CVE-2018-3615
CVE-2018-3615
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
CVSS 7.3 · Élevée · EPSS 6,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
multiple
- Versions du logiciel
- Multiple: Concernée
Aucun correctif publié
intel-microcode Debian:12
- Versions du logiciel
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Plages de versions concernées
- ECOSYSTEM: < 3.20180703.1
Mettez à jour vers 3.20180703.1
intel-microcode Debian:13
- Versions du logiciel
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Plages de versions concernées
- ECOSYSTEM: < 3.20180703.1
Mettez à jour vers 3.20180703.1
intel-microcode Debian:14
- Versions du logiciel
- 0.20080131-1
- 0.20080220-1
- 0.20080401-1
- 0.20080910-1
- 0.20080910-2
- 0.20090330-1
- 0.20090927-1
- 0.20100826-1
- 0.20100914-1
- 0.20101123-1
- 0.20110428-1
- 0.20110915-1
- 0.20111110-1
- 0.20120606-1
- 1.20120606.1
- 1.20120606.2
- 1.20120606.3
- 1.20120606.4
- 1.20120606.5
- 1.20120606.6
- 1.20120606.6~bpo60+1
- 1.20120606.v2.1
- 1.20120606.v2.2
- 1.20120606.v2.2~bpo60+1
- 1.20130222.1
- 1.20130222.1~bpo60+1
- 1.20130222.3
- 1.20130222.4
- 1.20130222.5
- 1.20130222.6
- 1.20130808.1
- 1.20130808.2
- 1.20130906.1
- 1.20140122.1
- 1.20140122.1~bpo60+1
- 1.20140430.1
- 1.20140430.1~bpo60+1
- 1.20140624.1
- 1.20140624.1~bpo60+1
- 1.20140913.1
- 1.20140913.1~bpo60+1
- 1.20150121.1
- 2.20130808.1
- 2.20130808.1~bpo70+1
- 2.20130906.1
- 2.20130906.1~bpo70+1
- 2.20140122.1
- 2.20140122.1~bpo70+1
- 2.20140430.1
- 2.20140430.1~bpo70+1
- 2.20140624.1
- 2.20140624.1~bpo70+1
- 3.20140913.1
- 3.20140913.1~bpo70+1
- 3.20140913.1~bpo70+2
- 3.20150107.1
- 3.20150107.1~bpo70+1
- 3.20150121.1
- 3.20150121.1~bpo70+1
- 3.20151106.1
- 3.20151106.1~bpo7+1
- 3.20151106.1~bpo8+1
- 3.20151106.1~deb8u1
- 3.20151106.2
- 3.20160607.1
- 3.20160607.2
- 3.20160607.2~bpo8+1
- 3.20160714.1
- 3.20160714.1~bpo8+1
- 3.20160714.1~deb8u1
- 3.20160714.1~deb8u1~bpo7+1
- 3.20161104.1
- 3.20161104.1~bpo8+1
- 3.20161104.1~deb8u1
- 3.20161104.1~deb8u1~bpo7+1
- 3.20170511.1
- 3.20170511.1~bpo8+1
- 3.20170707.1
- 3.20170707.1~bpo8+1
- 3.20170707.1~bpo9+1
- 3.20170707.1~deb8u1
- 3.20170707.1~deb9u1
- 3.20171117.1
- 3.20171117.1~bpo8+1
- 3.20171117.1~bpo9+1
- 3.20171215.1
- 3.20180108.1
- 3.20180108.1+really20171117.1
- 3.20180312.1
- 3.20180312.1~bpo8+1
- 3.20180312.1~bpo9+1
- 3.20180425.1
- 3.20180425.1~bpo8+1
- 3.20180425.1~bpo9+1
- 3.20180425.1~deb8u1
- 3.20180425.1~deb9u1
- Plages de versions concernées
- ECOSYSTEM: < 3.20180703.1
Mettez à jour vers 3.20180703.1
Sources originales
- https://www.kb.cert.org/vuls/id/982149
- http://www.securitytracker.com/id/1041451
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
- http://www.securityfocus.com/bid/105080
- https://foreshadowattack.eu/
- https://security.netapp.com/advisory/ntap-20180815-0001/
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
- https://support.f5.com/csp/article/K35558453
- http://support.lenovo.com/us/en/solutions/LEN-24163
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
- https://www.synology.com/support/security/Synology_SA_18_45
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
- https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2018-3615