6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
7 High
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
21.7%
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo,
Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz
Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel
processors using Transactional Synchronization Extensions (TSX) could
expose memory contents previously stored in microarchitectural buffers to a
malicious process that is executing on the same CPU core. A local attacker
could use this to expose sensitive information.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-server | < 3.2.0.144.159 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.13.0-175-generic-lpae | < 3.13.0-175.226~12.04.1 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-144-generic-pae | < 3.2.0-144.191 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.13.0-175-generic | < 3.13.0-175.226~12.04.1 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-generic | < 3.2.0.144.159 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.13.0-175-lowlatency | < 3.13.0-175.226~12.04.1 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-144-virtual | < 3.2.0-144.191 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-generic-lpae-lts-trusty | < 3.13.0.175.163 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-virtual | < 3.2.0.144.159 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-generic-lts-trusty | < 3.13.0.175.163 | UNKNOWN |
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
7 High
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
21.7%