CVE-2018-3640
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 7.6%
probabilidade de exploração
7.6%top 6% das CVEs
exploração observada
nãonenhuma fonte reporta
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Produtos afetados
Intel Corporation · MultipleReferências
https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfhttps://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilityhttps://lists.debian.org/debian-lts-announce/2018/07/msg00038.htmlhttps://lists.debian.org/debian-lts-announce/2018/09/msg00017.htmlhttps://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005https://security.netapp.com/advisory/ntap-20180521-0001/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_ushttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannelhttp://support.lenovo.com/us/en/solutions/LEN-22133https://usn.ubuntu.com/3756-1/