CVE-2018-3640
CVE-2018-3640
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
CVSS 5.6 · Mittel · EPSS 7,3% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
multiple
- Softwareversionen
- Multiple: Betroffen
Keine Korrektur veröffentlicht
intel-microcode Debian:12
- Softwareversionen
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.20180703.1
Auf 3.20180703.1 aktualisieren
intel-microcode Debian:13
- Softwareversionen
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.20180703.1
Auf 3.20180703.1 aktualisieren
intel-microcode Debian:14
- Softwareversionen
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.20180703.1
Auf 3.20180703.1 aktualisieren
intel-microcode Ubuntu:14.04:LTS
- Softwareversionen
- 1.20130906.1ubuntu2
- 1.20130906.1ubuntu3
- 2.20140122.1
- 2.20140430.1ubuntu1
- 2.20140624-t-1ubuntu2
- 3.20180108.0~ubuntu14.04.2
- 3.20180108.0+really20170707ubuntu14.04.1
- 3.20180312.0~ubuntu14.04.1
- 3.20180425.1~ubuntu0.14.04.1
- 3.20180425.1~ubuntu0.14.04.2
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.20180807a.0ubuntu0.14.04.1
Auf 3.20180807a.0ubuntu0.14.04.1 aktualisieren
intel-microcode Ubuntu:16.04:LTS
- Softwareversionen
- 3.20150121.1
- 3.20151106.1
- 3.20170707.1~ubuntu16.04.0
- 3.20180108.0~ubuntu16.04.2
- 3.20180108.0+really20170707ubuntu16.04.1
- 3.20180312.0~ubuntu16.04.1
- 3.20180425.1~ubuntu0.16.04.1
- 3.20180425.1~ubuntu0.16.04.2
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.20180807a.0ubuntu0.16.04.1
Auf 3.20180807a.0ubuntu0.16.04.1 aktualisieren
intel-microcode Ubuntu:18.04:LTS
- Softwareversionen
- 3.20170707.1
- 3.20171117.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.0~ubuntu18.04.1
- 3.20180425.1~ubuntu0.18.04.1
- 3.20180425.1~ubuntu0.18.04.2
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.20180807a.0ubuntu0.18.04.1
Auf 3.20180807a.0ubuntu0.18.04.1 aktualisieren
Originalquellen
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- http://support.lenovo.com/us/en/solutions/LEN-22133
- https://www.us-cert.gov/ncas/alerts/TA18-141A
- http://www.securitytracker.com/id/1042004
- http://www.securitytracker.com/id/1040949
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.synology.com/support/security/Synology_SA_18_23
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://www.kb.cert.org/vuls/id/180049
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://www.debian.org/security/2018/dsa-4273
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us
- http://www.securityfocus.com/bid/104228
- https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html
- https://usn.ubuntu.com/3756-1/
- https://security.netapp.com/advisory/ntap-20180521-0001/
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2018-3640