CVE-2018-3693
CVE-2018-3693
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 8.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
10 jul 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
Productos afectados
Intel Corporation · Most Modern Operating Systems¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://access.redhat.com/errata/RHSA-2018:2384https://access.redhat.com/errata/RHSA-2018:2390https://access.redhat.com/errata/RHSA-2018:2395https://access.redhat.com/errata/RHSA-2019:1946https://access.redhat.com/errata/RHSA-2020:0174https://cdrdv2.intel.com/v1/dl/getContent/685359https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0https://security.netapp.com/advisory/ntap-20180823-0001/https://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html