managementMatch6.0.1

OR

f5 big-iq_centralized_managementMatch6.0.0

OR

f5 big-iq_centralized_managementMatch5.4.0

OR

f5 big-iq_centralized_managementMatch5.3.0

OR

f5 big-iq_centralized_managementMatch5.2.0

OR

f5 big-iq_centralized_managementMatch5.1.0

OR

f5 big-iq_centralized_managementMatch5.0.0

OR

f5 big-iq_centralized_managementMatch4.6.0

OR

f5 traffix_sdcMatch5.1.0

OR

f5 traffix_sdcMatch5.0.0

OR

f5 traffix_sdcMatch4.4.0

OR

f5 big-ip_edge_gatewayMatch11.2.1

OR

f5 big-ip_webacceleratorMatch11.2.1

OR

f5 big-iq_cloud_and_orchestrationMatch1.0.0

OR

f5 enterprise_managerMatch3.1.1

OR

f5 f5_iworkflowMatch2.3.0

OR

f5 f5_iworkflowMatch2.2.0

OR

f5 f5_iworkflowMatch2.1.0

OR

f5 f5_iworkflowMatch2.0.2

21 Feb 2023 18:31Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25.4

CVSS 36.4

CVSS 3.17.3

EPSS0.01628

SSVC

intel sgx speculative execution unauthorized disclosure side-channel analysis vulnerability foreshadow