CVSS 3.1
5.6 mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NCVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
Severity
- EPSS
- 67% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arm:cortex-a
- intel:atom_c
- intel:atom_e
- intel:atom_x3
- intel:atom_z
- intel:celeron_j
- intel:celeron_n
- intel:core_i3
- intel:core_i5
- intel:core_i7
- intel:core_m
- intel:core_m3
- intel:core_m5
- intel:core_m7
- intel:pentium_j
- intel:pentium_n
- intel:xeon
- intel:xeon_bronze_3104
- intel:xeon_bronze_3106
- intel:xeon_e-1105c
- intel:xeon_e3
- intel:xeon_e3_1105c_v2
- intel:xeon_e3_1125c
- intel:xeon_e3_1125c_v2
- intel:xeon_e3_1220
- intel:xeon_e3_12201
- intel:xeon_e3_12201_v2
- intel:xeon_e3_1220_v2
- intel:xeon_e3_1220_v3
- intel:xeon_e3_1220_v5
- intel:xeon_e3_1220_v6
- intel:xeon_e3_1220l_v3
- intel:xeon_e3_1225
- intel:xeon_e3_1225_v2
- intel:xeon_e3_1225_v3
- intel:xeon_e3_1225_v5
- intel:xeon_e3_1225_v6
- intel:xeon_e3_1226_v3
- intel:xeon_e3_1230
- intel:xeon_e3_1230_v2
- intel:xeon_e3_1230_v3
- intel:xeon_e3_1230_v5
- intel:xeon_e3_1230_v6
- intel:xeon_e3_1230l_v3
- intel:xeon_e3_1231_v3
- intel:xeon_e3_1235
- intel:xeon_e3_1235l_v5
- intel:xeon_e3_1240
- intel:xeon_e3_1240_v2
- intel:xeon_e3_1240_v3
References
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html