CVE-2018-3615 Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an encl...
MediumCVSS 6.4
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/intel-microcode(Debian:12) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:12) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080910-2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20090330-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20090927-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20100826-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20100914-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20101123-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20110428-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20110915-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20111110-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20120606-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.3 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.4 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.5 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.6 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.6~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.2~bpo60+1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/intel-microcode(Debian:12) | = 1.20130222.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.3 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.4 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.5 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.6 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130808.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140122.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140430.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140624.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140913.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130808.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130906.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140122.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140430.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140624.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1~bpo70+2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150107.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150107.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150121.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.2~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170511.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170511.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171215.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180108.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180108.1+really20171117.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:13) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:13) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080910-2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20090330-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20090927-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20100826-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20100914-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20101123-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20110428-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20110915-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20111110-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20120606-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.3 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.4 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.5 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.6 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.6~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.2~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.3 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.4 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.5 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.6 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130808.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140122.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140430.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140624.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140913.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130808.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130906.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140122.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140430.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140624.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1~bpo70+2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150107.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150107.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150121.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.2~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170511.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170511.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171215.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180108.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180108.1+really20171117.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:14) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:14) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080910-2 | No fix listed |
References
- Debian Security Tracker CVE-2018-3615 vendor-advisory
- support.lenovo.com third-party-advisory
- www.huawei.com third-party-advisory
- 105080 third-party-advisory vdb-entry
- 1041451 third-party-advisory vdb-entry
- cert-portal.siemens.com
- cert-portal.siemens.com
- foreshadowattack.eu technical-description third-party-advisory
- [debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update mailing-list
- psirt.global.sonicwall.com third-party-advisory
- security.netapp.com third-party-advisory
- software.intel.com mitigation vendor-advisory
- support.f5.com third-party-advisory
- support.hpe.com third-party-advisory
- 20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018 third-party-advisory vendor-advisory
- www.intel.com vendor-advisory
- VU#982149 third-party-advisory
- www.synology.com third-party-advisory