CVE-2018-3620

5.6MEDIUM

Key Information:

Vendor
Intel
Status
Multiple
Vendor
CVE Published:
14 August 2018

Summary

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

Affected Version(s)

Multiple Multiple

References

https://www.kb.cert.org/vuls/id/982149
third-party-advisoryx_refsource_CERT-VN
http://www.securitytracker.com/id/1041451
vdb-entryx_refsource_SECTRACK
https://security.gentoo.org/glsa/201810-06
vendor-advisoryx_refsource_GENTOO

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.