CVE-2018-3615

MEDIUMMonitor

Published:Aug 14, 2018(7 years ago)

Modified:Nov 21, 2024

Local AccessNo InteractionScope Changes

Vulnerability Description

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Attack Characteristics

Local AccessHigh ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

129

Vendor	Product	Versions	Fixed In
intel	core_i3	-	-
intel	core_i3	-	-
intel	core_i3	-

Timeline

Published
CVE disclosed publicly
Aug 14, 20187 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://support.lenovo.com/us/en/solutions/LEN-24163Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-...Third Party Advisory
http://www.securityfocus.com/bid/105080Third Party Advisory

CVSS Score

v3.1

6.4/ 10.0

MEDIUM

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

At a Glance

129

Affected Products

References

intel / core_i3

http://www.securitytracker.com/id/1041451Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

https://foreshadowattack.eu/Technical Description

https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008Third Party Advisory

https://security.netapp.com/advisory/ntap-20180815-0001/Third Party Advisory

https://software.intel.com/security-software-guidance/software-guidanc...Mitigation

https://support.f5.com/csp/article/K35558453Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=...Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/...Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel...Vendor Advisory

https://www.kb.cert.org/vuls/id/982149Third Party Advisory

https://www.synology.com/support/security/Synology_SA_18_45Third Party Advisory

http://support.lenovo.com/us/en/solutions/LEN-24163Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-...Third Party Advisory

http://www.securityfocus.com/bid/105080Third Party Advisory