CVSS 3.0
5.6 mediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NCVE-2018-9056
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arm:cortex-a
- intel:atom_c
- intel:atom_e
- intel:atom_x3
- intel:atom_z
- intel:celeron_j
- intel:celeron_n
- intel:core_i3
- intel:core_i5
- intel:core_i7
- intel:core_m
- intel:core_m3
- intel:core_m5
- intel:core_m7
- intel:pentium_j
- intel:pentium_n
- intel:xeon
- intel:xeon_bronze_3104
- intel:xeon_bronze_3106
- intel:xeon_e-1105c
- intel:xeon_e3
- intel:xeon_e3_1105c_v2
- intel:xeon_e3_1125c
- intel:xeon_e3_1125c_v2
- intel:xeon_e3_1220
- intel:xeon_e3_12201
- intel:xeon_e3_12201_v2
- intel:xeon_e3_1220_v2
- intel:xeon_e3_1220_v3
- intel:xeon_e3_1220_v5
- intel:xeon_e3_1220_v6
- intel:xeon_e3_1220l_v3
- intel:xeon_e3_1225
- intel:xeon_e3_1225_v2
- intel:xeon_e3_1225_v3
- intel:xeon_e3_1225_v5
- intel:xeon_e3_1225_v6
- intel:xeon_e3_1226_v3
- intel:xeon_e3_1230
- intel:xeon_e3_1230_v2
- intel:xeon_e3_1230_v3
- intel:xeon_e3_1230_v5
- intel:xeon_e3_1230_v6
- intel:xeon_e3_1230l_v3
- intel:xeon_e3_1231_v3
- intel:xeon_e3_1235
- intel:xeon_e3_1235l_v5
- intel:xeon_e3_1240
- intel:xeon_e3_1240_v2
- intel:xeon_e3_1240_v3
References
- http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf
- https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/
- http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf
- https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/