New 'Lazy FP State Restore' Vulnerability Found in All Modern Intel CPUs

🗓️ 14 Jun 2018 07:59:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 4 Views

Lazy FP State Restore flaw (CVE-2018-3665) in Intel CPUs enables speculative side-channel access.

Reporter	Title	Published	Views	Family All 372
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	3 Dec 201814:30	–	ibm
FreeBSD	FreeBSD -- Lazy FPU State Restore Information Disclosure	21 Jun 201800:00	–	freebsd
Tenable Nessus	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (CESA-2018:1852)	18 Jun 201800:00	–	nessus
Tenable Nessus	CentOS 6 : kernel (CESA-2018:2164) (Spectre)	16 Jul 201800:00	–	nessus
Tenable Nessus	Citrix XenServer Information Disclosure Vulnerability (CTX235225)	28 Jun 201800:00	–	nessus
Tenable Nessus	Debian DLA-1422-2 : linux security update (Spectre)	16 Jul 201800:00	–	nessus
Tenable Nessus	Debian DSA-4232-1 : xen - security update	21 Jun 201800:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1514)	13 May 201900:00	–	nessus

14 Jun 2018 07:59Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.7

CVSS 3.15.6

EPSS0.00611

lazy floating point state restore flaw intel processors speculative side channel floating point registers