p PatchFirst

CVE-2018-3615

CVE-2018-3615

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

CVSS 7.3 · High · EPSS 6.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • multiple

    Versions
    • Multiple: Affected

    No fix published

  • intel-microcode Debian:12

    Versions
    • 0.20080131-1
    • 0.20080220-1
    • 0.20080401-1
    • 0.20080910-1
    • 0.20080910-2
    • 0.20090330-1
    • 0.20090927-1
    • 0.20100826-1
    • 0.20100914-1
    • 0.20101123-1
    • 0.20110428-1
    • 0.20110915-1
    • 0.20111110-1
    • 0.20120606-1
    • 1.20120606.1
    • 1.20120606.2
    • 1.20120606.3
    • 1.20120606.4
    • 1.20120606.5
    • 1.20120606.6
    • 1.20120606.6~bpo60+1
    • 1.20120606.v2.1
    • 1.20120606.v2.2
    • 1.20120606.v2.2~bpo60+1
    • 1.20130222.1
    • 1.20130222.1~bpo60+1
    • 1.20130222.3
    • 1.20130222.4
    • 1.20130222.5
    • 1.20130222.6
    • 1.20130808.1
    • 1.20130808.2
    • 1.20130906.1
    • 1.20140122.1
    • 1.20140122.1~bpo60+1
    • 1.20140430.1
    • 1.20140430.1~bpo60+1
    • 1.20140624.1
    • 1.20140624.1~bpo60+1
    • 1.20140913.1
    • 1.20140913.1~bpo60+1
    • 1.20150121.1
    • 2.20130808.1
    • 2.20130808.1~bpo70+1
    • 2.20130906.1
    • 2.20130906.1~bpo70+1
    • 2.20140122.1
    • 2.20140122.1~bpo70+1
    • 2.20140430.1
    • 2.20140430.1~bpo70+1
    • 2.20140624.1
    • 2.20140624.1~bpo70+1
    • 3.20140913.1
    • 3.20140913.1~bpo70+1
    • 3.20140913.1~bpo70+2
    • 3.20150107.1
    • 3.20150107.1~bpo70+1
    • 3.20150121.1
    • 3.20150121.1~bpo70+1
    • 3.20151106.1
    • 3.20151106.1~bpo7+1
    • 3.20151106.1~bpo8+1
    • 3.20151106.1~deb8u1
    • 3.20151106.2
    • 3.20160607.1
    • 3.20160607.2
    • 3.20160607.2~bpo8+1
    • 3.20160714.1
    • 3.20160714.1~bpo8+1
    • 3.20160714.1~deb8u1
    • 3.20160714.1~deb8u1~bpo7+1
    • 3.20161104.1
    • 3.20161104.1~bpo8+1
    • 3.20161104.1~deb8u1
    • 3.20161104.1~deb8u1~bpo7+1
    • 3.20170511.1
    • 3.20170511.1~bpo8+1
    • 3.20170707.1
    • 3.20170707.1~bpo8+1
    • 3.20170707.1~bpo9+1
    • 3.20170707.1~deb8u1
    • 3.20170707.1~deb9u1
    • 3.20171117.1
    • 3.20171117.1~bpo8+1
    • 3.20171117.1~bpo9+1
    • 3.20171215.1
    • 3.20180108.1
    • 3.20180108.1+really20171117.1
    • 3.20180312.1
    • 3.20180312.1~bpo8+1
    • 3.20180312.1~bpo9+1
    • 3.20180425.1
    • 3.20180425.1~bpo8+1
    • 3.20180425.1~bpo9+1
    • 3.20180425.1~deb8u1
    • 3.20180425.1~deb9u1
    Affected ranges
    • ECOSYSTEM: < 3.20180703.1

    Update to 3.20180703.1

  • intel-microcode Debian:13

    Versions
    • 0.20080131-1
    • 0.20080220-1
    • 0.20080401-1
    • 0.20080910-1
    • 0.20080910-2
    • 0.20090330-1
    • 0.20090927-1
    • 0.20100826-1
    • 0.20100914-1
    • 0.20101123-1
    • 0.20110428-1
    • 0.20110915-1
    • 0.20111110-1
    • 0.20120606-1
    • 1.20120606.1
    • 1.20120606.2
    • 1.20120606.3
    • 1.20120606.4
    • 1.20120606.5
    • 1.20120606.6
    • 1.20120606.6~bpo60+1
    • 1.20120606.v2.1
    • 1.20120606.v2.2
    • 1.20120606.v2.2~bpo60+1
    • 1.20130222.1
    • 1.20130222.1~bpo60+1
    • 1.20130222.3
    • 1.20130222.4
    • 1.20130222.5
    • 1.20130222.6
    • 1.20130808.1
    • 1.20130808.2
    • 1.20130906.1
    • 1.20140122.1
    • 1.20140122.1~bpo60+1
    • 1.20140430.1
    • 1.20140430.1~bpo60+1
    • 1.20140624.1
    • 1.20140624.1~bpo60+1
    • 1.20140913.1
    • 1.20140913.1~bpo60+1
    • 1.20150121.1
    • 2.20130808.1
    • 2.20130808.1~bpo70+1
    • 2.20130906.1
    • 2.20130906.1~bpo70+1
    • 2.20140122.1
    • 2.20140122.1~bpo70+1
    • 2.20140430.1
    • 2.20140430.1~bpo70+1
    • 2.20140624.1
    • 2.20140624.1~bpo70+1
    • 3.20140913.1
    • 3.20140913.1~bpo70+1
    • 3.20140913.1~bpo70+2
    • 3.20150107.1
    • 3.20150107.1~bpo70+1
    • 3.20150121.1
    • 3.20150121.1~bpo70+1
    • 3.20151106.1
    • 3.20151106.1~bpo7+1
    • 3.20151106.1~bpo8+1
    • 3.20151106.1~deb8u1
    • 3.20151106.2
    • 3.20160607.1
    • 3.20160607.2
    • 3.20160607.2~bpo8+1
    • 3.20160714.1
    • 3.20160714.1~bpo8+1
    • 3.20160714.1~deb8u1
    • 3.20160714.1~deb8u1~bpo7+1
    • 3.20161104.1
    • 3.20161104.1~bpo8+1
    • 3.20161104.1~deb8u1
    • 3.20161104.1~deb8u1~bpo7+1
    • 3.20170511.1
    • 3.20170511.1~bpo8+1
    • 3.20170707.1
    • 3.20170707.1~bpo8+1
    • 3.20170707.1~bpo9+1
    • 3.20170707.1~deb8u1
    • 3.20170707.1~deb9u1
    • 3.20171117.1
    • 3.20171117.1~bpo8+1
    • 3.20171117.1~bpo9+1
    • 3.20171215.1
    • 3.20180108.1
    • 3.20180108.1+really20171117.1
    • 3.20180312.1
    • 3.20180312.1~bpo8+1
    • 3.20180312.1~bpo9+1
    • 3.20180425.1
    • 3.20180425.1~bpo8+1
    • 3.20180425.1~bpo9+1
    • 3.20180425.1~deb8u1
    • 3.20180425.1~deb9u1
    Affected ranges
    • ECOSYSTEM: < 3.20180703.1

    Update to 3.20180703.1

  • intel-microcode Debian:14

    Versions
    • 0.20080131-1
    • 0.20080220-1
    • 0.20080401-1
    • 0.20080910-1
    • 0.20080910-2
    • 0.20090330-1
    • 0.20090927-1
    • 0.20100826-1
    • 0.20100914-1
    • 0.20101123-1
    • 0.20110428-1
    • 0.20110915-1
    • 0.20111110-1
    • 0.20120606-1
    • 1.20120606.1
    • 1.20120606.2
    • 1.20120606.3
    • 1.20120606.4
    • 1.20120606.5
    • 1.20120606.6
    • 1.20120606.6~bpo60+1
    • 1.20120606.v2.1
    • 1.20120606.v2.2
    • 1.20120606.v2.2~bpo60+1
    • 1.20130222.1
    • 1.20130222.1~bpo60+1
    • 1.20130222.3
    • 1.20130222.4
    • 1.20130222.5
    • 1.20130222.6
    • 1.20130808.1
    • 1.20130808.2
    • 1.20130906.1
    • 1.20140122.1
    • 1.20140122.1~bpo60+1
    • 1.20140430.1
    • 1.20140430.1~bpo60+1
    • 1.20140624.1
    • 1.20140624.1~bpo60+1
    • 1.20140913.1
    • 1.20140913.1~bpo60+1
    • 1.20150121.1
    • 2.20130808.1
    • 2.20130808.1~bpo70+1
    • 2.20130906.1
    • 2.20130906.1~bpo70+1
    • 2.20140122.1
    • 2.20140122.1~bpo70+1
    • 2.20140430.1
    • 2.20140430.1~bpo70+1
    • 2.20140624.1
    • 2.20140624.1~bpo70+1
    • 3.20140913.1
    • 3.20140913.1~bpo70+1
    • 3.20140913.1~bpo70+2
    • 3.20150107.1
    • 3.20150107.1~bpo70+1
    • 3.20150121.1
    • 3.20150121.1~bpo70+1
    • 3.20151106.1
    • 3.20151106.1~bpo7+1
    • 3.20151106.1~bpo8+1
    • 3.20151106.1~deb8u1
    • 3.20151106.2
    • 3.20160607.1
    • 3.20160607.2
    • 3.20160607.2~bpo8+1
    • 3.20160714.1
    • 3.20160714.1~bpo8+1
    • 3.20160714.1~deb8u1
    • 3.20160714.1~deb8u1~bpo7+1
    • 3.20161104.1
    • 3.20161104.1~bpo8+1
    • 3.20161104.1~deb8u1
    • 3.20161104.1~deb8u1~bpo7+1
    • 3.20170511.1
    • 3.20170511.1~bpo8+1
    • 3.20170707.1
    • 3.20170707.1~bpo8+1
    • 3.20170707.1~bpo9+1
    • 3.20170707.1~deb8u1
    • 3.20170707.1~deb9u1
    • 3.20171117.1
    • 3.20171117.1~bpo8+1
    • 3.20171117.1~bpo9+1
    • 3.20171215.1
    • 3.20180108.1
    • 3.20180108.1+really20171117.1
    • 3.20180312.1
    • 3.20180312.1~bpo8+1
    • 3.20180312.1~bpo9+1
    • 3.20180425.1
    • 3.20180425.1~bpo8+1
    • 3.20180425.1~bpo9+1
    • 3.20180425.1~deb8u1
    • 3.20180425.1~deb9u1
    Affected ranges
    • ECOSYSTEM: < 3.20180703.1

    Update to 3.20180703.1

Original sources

Check your server →