CVE-2018-3665

MEDIUMMonitor

Published:Jun 21, 2018(7 years ago)

Modified:Nov 21, 2024

Local AccessNo InteractionScope Changes

Vulnerability Description

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

Attack Characteristics

Local AccessHigh ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

481

Vendor	Product	Versions	Fixed In
intel	core_i5	-	-
intel	core_i5	-	-
intel	core_i5	-

Timeline

Published
CVE disclosed publicly
Jun 21, 20187 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

https://access.redhat.com/errata/RHSA-2019:1190Third Party Advisory
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+...Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlThird Party Advisory

CVSS Score

v3.1

5.6/ 10.0

MEDIUM

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

At a Glance

481

Affected Products

References

intel / core_i5

https://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlThird Party Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/4787Third Party Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.ascThird Party Advisory

https://security.netapp.com/advisory/ntap-20181016-0001/Third Party Advisory

http://www.securityfocus.com/bid/104460Third Party Advisory

http://www.securitytracker.com/id/1041124Third Party Advisory

http://www.securitytracker.com/id/1041125Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1852Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1944Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2164Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2165Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1170Third Party Advisory

https://security.paloaltonetworks.com/CVE-2018-3665Third Party Advisory

https://support.citrix.com/article/CTX235745Third Party Advisory

https://usn.ubuntu.com/3696-1/Third Party Advisory

https://usn.ubuntu.com/3696-2/Third Party Advisory

https://usn.ubuntu.com/3698-1/Third Party Advisory

https://usn.ubuntu.com/3698-2/Third Party Advisory

https://www.debian.org/security/2018/dsa-4232Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel...Vendor Advisory

https://www.oracle.com/security-alerts/cpujul2020.htmlThird Party Advisory

https://www.synology.com/support/security/Synology_SA_18_31Third Party Advisory

http://www.securityfocus.com/bid/104460Third Party Advisory

http://www.securitytracker.com/id/1041124Third Party Advisory

http://www.securitytracker.com/id/1041125Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1852Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1944Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2164Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2165Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1170Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1190Third Party Advisory

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+...Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlThird Party Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/4787Third Party Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.ascThird Party Advisory

https://security.netapp.com/advisory/ntap-20181016-0001/Third Party Advisory

https://security.paloaltonetworks.com/CVE-2018-3665Third Party Advisory

https://support.citrix.com/article/CTX235745Third Party Advisory

https://usn.ubuntu.com/3696-1/Third Party Advisory

https://usn.ubuntu.com/3696-2/Third Party Advisory

https://usn.ubuntu.com/3698-1/Third Party Advisory

https://usn.ubuntu.com/3698-2/Third Party Advisory

https://www.debian.org/security/2018/dsa-4232Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel...Vendor Advisory

https://www.oracle.com/security-alerts/cpujul2020.htmlThird Party Advisory

https://www.synology.com/support/security/Synology_SA_18_31Third Party Advisory

CVSS v3 Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges RequiredLow

User InteractionNone

Impact

ScopeChanged

ConfidentialityHigh

IntegrityNone

AvailabilityNone

Impact Analysis

ConfidentialityHigh

NoneLowHigh

IntegrityNone

NoneLowHigh

AvailabilityNone

NoneLowHigh

CVE-2018-3665

✦ Vulnerability Description

Attack Characteristics

Affected Software

Timeline

References

CVSS Score

At a Glance

Official Sources

CVSS v3 Vector

Impact Analysis

Vulnerability Description