p PatchFirst

CVE-2018-3640

CVE-2018-3640

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

CVSS 5.6 · Medium · EPSS 7.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • multiple

    Versions
    • Multiple: Affected

    No fix published

  • intel-microcode Debian:12

    Versions
    • 0.20080131-1
    • 0.20080220-1
    • 0.20080401-1
    • 0.20080910-1
    • 0.20080910-2
    • 0.20090330-1
    • 0.20090927-1
    • 0.20100826-1
    • 0.20100914-1
    • 0.20101123-1
    • 0.20110428-1
    • 0.20110915-1
    • 0.20111110-1
    • 0.20120606-1
    • 1.20120606.1
    • 1.20120606.2
    • 1.20120606.3
    • 1.20120606.4
    • 1.20120606.5
    • 1.20120606.6
    • 1.20120606.6~bpo60+1
    • 1.20120606.v2.1
    • 1.20120606.v2.2
    • 1.20120606.v2.2~bpo60+1
    • 1.20130222.1
    • 1.20130222.1~bpo60+1
    • 1.20130222.3
    • 1.20130222.4
    • 1.20130222.5
    • 1.20130222.6
    • 1.20130808.1
    • 1.20130808.2
    • 1.20130906.1
    • 1.20140122.1
    • 1.20140122.1~bpo60+1
    • 1.20140430.1
    • 1.20140430.1~bpo60+1
    • 1.20140624.1
    • 1.20140624.1~bpo60+1
    • 1.20140913.1
    • 1.20140913.1~bpo60+1
    • 1.20150121.1
    • 2.20130808.1
    • 2.20130808.1~bpo70+1
    • 2.20130906.1
    • 2.20130906.1~bpo70+1
    • 2.20140122.1
    • 2.20140122.1~bpo70+1
    • 2.20140430.1
    • 2.20140430.1~bpo70+1
    • 2.20140624.1
    • 2.20140624.1~bpo70+1
    • 3.20140913.1
    • 3.20140913.1~bpo70+1
    • 3.20140913.1~bpo70+2
    • 3.20150107.1
    • 3.20150107.1~bpo70+1
    • 3.20150121.1
    • 3.20150121.1~bpo70+1
    • 3.20151106.1
    • 3.20151106.1~bpo7+1
    • 3.20151106.1~bpo8+1
    • 3.20151106.1~deb8u1
    • 3.20151106.2
    • 3.20160607.1
    • 3.20160607.2
    • 3.20160607.2~bpo8+1
    • 3.20160714.1
    • 3.20160714.1~bpo8+1
    • 3.20160714.1~deb8u1
    • 3.20160714.1~deb8u1~bpo7+1
    • 3.20161104.1
    • 3.20161104.1~bpo8+1
    • 3.20161104.1~deb8u1
    • 3.20161104.1~deb8u1~bpo7+1
    • 3.20170511.1
    • 3.20170511.1~bpo8+1
    • 3.20170707.1
    • 3.20170707.1~bpo8+1
    • 3.20170707.1~bpo9+1
    • 3.20170707.1~deb8u1
    • 3.20170707.1~deb9u1
    • 3.20171117.1
    • 3.20171117.1~bpo8+1
    • 3.20171117.1~bpo9+1
    • 3.20171215.1
    • 3.20180108.1
    • 3.20180108.1+really20171117.1
    • 3.20180312.1
    • 3.20180312.1~bpo8+1
    • 3.20180312.1~bpo9+1
    • 3.20180425.1
    • 3.20180425.1~bpo8+1
    • 3.20180425.1~bpo9+1
    • 3.20180425.1~deb8u1
    • 3.20180425.1~deb9u1
    Affected ranges
    • ECOSYSTEM: < 3.20180703.1

    Update to 3.20180703.1

  • intel-microcode Debian:13

    Versions
    • 0.20080131-1
    • 0.20080220-1
    • 0.20080401-1
    • 0.20080910-1
    • 0.20080910-2
    • 0.20090330-1
    • 0.20090927-1
    • 0.20100826-1
    • 0.20100914-1
    • 0.20101123-1
    • 0.20110428-1
    • 0.20110915-1
    • 0.20111110-1
    • 0.20120606-1
    • 1.20120606.1
    • 1.20120606.2
    • 1.20120606.3
    • 1.20120606.4
    • 1.20120606.5
    • 1.20120606.6
    • 1.20120606.6~bpo60+1
    • 1.20120606.v2.1
    • 1.20120606.v2.2
    • 1.20120606.v2.2~bpo60+1
    • 1.20130222.1
    • 1.20130222.1~bpo60+1
    • 1.20130222.3
    • 1.20130222.4
    • 1.20130222.5
    • 1.20130222.6
    • 1.20130808.1
    • 1.20130808.2
    • 1.20130906.1
    • 1.20140122.1
    • 1.20140122.1~bpo60+1
    • 1.20140430.1
    • 1.20140430.1~bpo60+1
    • 1.20140624.1
    • 1.20140624.1~bpo60+1
    • 1.20140913.1
    • 1.20140913.1~bpo60+1
    • 1.20150121.1
    • 2.20130808.1
    • 2.20130808.1~bpo70+1
    • 2.20130906.1
    • 2.20130906.1~bpo70+1
    • 2.20140122.1
    • 2.20140122.1~bpo70+1
    • 2.20140430.1
    • 2.20140430.1~bpo70+1
    • 2.20140624.1
    • 2.20140624.1~bpo70+1
    • 3.20140913.1
    • 3.20140913.1~bpo70+1
    • 3.20140913.1~bpo70+2
    • 3.20150107.1
    • 3.20150107.1~bpo70+1
    • 3.20150121.1
    • 3.20150121.1~bpo70+1
    • 3.20151106.1
    • 3.20151106.1~bpo7+1
    • 3.20151106.1~bpo8+1
    • 3.20151106.1~deb8u1
    • 3.20151106.2
    • 3.20160607.1
    • 3.20160607.2
    • 3.20160607.2~bpo8+1
    • 3.20160714.1
    • 3.20160714.1~bpo8+1
    • 3.20160714.1~deb8u1
    • 3.20160714.1~deb8u1~bpo7+1
    • 3.20161104.1
    • 3.20161104.1~bpo8+1
    • 3.20161104.1~deb8u1
    • 3.20161104.1~deb8u1~bpo7+1
    • 3.20170511.1
    • 3.20170511.1~bpo8+1
    • 3.20170707.1
    • 3.20170707.1~bpo8+1
    • 3.20170707.1~bpo9+1
    • 3.20170707.1~deb8u1
    • 3.20170707.1~deb9u1
    • 3.20171117.1
    • 3.20171117.1~bpo8+1
    • 3.20171117.1~bpo9+1
    • 3.20171215.1
    • 3.20180108.1
    • 3.20180108.1+really20171117.1
    • 3.20180312.1
    • 3.20180312.1~bpo8+1
    • 3.20180312.1~bpo9+1
    • 3.20180425.1
    • 3.20180425.1~bpo8+1
    • 3.20180425.1~bpo9+1
    • 3.20180425.1~deb8u1
    • 3.20180425.1~deb9u1
    Affected ranges
    • ECOSYSTEM: < 3.20180703.1

    Update to 3.20180703.1

  • intel-microcode Debian:14

    Versions
    • 0.20080131-1
    • 0.20080220-1
    • 0.20080401-1
    • 0.20080910-1
    • 0.20080910-2
    • 0.20090330-1
    • 0.20090927-1
    • 0.20100826-1
    • 0.20100914-1
    • 0.20101123-1
    • 0.20110428-1
    • 0.20110915-1
    • 0.20111110-1
    • 0.20120606-1
    • 1.20120606.1
    • 1.20120606.2
    • 1.20120606.3
    • 1.20120606.4
    • 1.20120606.5
    • 1.20120606.6
    • 1.20120606.6~bpo60+1
    • 1.20120606.v2.1
    • 1.20120606.v2.2
    • 1.20120606.v2.2~bpo60+1
    • 1.20130222.1
    • 1.20130222.1~bpo60+1
    • 1.20130222.3
    • 1.20130222.4
    • 1.20130222.5
    • 1.20130222.6
    • 1.20130808.1
    • 1.20130808.2
    • 1.20130906.1
    • 1.20140122.1
    • 1.20140122.1~bpo60+1
    • 1.20140430.1
    • 1.20140430.1~bpo60+1
    • 1.20140624.1
    • 1.20140624.1~bpo60+1
    • 1.20140913.1
    • 1.20140913.1~bpo60+1
    • 1.20150121.1
    • 2.20130808.1
    • 2.20130808.1~bpo70+1
    • 2.20130906.1
    • 2.20130906.1~bpo70+1
    • 2.20140122.1
    • 2.20140122.1~bpo70+1
    • 2.20140430.1
    • 2.20140430.1~bpo70+1
    • 2.20140624.1
    • 2.20140624.1~bpo70+1
    • 3.20140913.1
    • 3.20140913.1~bpo70+1
    • 3.20140913.1~bpo70+2
    • 3.20150107.1
    • 3.20150107.1~bpo70+1
    • 3.20150121.1
    • 3.20150121.1~bpo70+1
    • 3.20151106.1
    • 3.20151106.1~bpo7+1
    • 3.20151106.1~bpo8+1
    • 3.20151106.1~deb8u1
    • 3.20151106.2
    • 3.20160607.1
    • 3.20160607.2
    • 3.20160607.2~bpo8+1
    • 3.20160714.1
    • 3.20160714.1~bpo8+1
    • 3.20160714.1~deb8u1
    • 3.20160714.1~deb8u1~bpo7+1
    • 3.20161104.1
    • 3.20161104.1~bpo8+1
    • 3.20161104.1~deb8u1
    • 3.20161104.1~deb8u1~bpo7+1
    • 3.20170511.1
    • 3.20170511.1~bpo8+1
    • 3.20170707.1
    • 3.20170707.1~bpo8+1
    • 3.20170707.1~bpo9+1
    • 3.20170707.1~deb8u1
    • 3.20170707.1~deb9u1
    • 3.20171117.1
    • 3.20171117.1~bpo8+1
    • 3.20171117.1~bpo9+1
    • 3.20171215.1
    • 3.20180108.1
    • 3.20180108.1+really20171117.1
    • 3.20180312.1
    • 3.20180312.1~bpo8+1
    • 3.20180312.1~bpo9+1
    • 3.20180425.1
    • 3.20180425.1~bpo8+1
    • 3.20180425.1~bpo9+1
    • 3.20180425.1~deb8u1
    • 3.20180425.1~deb9u1
    Affected ranges
    • ECOSYSTEM: < 3.20180703.1

    Update to 3.20180703.1

  • intel-microcode Ubuntu:14.04:LTS

    Versions
    • 1.20130906.1ubuntu2
    • 1.20130906.1ubuntu3
    • 2.20140122.1
    • 2.20140430.1ubuntu1
    • 2.20140624-t-1ubuntu2
    • 3.20180108.0~ubuntu14.04.2
    • 3.20180108.0+really20170707ubuntu14.04.1
    • 3.20180312.0~ubuntu14.04.1
    • 3.20180425.1~ubuntu0.14.04.1
    • 3.20180425.1~ubuntu0.14.04.2
    Affected ranges
    • ECOSYSTEM: < 3.20180807a.0ubuntu0.14.04.1

    Update to 3.20180807a.0ubuntu0.14.04.1

  • intel-microcode Ubuntu:16.04:LTS

    Versions
    • 3.20150121.1
    • 3.20151106.1
    • 3.20170707.1~ubuntu16.04.0
    • 3.20180108.0~ubuntu16.04.2
    • 3.20180108.0+really20170707ubuntu16.04.1
    • 3.20180312.0~ubuntu16.04.1
    • 3.20180425.1~ubuntu0.16.04.1
    • 3.20180425.1~ubuntu0.16.04.2
    Affected ranges
    • ECOSYSTEM: < 3.20180807a.0ubuntu0.16.04.1

    Update to 3.20180807a.0ubuntu0.16.04.1

  • intel-microcode Ubuntu:18.04:LTS

    Versions
    • 3.20170707.1
    • 3.20171117.1
    • 3.20180108.1
    • 3.20180108.1+really20171117.1
    • 3.20180312.0~ubuntu18.04.1
    • 3.20180425.1~ubuntu0.18.04.1
    • 3.20180425.1~ubuntu0.18.04.2
    Affected ranges
    • ECOSYSTEM: < 3.20180807a.0ubuntu0.18.04.1

    Update to 3.20180807a.0ubuntu0.18.04.1

Original sources

Check your server →