Lucene search

[email protected]NVD:CVE-2018-3640

HistoryMay 22, 2018 - 12:29 p.m.

CVE-2018-3640

2018-05-2212:29:00

CWE-203

[email protected]

web.nvd.nist.gov

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

JSON

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

Affected configurations

NVD

Node

intelatom_cMatchc2308

intelatom_cMatchc3308

intelatom_cMatchc3338

intelatom_cMatchc3508

intelatom_cMatchc3538

intelatom_cMatchc3558

intelatom_cMatchc3708

intelatom_cMatchc3750

intelatom_cMatchc3758

intelatom_cMatchc3808

intelatom_cMatchc3830

intelatom_cMatchc3850

intelatom_cMatchc3858

intelatom_cMatchc3950

intelatom_cMatchc3955

intelatom_cMatchc3958

intelatom_eMatche3805

intelatom_eMatche3815

intelatom_eMatche3825

intelatom_eMatche3826

intelatom_eMatche3827

intelatom_eMatche3845

intelatom_zMatchz2420

intelatom_zMatchz2460

intelatom_zMatchz2480

intelatom_zMatchz2520

intelatom_zMatchz2560

intelatom_zMatchz2580

intelatom_zMatchz2760

intelatom_zMatchz3460

intelatom_zMatchz3480

intelatom_zMatchz3530

intelatom_zMatchz3560

intelatom_zMatchz3570

intelatom_zMatchz3580

intelatom_zMatchz3590

intelatom_zMatchz3735d

intelatom_zMatchz3735e

intelatom_zMatchz3735f

intelatom_zMatchz3735g

intelatom_zMatchz3736f

intelatom_zMatchz3736g

intelatom_zMatchz3740

intelatom_zMatchz3740d

intelatom_zMatchz3745

intelatom_zMatchz3745d

intelatom_zMatchz3770

intelatom_zMatchz3770d

intelatom_zMatchz3775

intelatom_zMatchz3775d

intelatom_zMatchz3785

intelatom_zMatchz3795

intelceleron_jMatchj3455

intelceleron_jMatchj4005

intelceleron_jMatchj4105

intelceleron_nMatchn3450

intelcore_i3Match32nm

intelcore_i3Match45nm

intelcore_i5Match32nm

intelcore_i5Match45nm

intelcore_i7Match32nm

intelcore_i7Match45nm

intelcore_mMatch32nm

intelcore_mMatch45nm

intelpentiumMatchn4000

intelpentiumMatchn4100

intelpentiumMatchn4200

intelpentium_jMatchj4205

intelpentium_silverMatchj5005

intelpentium_silverMatchn5000

intelxeon_e-1105cMatch-

intelxeon_e3Match125c_

intelxeon_e3Match1220_

intelxeon_e3Match1275_

intelxeon_e3Match1505m_v6

intelxeon_e3Match1515m_v5

intelxeon_e3Match1535m_v5

intelxeon_e3Match1535m_v6

intelxeon_e3Match1545m_v5

intelxeon_e3Match1558l_v5

intelxeon_e3Match1565l_v5

intelxeon_e3Match1575m_v5

intelxeon_e3Match1578l_v5

intelxeon_e3Match1585_v5

intelxeon_e3Match1585l_v5

intelxeon_e3Match3600

intelxeon_e3Match5600

intelxeon_e3Match7500

intelxeon_e3Matche5502

intelxeon_e3Matche5503

intelxeon_e3Matche5504

intelxeon_e3Matche5506

intelxeon_e3Matche5507

intelxeon_e3Matche5520

intelxeon_e3Matche5530

intelxeon_e3Matche5540

intelxeon_e3Matche6510

intelxeon_e3Matche6540

intelxeon_e3Matche6550

intelxeon_e3Matchl3403

intelxeon_e3Matchl3406

intelxeon_e3Matchl3426

intelxeon_e3Matchl5506

intelxeon_e3Matchl5508_

intelxeon_e3Matchl5518_

intelxeon_e3Matchl5520

intelxeon_e3Matchl5530

intelxeon_e3Matchw5580

intelxeon_e3Matchw5590

intelxeon_e3Matchx3430

intelxeon_e3Matchx3440

intelxeon_e3Matchx3450

intelxeon_e3Matchx3460

intelxeon_e3Matchx3470

intelxeon_e3Matchx3480

intelxeon_e3Matchx5550

intelxeon_e3Matchx5560

intelxeon_e3Matchx5570

intelxeon_e3_1105c_v2Match-

intelxeon_e3_1125c_v2Match-

intelxeon_e3_1220_v2Match-

intelxeon_e3_1220_v3Match-

intelxeon_e3_1220_v5Match-

intelxeon_e3_1220_v6Match-

intelxeon_e3_12201Match-

intelxeon_e3_12201_v2Match-

intelxeon_e3_1220l_v3Match-

intelxeon_e3_1225Match-

intelxeon_e3_1225_v2Match-

intelxeon_e3_1225_v3Match-

intelxeon_e3_1225_v5Match-

intelxeon_e3_1225_v6Match-

intelxeon_e3_1226_v3Match-

intelxeon_e3_1230Match-

intelxeon_e3_1230_v2Match-

intelxeon_e3_1230_v3Match-

intelxeon_e3_1230_v5Match-

intelxeon_e3_1230_v6Match-

intelxeon_e3_1230l_v3Match-

intelxeon_e3_1231_v3Match-

intelxeon_e3_1235Match-

intelxeon_e3_1235l_v5Match-

intelxeon_e3_1240Match-

intelxeon_e3_1240_v2Match-

intelxeon_e3_1240_v3Match-

intelxeon_e3_1240_v5Match-

intelxeon_e3_1240_v6Match-

intelxeon_e3_1240l_v3Match-

intelxeon_e3_1240l_v5Match-

intelxeon_e3_1241_v3Match-

intelxeon_e3_1245Match-

intelxeon_e3_1245_v2Match-

intelxeon_e3_1245_v3Match-

intelxeon_e3_1245_v5Match-

intelxeon_e3_1245_v6Match-

intelxeon_e3_1246_v3Match-

intelxeon_e3_1258l_v4Match-

intelxeon_e3_1260lMatch-

intelxeon_e3_1260l_v5Match-

intelxeon_e3_1265l_v2Match-

intelxeon_e3_1265l_v3Match-

intelxeon_e3_1265l_v4Match-

intelxeon_e3_1268l_v3Match-

intelxeon_e3_1268l_v5Match-

intelxeon_e3_1270Match-

intelxeon_e3_1270_v2Match-

intelxeon_e3_1270_v3Match-

intelxeon_e3_1270_v5Match-

intelxeon_e3_1270_v6Match-

intelxeon_e3_1271_v3Match-

intelxeon_e3_1275_v2Match-

intelxeon_e3_1275_v3Match-

intelxeon_e3_1275_v5Match-

intelxeon_e3_1275_v6Match-

intelxeon_e3_1275l_v3Match-

intelxeon_e3_1276_v3Match-

intelxeon_e3_1278l_v4Match-

intelxeon_e3_1280Match-

intelxeon_e3_1280_v2Match-

intelxeon_e3_1280_v3Match-

intelxeon_e3_1280_v5Match-

intelxeon_e3_1280_v6Match-

intelxeon_e3_1281_v3Match-

intelxeon_e3_1285_v3Match-

intelxeon_e3_1285_v4Match-

intelxeon_e3_1285_v6Match-

intelxeon_e3_1285l_v3Match-

intelxeon_e3_1285l_v4Match-

intelxeon_e3_1286_v3Match-

intelxeon_e3_1286l_v3Match-

intelxeon_e3_1290Match-

intelxeon_e3_1290_v2Match-

intelxeon_e3_1501l_v6Match-

intelxeon_e3_1501m_v6Match-

intelxeon_e3_1505l_v5Match-

intelxeon_e3_1505l_v6Match-

intelxeon_e3_1505m_v5Match-

intelxeon_e5Match2650l_v4

intelxeon_e5Match2658

intelxeon_e5Match2658_v2

intelxeon_e5Match2658_v3

intelxeon_e5Match2658_v4

intelxeon_e5Match2658a_v3

intelxeon_e5Match2660

intelxeon_e5Match2660_v2

intelxeon_e5Match2660_v3

intelxeon_e5Match2660_v4

intelxeon_e5Match2665

intelxeon_e5Match2667

intelxeon_e5Match2667_v2

intelxeon_e5Match2667_v3

intelxeon_e5Match2667_v4

intelxeon_e5Match2670

intelxeon_e5Match2670_v2

intelxeon_e5Match2670_v3

intelxeon_e5Match2680

intelxeon_e5Match2680_v2

intelxeon_e5Match2680_v3

intelxeon_e5Match2680_v4

intelxeon_e5Match2683_v3

intelxeon_e5Match2683_v4

intelxeon_e5Match2687w

intelxeon_e5Match2687w_v2

intelxeon_e5Match2687w_v3

intelxeon_e5Match2687w_v4

intelxeon_e5Match2690

intelxeon_e5Match2690_v2

intelxeon_e5Match2690_v3

intelxeon_e5Match2690_v4

intelxeon_e5Match2695_v2

intelxeon_e5Match2695_v3

intelxeon_e5Match2695_v4

intelxeon_e5Match2697_v2

intelxeon_e5Match2697_v3

intelxeon_e5Match2697_v4

intelxeon_e5Match2697a_v4

intelxeon_e5Match2698_v3

intelxeon_e5Match2698_v4

intelxeon_e5Match2699_v3

intelxeon_e5Match2699_v4

intelxeon_e5Match2699a_v4

intelxeon_e5Match2699r_v4

intelxeon_e5Match4603

intelxeon_e5Match4603_v2

intelxeon_e5Match4607

intelxeon_e5Match4607_v2

intelxeon_e5Match4610

intelxeon_e5Match4610_v2

intelxeon_e5Match4610_v3

intelxeon_e5Match4610_v4

intelxeon_e5Match4617

intelxeon_e5Match4620

intelxeon_e5Match4620_v2

intelxeon_e5Match4620_v3

intelxeon_e5Match4620_v4

intelxeon_e5Match4624l_v2

intelxeon_e5Match4627_v2

intelxeon_e5Match4627_v3

intelxeon_e5Match4627_v4

intelxeon_e5Match4628l_v4

intelxeon_e5Match4640

intelxeon_e5Match4640_v2

intelxeon_e5Match4640_v3

intelxeon_e5Match4640_v4

intelxeon_e5Match4648_v3

intelxeon_e5Match4650

intelxeon_e5Match4650_v2

intelxeon_e5Match4650_v3

intelxeon_e5Match4650_v4

intelxeon_e5Match4650l

intelxeon_e5Match4655_v3

intelxeon_e5Match4655_v4

intelxeon_e5Match4657l_v2

intelxeon_e5Match4660_v3

intelxeon_e5Match4660_v4

intelxeon_e5Match4667_v3

intelxeon_e5Match4667_v4

intelxeon_e5Match4669_v3

intelxeon_e5Match4669_v4

intelxeon_e5_1428lMatch-

intelxeon_e5_1428l_v2Match-

intelxeon_e5_1428l_v3Match-

intelxeon_e5_1620Match-

intelxeon_e5_1620_v2Match-

intelxeon_e5_1620_v3Match-

intelxeon_e5_1620_v4Match-

intelxeon_e5_1630_v3Match-

intelxeon_e5_1630_v4Match-

intelxeon_e5_1650Match-

intelxeon_e5_1650_v2Match-

intelxeon_e5_1650_v3Match-

intelxeon_e5_1650_v4Match-

intelxeon_e5_1660Match-

intelxeon_e5_1660_v2Match-

intelxeon_e5_1660_v3Match-

intelxeon_e5_1660_v4Match-

intelxeon_e5_1680_v3Match-

intelxeon_e5_1680_v4Match-

intelxeon_e5_2403Match-

intelxeon_e5_2403_v2Match-

intelxeon_e5_2407Match-

intelxeon_e5_2407_v2Match-

intelxeon_e5_2408l_v3Match-

intelxeon_e5_2418lMatch-

intelxeon_e5_2418l_v2Match-

intelxeon_e5_2418l_v3Match-

intelxeon_e5_2420Match-

intelxeon_e5_2420_v2Match-

intelxeon_e5_2428lMatch-

intelxeon_e5_2428l_v2Match-

intelxeon_e5_2428l_v3Match-

intelxeon_e5_2430Match-

intelxeon_e5_2430_v2Match-

intelxeon_e5_2430lMatch-

intelxeon_e5_2430l_v2Match-

intelxeon_e5_2438l_v3Match-

intelxeon_e5_2440Match-

intelxeon_e5_2440_v2Match-

intelxeon_e5_2448lMatch-

intelxeon_e5_2448l_v2Match-

intelxeon_e5_2450Match-

intelxeon_e5_2450_v2Match-

intelxeon_e5_2450lMatch-

intelxeon_e5_2450l_v2Match-

intelxeon_e5_2470Match-

intelxeon_e5_2470_v2Match-

intelxeon_e5_2603Match-

intelxeon_e5_2603_v2Match-

intelxeon_e5_2603_v3Match-

intelxeon_e5_2603_v4Match-

intelxeon_e5_2608l_v3Match-

intelxeon_e5_2608l_v4Match-

intelxeon_e5_2609Match-

intelxeon_e5_2609_v2Match-

intelxeon_e5_2609_v3Match-

intelxeon_e5_2609_v4Match-

intelxeon_e5_2618l_v2Match-

intelxeon_e5_2618l_v3Match-

intelxeon_e5_2618l_v4Match-

intelxeon_e5_2620Match-

intelxeon_e5_2620_v2Match-

intelxeon_e5_2620_v3Match-

intelxeon_e5_2620_v4Match-

intelxeon_e5_2623_v3Match-

intelxeon_e5_2623_v4Match-

intelxeon_e5_2628l_v2Match-

intelxeon_e5_2628l_v3Match-

intelxeon_e5_2628l_v4Match-

intelxeon_e5_2630Match-

intelxeon_e5_2630_v2Match-

intelxeon_e5_2630_v3Match-

intelxeon_e5_2630_v4Match-

intelxeon_e5_2630lMatch-

intelxeon_e5_2630l_v2Match-

intelxeon_e5_2630l_v3Match-

intelxeon_e5_2630l_v4Match-

intelxeon_e5_2637Match-

intelxeon_e5_2637_v2Match-

intelxeon_e5_2637_v3Match-

intelxeon_e5_2637_v4Match-

intelxeon_e5_2640Match-

intelxeon_e5_2640_v2Match-

intelxeon_e5_2640_v3Match-

intelxeon_e5_2640_v4Match-

intelxeon_e5_2643Match-

intelxeon_e5_2643_v2Match-

intelxeon_e5_2643_v3Match-

intelxeon_e5_2643_v4Match-

intelxeon_e5_2648lMatch-

intelxeon_e5_2648l_v2Match-

intelxeon_e5_2648l_v3Match-

intelxeon_e5_2648l_v4Match-

intelxeon_e5_2650Match-

intelxeon_e5_2650_v2Match-

intelxeon_e5_2650_v3Match-

intelxeon_e5_2650_v4Match-

intelxeon_e5_2650lMatch-

intelxeon_e5_2650l_v2Match-

intelxeon_e5_2650l_v3Match-

intelxeon_e7Match2803

intelxeon_e7Match2820

intelxeon_e7Match2830

intelxeon_e7Match2850

intelxeon_e7Match2850_v2

intelxeon_e7Match2860

intelxeon_e7Match2870

intelxeon_e7Match2870_v2

intelxeon_e7Match2880_v2

intelxeon_e7Match2890_v2

intelxeon_e7Match4807

intelxeon_e7Match4809_v2

intelxeon_e7Match4809_v3

intelxeon_e7Match4809_v4

intelxeon_e7Match4820

intelxeon_e7Match4820_v2

intelxeon_e7Match4820_v3

intelxeon_e7Match4820_v4

intelxeon_e7Match4830

intelxeon_e7Match4830_v2

intelxeon_e7Match4830_v3

intelxeon_e7Match4830_v4

intelxeon_e7Match4850

intelxeon_e7Match4850_v2

intelxeon_e7Match4850_v3

intelxeon_e7Match4850_v4

intelxeon_e7Match4860

intelxeon_e7Match4860_v2

intelxeon_e7Match4870

intelxeon_e7Match4870_v2

intelxeon_e7Match4880_v2

intelxeon_e7Match4890_v2

intelxeon_e7Match8830

intelxeon_e7Match8837

intelxeon_e7Match8850

intelxeon_e7Match8850_v2

intelxeon_e7Match8857_v2

intelxeon_e7Match8860

intelxeon_e7Match8860_v3

intelxeon_e7Match8860_v4

intelxeon_e7Match8867_v3

intelxeon_e7Match8867_v4

intelxeon_e7Match8867l

intelxeon_e7Match8870

intelxeon_e7Match8870_v2

intelxeon_e7Match8870_v3

intelxeon_e7Match8870_v4

intelxeon_e7Match8880_v2

intelxeon_e7Match8880_v3

intelxeon_e7Match8880_v4

intelxeon_e7Match8880l_v2

intelxeon_e7Match8880l_v3

intelxeon_e7Match8890_v2

intelxeon_e7Match8890_v3

intelxeon_e7Match8890_v4

intelxeon_e7Match8891_v2

intelxeon_e7Match8891_v3

intelxeon_e7Match8891_v4

intelxeon_e7Match8893_v2

intelxeon_e7Match8893_v3

intelxeon_e7Match8893_v4

intelxeon_e7Match8894_v4

intelxeon_goldMatch5115

intelxeon_goldMatch85115

intelxeon_goldMatch85118

intelxeon_goldMatch85119t

intelxeon_goldMatch85120

intelxeon_goldMatch85120t

intelxeon_goldMatch85122

intelxeon_goldMatch86126

intelxeon_goldMatch86126f

intelxeon_goldMatch86126t

intelxeon_goldMatch86128

intelxeon_goldMatch86130

intelxeon_goldMatch86130f

intelxeon_goldMatch86130t

intelxeon_goldMatch86132

intelxeon_goldMatch86134

intelxeon_goldMatch86134m

intelxeon_goldMatch86136

intelxeon_goldMatch86138

intelxeon_goldMatch86138f

intelxeon_goldMatch86138t

intelxeon_goldMatch86140

intelxeon_goldMatch86140m

intelxeon_goldMatch86142

intelxeon_goldMatch86142f

intelxeon_goldMatch86142m

intelxeon_goldMatch86144

intelxeon_goldMatch86146

intelxeon_goldMatch86148

intelxeon_goldMatch86148f

intelxeon_goldMatch86150

intelxeon_goldMatch86152

intelxeon_goldMatch86154

intelxeon_platinumMatch8153

intelxeon_platinumMatch8156

intelxeon_platinumMatch8158

intelxeon_platinumMatch8160

intelxeon_platinumMatch8160f

intelxeon_platinumMatch8160m

intelxeon_platinumMatch8160t

intelxeon_platinumMatch8164

intelxeon_platinumMatch8168

intelxeon_platinumMatch8170

intelxeon_platinumMatch8170m

intelxeon_platinumMatch8176

intelxeon_platinumMatch8176f

intelxeon_platinumMatch8176m

intelxeon_platinumMatch8180

intelxeon_silverMatch4108

intelxeon_silverMatch4109t

intelxeon_silverMatch4110

intelxeon_silverMatch4112

intelxeon_silverMatch4114

intelxeon_silverMatch4114t

intelxeon_silverMatch4116

intelxeon_silverMatch4116t

Node

armcortex-aMatch15

armcortex-aMatch57

armcortex-aMatch72

References

support.lenovo.com/us/en/solutions/LEN-22133

www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html

www.securityfocus.com/bid/104228

www.securitytracker.com/id/1040949

www.securitytracker.com/id/1042004

cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf

cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability

lists.debian.org/debian-lts-announce/2018/07/msg00038.html

lists.debian.org/debian-lts-announce/2018/09/msg00017.html

portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013

psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005

security.netapp.com/advisory/ntap-20180521-0001/

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel

usn.ubuntu.com/3756-1/

www.debian.org/security/2018/dsa-4273

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html

www.kb.cert.org/vuls/id/180049

www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006

www.synology.com/support/security/Synology_SA_18_23

www.us-cert.gov/ncas/alerts/TA18-141A

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

JSON

Related for NVD:CVE-2018-3640