CVE-2017-5753

MEDIUMMonitor

Published:Jan 4, 2018(8 years ago)

Modified:Jan 14, 2025

Local AccessNo InteractionScope Changes

Vulnerability Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Attack Characteristics

Local AccessHigh ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

1000

Vendor	Product	Versions	Fixed In
intel	core_i5	-	-
intel	core_i5	-	-
intel	core_i5	-

Timeline

Published
CVE disclosed publicly
Jan 4, 20188 years ago
Last Modified
Most recent update
Jan 14, 20251 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

132

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006....Mailing List
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007....Mailing List
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008....Mailing List

CVSS Score

v3.1

5.6/ 10.0

MEDIUM

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

At a Glance

1000

Affected Products

132

References

intel / core_i5

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014....Mailing List

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016....Mailing List

http://nvidia.custhelp.com/app/answers/detail/a_id/4609Third Party Advisory

http://nvidia.custhelp.com/app/answers/detail/a_id/4611Third Party Advisory

http://nvidia.custhelp.com/app/answers/detail/a_id/4613Third Party Advisory

http://nvidia.custhelp.com/app/answers/detail/a_id/4614Third Party Advisory

http://packetstormsecurity.com/files/145645/Spectre-Information-Disclo...Exploit

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txtThird Party Advisory

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txtThird Party Advisory

http://www.kb.cert.org/vuls/id/584653Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067...Patch

http://www.securityfocus.com/bid/102371Third Party Advisory

http://www.securitytracker.com/id/1040071Third Party Advisory

http://xenbits.xen.org/xsa/advisory-254.htmlThird Party Advisory

https://access.redhat.com/errata/RHSA-2018:0292Third Party Advisory

https://access.redhat.com/security/vulnerabilities/speculativeexecutio...Third Party Advisory

https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/Third Party Advisory

https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-c...Third Party Advisory

https://cdrdv2.intel.com/v1/dl/getContent/685359Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdfThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfThird Party Advisory

https://cert.vde.com/en-us/advisories/vde-2018-002Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2018-003Third Party Advisory

https://developer.arm.com/support/arm-security-updates/speculative-pro...Third Party Advisory

https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memo...Third Party Advisory

https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Dat...Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlMailing List

https://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlMailing List

https://lists.debian.org/debian-lts-announce/2018/07/msg00020.htmlMailing List

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.htmlMailing List

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.htmlMailing List

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV...Patch

https://seclists.org/bugtraq/2019/Jun/36Issue Tracking

https://security.gentoo.org/glsa/201810-06Third Party Advisory

https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-...Third Party Advisory

https://security.netapp.com/advisory/ntap-20180104-0001/Third Party Advisory

https://spectreattack.com/Technical Description

https://support.citrix.com/article/CTX231399Third Party Advisory

https://support.f5.com/csp/article/K91229003Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03...Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=...Third Party Advisory

https://support.lenovo.com/us/en/solutions/LEN-18282Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/...Third Party Advisory

https://usn.ubuntu.com/3540-1/Third Party Advisory

https://usn.ubuntu.com/3540-2/Third Party Advisory

https://usn.ubuntu.com/3541-1/Third Party Advisory

https://usn.ubuntu.com/3541-2/Third Party Advisory

https://usn.ubuntu.com/3542-1/Third Party Advisory

https://usn.ubuntu.com/3542-2/Third Party Advisory

https://usn.ubuntu.com/3549-1/Third Party Advisory

https://usn.ubuntu.com/3580-1/Third Party Advisory

https://usn.ubuntu.com/3597-1/Third Party Advisory

https://usn.ubuntu.com/3597-2/Third Party Advisory

https://usn.ubuntu.com/usn/usn-3516-1/Third Party Advisory

https://www.debian.org/security/2018/dsa-4187Third Party Advisory

https://www.debian.org/security/2018/dsa-4188Third Party Advisory

https://www.exploit-db.com/exploits/43427/Exploit

https://www.kb.cert.org/vuls/id/180049Third Party Advisory

https://www.mitel.com/en-ca/support/security-advisories/mitel-product-...Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-507281...Patch

https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities...Third Party Advisory

https://www.synology.com/support/security/Synology_SA_18_01Third Party Advisory

https://www.vmware.com/us/security/advisories/VMSA-2018-0002.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006....Mailing List

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007....Mailing List

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008....Mailing List