Medium severity · published Jan 4, 2018
CVE-2017-5715
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access…
5.6
CVSS
73.2%
EPSS
No
On KEV
Description
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)73.2% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Atom C · Intel
c2308; c2316; c2338; c2350; c2358; c2508; +26 more · source: NVD
AE
Atom E · Intel
e3805; e3815; e3825; e3826; e3827; e3845 · source: NVD
AX
Atom X3 · Intel
c3130; c3200rk; c3205rk; c3230rk; c3235rk; c3265rk; +3 more · source: NVD
AX
Atom X5-e3930 · Intel
All versions, or not specified · source: NVD
AX
Atom X5-e3940 · Intel
All versions, or not specified · source: NVD
AX
Atom X7-e3950 · Intel
All versions, or not specified · source: NVD
AZ
Atom Z · Intel
z2420; z2460; z2480; z2520; z2560; z2580; +24 more · source: NVD
CJ
Celeron J · Intel
j1750; j1800; j1850; j1900; j3060; j3160; +4 more · source: NVD
CN
Celeron N · Intel
n2805; n2806; n2807; n2808; n2810; n2815; +17 more · source: NVD
CI
Core I3 · Intel
330e; 330m; 330um; 350m; 370m; 380m; +34 more · source: NVD
CI
Core I5 · Intel
430m; 430um; 450m; 460m; 470um; 480m; +34 more · source: NVD
CI
Core I7 · Intel
7y75; 610e; 620le; 620lm; 620m; 620ue; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-5715
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-5715
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
More from Atom C
7.6
CVE-2018-3652
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon…
5.6
CVE-2018-3693
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a…
5.6
CVE-2018-3640
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an…
5.6
CVE-2018-9056
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on…
5.6
CVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access…