CVE-2018-3620 Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user acce...
MediumCVSS 5.6
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/intel-microcode(Debian:12) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:12) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080910-2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20090330-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20090927-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20100826-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20100914-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20101123-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20110428-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20110915-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20111110-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20120606-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.3 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.4 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.5 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.6 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.6~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.2~bpo60+1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/intel-microcode(Debian:12) | = 1.20130222.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.3 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.4 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.5 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.6 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130808.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140122.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140430.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140624.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140913.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130808.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130906.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140122.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140430.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140624.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1~bpo70+2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150107.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150107.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150121.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.2~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170511.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170511.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171215.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180108.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180108.1+really20171117.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:13) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:13) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080910-2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20090330-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20090927-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20100826-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20100914-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20101123-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20110428-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20110915-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20111110-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20120606-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.3 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.4 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.5 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.6 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.6~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.2~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.3 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.4 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.5 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.6 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130808.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140122.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140430.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140624.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140913.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130808.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130906.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140122.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140430.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140624.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1~bpo70+2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150107.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150107.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150121.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.2~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170511.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170511.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171215.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180108.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180108.1+really20171117.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:14) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:14) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080910-2 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3740-1 vendor-advisory
- USN-3740-2 vendor-advisory
- USN-3741-1 vendor-advisory
- USN-3741-2 vendor-advisory
- USN-3742-1 vendor-advisory
- USN-3742-2 vendor-advisory
- USN-3823-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-3620 vendor-advisory
- support.lenovo.com third-party-advisory
- www.huawei.com third-party-advisory
- 105080 third-party-advisory vdb-entry
- 1041451 third-party-advisory vdb-entry
- www.vmware.com third-party-advisory
- xenbits.xen.org third-party-advisory
- RHSA-2018:2384 third-party-advisory vendor-advisory
- RHSA-2018:2387 third-party-advisory vendor-advisory
- RHSA-2018:2388 third-party-advisory vendor-advisory
- RHSA-2018:2389 third-party-advisory vendor-advisory
- RHSA-2018:2390 third-party-advisory vendor-advisory
- RHSA-2018:2391 third-party-advisory vendor-advisory
- RHSA-2018:2392 third-party-advisory vendor-advisory
- RHSA-2018:2393 third-party-advisory vendor-advisory
- RHSA-2018:2394 third-party-advisory vendor-advisory
- RHSA-2018:2395 third-party-advisory vendor-advisory
- RHSA-2018:2396 third-party-advisory vendor-advisory
- RHSA-2018:2402 third-party-advisory vendor-advisory
- RHSA-2018:2403 third-party-advisory vendor-advisory
- RHSA-2018:2404 third-party-advisory vendor-advisory
- RHSA-2018:2602 vendor-advisory
- RHSA-2018:2603 vendor-advisory
- cert-portal.siemens.com
- cert-portal.siemens.com
- foreshadowattack.eu technical-description third-party-advisory
- help.ecostruxureit.com
- [debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security update mailing-list
- [debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update mailing-list
- FEDORA-2018-f8cba144ae vendor-advisory
- FEDORA-2018-1c80fea1cd vendor-advisory
- portal.msrc.microsoft.com
- psirt.global.sonicwall.com third-party-advisory
- FreeBSD-SA-18:09 third-party-advisory vendor-advisory
- GLSA-201810-06 vendor-advisory
- security.netapp.com third-party-advisory
- software.intel.com mitigation vendor-advisory
- support.f5.com third-party-advisory
- support.hpe.com third-party-advisory
- 20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018 third-party-advisory vendor-advisory
- USN-3740-1 third-party-advisory vendor-advisory
- USN-3740-2 third-party-advisory vendor-advisory
- USN-3741-1 third-party-advisory vendor-advisory
- USN-3741-2 vendor-advisory
- USN-3742-1 third-party-advisory vendor-advisory
- USN-3742-2 third-party-advisory vendor-advisory
- USN-3823-1 vendor-advisory
- DSA-4274 vendor-advisory
- DSA-4279 vendor-advisory
- www.intel.com vendor-advisory
- VU#982149 third-party-advisory
- www.oracle.com
- www.oracle.com
- www.synology.com third-party-advisory
- security.alpinelinux.org vendor-advisory