CVE-2018-3640

MEDIUMMonitor

Published:May 22, 2018(7 years ago)

Modified:Nov 21, 2024

Local AccessNo InteractionScope Changes

Vulnerability Description

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

Attack Characteristics

Local AccessHigh ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

500

Vendor	Product	Versions	Fixed In
intel	atom_c	-	-
intel	atom_c	-	-
intel	atom_c	-

Timeline

Published
CVE disclosed publicly
May 22, 20187 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://support.lenovo.com/us/en/solutions/LEN-22133Third Party Advisory
http://www.fujitsu.com/global/support/products/software/security/produ...Third Party Advisory
http://www.securityfocus.com/bid/104228Third Party Advisory

CVSS Score

v3.1

5.6/ 10.0

MEDIUM

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

At a Glance

500

Affected Products

References

intel / atom_c

http://www.securitytracker.com/id/1040949Third Party Advisory

http://www.securitytracker.com/id/1042004

https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

https://developer.arm.com/support/arm-security-updates/speculative-pro...Vendor Advisory

https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html

https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV...Patch

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005

https://security.netapp.com/advisory/ntap-20180521-0001/Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=...Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/...Third Party Advisory

https://usn.ubuntu.com/3756-1/

https://www.debian.org/security/2018/dsa-4273

https://www.intel.com/content/www/us/en/security-center/advisory/intel...Vendor Advisory

https://www.kb.cert.org/vuls/id/180049Third Party Advisory

https://www.mitel.com/en-ca/support/security-advisories/mitel-product-...

https://www.synology.com/support/security/Synology_SA_18_23Third Party Advisory

https://www.us-cert.gov/ncas/alerts/TA18-141AThird Party Advisory

http://support.lenovo.com/us/en/solutions/LEN-22133Third Party Advisory

http://www.fujitsu.com/global/support/products/software/security/produ...Third Party Advisory

http://www.securityfocus.com/bid/104228Third Party Advisory