CVE-2017-5753
63Vexday Risk Score
Keep watching. It has a public proof of concept.
ssvc Attendcvss 5.6epss 93%
from disclosure to weapon0 days
Published on NVDJan 4
1st PoCJan 3
exploitation probability
93%top 1% of all CVEs
observed exploitation
nono source reports it
10 public exploit(s)
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products
Intel Corporation · Most Modern Operating Systemspublic PoCs found — 10
exploitdbwww.exploit-db.com/exploits/43427unverifiedgithubgithub.com/Eugnis/spectre-attack★ 771githubgithub.com/00052/spectre-attack-example★ 12githubgithub.com/ixtal23/spectreScope★ 7githubgithub.com/EdwardOwusuAdjei/Spectre-PoC★ 4githubgithub.com/pedrolucasoliva/spectre-attack-demo★ 1githubgithub.com/albertleecn/cve-2017-5753★ 1githubgithub.com/sachinthaBS/Spectre-Vulnerability-CVE-2017-5753-★ 0cve_referencepacketstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.htmlunverifiedcve_referencewww.exploit-db.com/exploits/43427/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.htmlhttp://nvidia.custhelp.com/app/answers/detail/a_id/4609http://nvidia.custhelp.com/app/answers/detail/a_id/4611http://nvidia.custhelp.com/app/answers/detail/a_id/4613http://nvidia.custhelp.com/app/answers/detail/a_id/4614http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.htmlhttps://access.redhat.com/errata/RHSA-2018:0292https://access.redhat.com/security/vulnerabilities/speculativeexecution