CVE-2018-3646

MEDIUMMonitor

Published:Aug 14, 2018(7 years ago)

Modified:Nov 21, 2024

Local AccessNo InteractionScope Changes

Vulnerability Description

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

Attack Characteristics

Local AccessHigh ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

463

Vendor	Product	Versions	Fixed In
intel	core_i7	-	-
intel	core_i7	-	-
intel	core_i7	-

Timeline

Published
CVE disclosed publicly
Aug 14, 20187 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

112

https://usn.ubuntu.com/3756-1/
https://usn.ubuntu.com/3823-1/
http://support.lenovo.com/us/en/solutions/LEN-24163Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-...Third Party Advisory

CVSS Score

v3.1

5.6/ 10.0

MEDIUM

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

At a Glance

463

Affected Products

112

References

intel / core_i7

http://www.securityfocus.com/bid/105080Third Party Advisory

http://www.securitytracker.com/id/1041451Third Party Advisory

http://www.securitytracker.com/id/1042004

http://www.vmware.com/security/advisories/VMSA-2018-0020.htmlThird Party Advisory

http://xenbits.xen.org/xsa/advisory-273.htmlThird Party Advisory

https://access.redhat.com/errata/RHSA-2018:2384Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2387Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2388Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2389Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2390Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2391Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2392Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2393Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2394Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2395Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2396Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2402Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2403Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2404Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2602

https://access.redhat.com/errata/RHSA-2018:2603

https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

https://foreshadowattack.eu/Technical Description

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+...

https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html

https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists...

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV...

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0010Third Party Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.ascThird Party Advisory

https://security.gentoo.org/glsa/201810-06

https://security.netapp.com/advisory/ntap-20180815-0001/Third Party Advisory

https://software.intel.com/security-software-guidance/software-guidanc...Mitigation

https://support.f5.com/csp/article/K31300402Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=...Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/...Third Party Advisory

https://usn.ubuntu.com/3740-1/Third Party Advisory

https://usn.ubuntu.com/3740-2/Third Party Advisory

https://usn.ubuntu.com/3741-1/Third Party Advisory

https://usn.ubuntu.com/3741-2/

https://usn.ubuntu.com/3742-1/Third Party Advisory

https://usn.ubuntu.com/3742-2/Third Party Advisory

https://usn.ubuntu.com/3756-1/

https://usn.ubuntu.com/3823-1/

https://www.debian.org/security/2018/dsa-4274

https://www.debian.org/security/2018/dsa-4279

https://www.intel.com/content/www/us/en/security-center/advisory/intel...Vendor Advisory

https://www.kb.cert.org/vuls/id/982149

https://www.oracle.com/security-alerts/cpujul2020.html

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-507281...

https://www.oracle.com/technetwork/security-advisory/cpujan2019-507280...

https://www.synology.com/support/security/Synology_SA_18_45Third Party Advisory

http://support.lenovo.com/us/en/solutions/LEN-24163Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-...Third Party Advisory