CVE-2018-3640
CVE-2018-3640
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
CVSS 5.6 · Media · EPSS 7,3% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
multiple
- Versiones
- Multiple: Afectada
Sin corrección publicada
intel-microcode Debian:12
- Versiones
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.20180703.1
Actualiza a 3.20180703.1
intel-microcode Debian:13
- Versiones
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.20180703.1
Actualiza a 3.20180703.1
intel-microcode Debian:14
- Versiones
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.20180703.1
Actualiza a 3.20180703.1
intel-microcode Ubuntu:14.04:LTS
- Versiones
- 1.20130906.1ubuntu2
- 1.20130906.1ubuntu3
- 2.20140122.1
- 2.20140430.1ubuntu1
- 2.20140624-t-1ubuntu2
- 3.20180108.0~ubuntu14.04.2
- 3.20180108.0+really20170707ubuntu14.04.1
- 3.20180312.0~ubuntu14.04.1
- 3.20180425.1~ubuntu0.14.04.1
- 3.20180425.1~ubuntu0.14.04.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.20180807a.0ubuntu0.14.04.1
Actualiza a 3.20180807a.0ubuntu0.14.04.1
intel-microcode Ubuntu:16.04:LTS
- Versiones
- 3.20150121.1
- 3.20151106.1
- 3.20170707.1~ubuntu16.04.0
- 3.20180108.0~ubuntu16.04.2
- 3.20180108.0+really20170707ubuntu16.04.1
- 3.20180312.0~ubuntu16.04.1
- 3.20180425.1~ubuntu0.16.04.1
- 3.20180425.1~ubuntu0.16.04.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.20180807a.0ubuntu0.16.04.1
Actualiza a 3.20180807a.0ubuntu0.16.04.1
intel-microcode Ubuntu:18.04:LTS
- Versiones
- 3.20170707.1
- 3.20171117.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.0~ubuntu18.04.1
- 3.20180425.1~ubuntu0.18.04.1
- 3.20180425.1~ubuntu0.18.04.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.20180807a.0ubuntu0.18.04.1
Actualiza a 3.20180807a.0ubuntu0.18.04.1
Fuentes originales
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- http://support.lenovo.com/us/en/solutions/LEN-22133
- https://www.us-cert.gov/ncas/alerts/TA18-141A
- http://www.securitytracker.com/id/1042004
- http://www.securitytracker.com/id/1040949
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.synology.com/support/security/Synology_SA_18_23
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://www.kb.cert.org/vuls/id/180049
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://www.debian.org/security/2018/dsa-4273
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us
- http://www.securityfocus.com/bid/104228
- https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html
- https://usn.ubuntu.com/3756-1/
- https://security.netapp.com/advisory/ntap-20180521-0001/
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2018-3640