CVSS 3.1
5.6 mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NCVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Severity
- EPSS
- 94% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-203
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arm:cortex-a12_firmware
- arm:cortex-a15_firmware
- arm:cortex-a17_firmware
- arm:cortex-a57_firmware
- arm:cortex-a72_firmware
- arm:cortex-a73_firmware
- arm:cortex-a75_firmware
- arm:cortex-a76_firmware
- arm:cortex-a77_firmware
- arm:cortex-a78_firmware
- arm:cortex-a78ae_firmware
- arm:cortex-a8_firmware
- arm:cortex-a9_firmware
- arm:cortex-r7_firmware
- arm:cortex-r8_firmware
- arm:cortex-x1_firmware
- arm:neoverse_n1_firmware
- arm:neoverse_n2_firmware
- canonical:ubuntu_linux
- debian:debian_linux
- intel:atom_c
- intel:atom_e
- intel:atom_x3
- intel:atom_x5-e3930
- intel:atom_x5-e3940
- intel:atom_x7-e3950
- intel:atom_z
- intel:celeron_j
- intel:celeron_n
- intel:core_i3
- intel:core_i5
- intel:core_i7
- intel:core_m
- intel:core_m3
- intel:core_m5
- intel:core_m7
- intel:pentium_j
- intel:pentium_n
- intel:xeon
- intel:xeon_bronze_3104
- intel:xeon_bronze_3106
- intel:xeon_e-1105c
- intel:xeon_e3
- intel:xeon_e3_1105c_v2
- intel:xeon_e3_1125c
- intel:xeon_e3_1125c_v2
- intel:xeon_e3_1220
- intel:xeon_e3_12201
- intel:xeon_e3_12201_v2
- intel:xeon_e3_1220_v2
References
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html