CVE-2018-3640 Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local use...
MediumCVSS 5.6
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/intel-microcode(Debian:12) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:12) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20080910-2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20090330-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20090927-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20100826-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20100914-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20101123-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20110428-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20110915-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20111110-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 0.20120606-1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.3 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.4 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.5 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.6 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.6~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20120606.v2.2~bpo60+1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/intel-microcode(Debian:12) | = 1.20130222.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.3 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.4 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.5 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130222.6 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130808.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140122.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140430.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140624.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20140913.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 1.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130808.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20130906.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140122.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140430.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 2.20140624.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20140913.1~bpo70+2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150107.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150107.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20150121.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20151106.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.2 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160607.2~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20160714.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20161104.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170511.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170511.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20170707.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171117.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20171215.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180108.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180108.1+really20171117.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180312.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:12) | = 3.20180425.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:13) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:13) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20080910-2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20090330-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20090927-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20100826-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20100914-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20101123-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20110428-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20110915-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20111110-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 0.20120606-1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.3 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.4 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.5 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.6 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.6~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20120606.v2.2~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.3 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.4 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.5 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130222.6 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130808.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140122.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140430.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140624.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20140913.1~bpo60+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 1.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130808.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130808.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130906.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20130906.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140122.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140122.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140430.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140430.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140624.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 2.20140624.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20140913.1~bpo70+2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150107.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150107.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150121.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20150121.1~bpo70+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20151106.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.2 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160607.2~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20160714.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20161104.1~deb8u1~bpo7+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170511.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170511.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20170707.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171117.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20171215.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180108.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180108.1+really20171117.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180312.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~bpo8+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~bpo9+1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~deb8u1 | No fix listed |
| debian/intel-microcode(Debian:13) | = 3.20180425.1~deb9u1 | No fix listed |
| debian/intel-microcode(Debian:14) | < 3.20180703.1 | 3.20180703.1 |
| debian/intel-microcode(Debian:14) | = 0.20080131-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080220-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080401-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080910-1 | No fix listed |
| debian/intel-microcode(Debian:14) | = 0.20080910-2 | No fix listed |
References
- Debian Security Tracker CVE-2018-3640 vendor-advisory
- support.lenovo.com third-party-advisory
- www.fujitsu.com third-party-advisory
- 104228 third-party-advisory vdb-entry
- 1040949 third-party-advisory vdb-entry
- 1042004 vdb-entry
- cert-portal.siemens.com
- cert-portal.siemens.com
- developer.arm.com vendor-advisory
- [debian-lts-announce] 20180727 [SECURITY] [DLA 1446-1] intel-microcode security update mailing-list
- [debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update mailing-list
- portal.msrc.microsoft.com patch third-party-advisory vendor-advisory
- psirt.global.sonicwall.com
- security.netapp.com third-party-advisory
- support.hpe.com third-party-advisory
- 20180522 CPU Side-Channel Information Disclosure Vulnerabilities: May 2018 third-party-advisory vendor-advisory
- USN-3756-1 vendor-advisory
- DSA-4273 vendor-advisory
- www.intel.com vendor-advisory
- VU#180049 third-party-advisory us-government-resource
- www.mitel.com
- www.synology.com third-party-advisory
- TA18-141A third-party-advisory us-government-resource