CVSS 3.1
5.6 mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NCVE-2017-5715
Medium (5.6). EPSS 73% chance of exploitation in the next 30 days.
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Severity
- EPSS
- 73% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-203
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arm:cortex-a
- canonical:ubuntu_linux
- debian:debian_linux
- intel:atom_c
- intel:atom_e
- intel:atom_x3
- intel:atom_x5-e3930
- intel:atom_x5-e3940
- intel:atom_x7-e3950
- intel:atom_z
- intel:celeron_j
- intel:celeron_n
- intel:core_i3
- intel:core_i5
- intel:core_i7
- intel:core_m
- intel:core_m3
- intel:core_m5
- intel:core_m7
- intel:pentium_j
- intel:pentium_n
- intel:xeon
- intel:xeon_bronze_3104
- intel:xeon_bronze_3106
- intel:xeon_e-1105c
- intel:xeon_e3
- intel:xeon_e3_1105c_v2
- intel:xeon_e3_1125c
- intel:xeon_e3_1125c_v2
- intel:xeon_e3_1220
- intel:xeon_e3_12201
- intel:xeon_e3_12201_v2
- intel:xeon_e3_1220_v2
- intel:xeon_e3_1220_v3
- intel:xeon_e3_1220_v5
- intel:xeon_e3_1220_v6
- intel:xeon_e3_1220l_v3
- intel:xeon_e3_1225
- intel:xeon_e3_1225_v2
- intel:xeon_e3_1225_v3
- intel:xeon_e3_1225_v5
- intel:xeon_e3_1225_v6
- intel:xeon_e3_1226_v3
- intel:xeon_e3_1230
- intel:xeon_e3_1230_v2
- intel:xeon_e3_1230_v3
- intel:xeon_e3_1230_v5
- intel:xeon_e3_1230_v6
- intel:xeon_e3_1230l_v3
- intel:xeon_e3_1231_v3
References
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html