6.4

CVE-2018-3615

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Core I3 Version 6006u
Intel ≫ Core I3 Version 6098p
Intel ≫ Core I3 Version 6100
Intel ≫ Core I3 Version 6100e
Intel ≫ Core I3 Version 6100h
Intel ≫ Core I3 Version 6100t
Intel ≫ Core I3 Version 6100te
Intel ≫ Core I3 Version 6100u
Intel ≫ Core I3 Version 6102e
Intel ≫ Core I3 Version 6157u
Intel ≫ Core I3 Version 6167u
Intel ≫ Core I3 Version 6300
Intel ≫ Core I3 Version 6300t
Intel ≫ Core I3 Version 6320
Intel ≫ Core I5 Version 650
Intel ≫ Core I5 Version 655k
Intel ≫ Core I5 Version 660
Intel ≫ Core I5 Version 661
Intel ≫ Core I5 Version 670
Intel ≫ Core I5 Version 680
Intel ≫ Core I5 Version 6200u
Intel ≫ Core I5 Version 6260u
Intel ≫ Core I5 Version 6267u
Intel ≫ Core I5 Version 6287u
Intel ≫ Core I5 Version 6300hq
Intel ≫ Core I5 Version 6300u
Intel ≫ Core I5 Version 6350hq
Intel ≫ Core I5 Version 6360u
Intel ≫ Core I5 Version 6400
Intel ≫ Core I5 Version 6400t
Intel ≫ Core I5 Version 6402p
Intel ≫ Core I5 Version 6440eq
Intel ≫ Core I5 Version 6440hq
Intel ≫ Core I5 Version 6442eq
Intel ≫ Core I5 Version 6500
Intel ≫ Core I5 Version 6500t
Intel ≫ Core I5 Version 6500te
Intel ≫ Core I5 Version 6585r
Intel ≫ Core I5 Version 6600
Intel ≫ Core I5 Version 6600k
Intel ≫ Core I5 Version 6600t
Intel ≫ Core I5 Version 6685r
Intel ≫ Core I7 Version 610e
Intel ≫ Core I7 Version 620le
Intel ≫ Core I7 Version 620lm
Intel ≫ Core I7 Version 620m
Intel ≫ Core I7 Version 620ue
Intel ≫ Core I7 Version 620um
Intel ≫ Core I7 Version 640lm
Intel ≫ Core I7 Version 640m
Intel ≫ Core I7 Version 640um
Intel ≫ Core I7 Version 660lm
Intel ≫ Core I7 Version 660ue
Intel ≫ Core I7 Version 660um
Intel ≫ Core I7 Version 680um
Intel ≫ Core I5 Version 750
Intel ≫ Core I5 Version 750s
Intel ≫ Core I5 Version 760
Intel ≫ Core I7 Version 7y75
Intel ≫ Core I7 Version 720qm
Intel ≫ Core I7 Version 740qm
Intel ≫ Core I7 Version 7500u
Intel ≫ Core I7 Version 7560u
Intel ≫ Core I7 Version 7567u
Intel ≫ Core I7 Version 7600u
Intel ≫ Core I7 Version 7660u
Intel ≫ Core I7 Version 7700
Intel ≫ Core I7 Version 7700hq
Intel ≫ Core I7 Version 7700k
Intel ≫ Core I7 Version 7700t
Intel ≫ Core I7 Version 7820eq
Intel ≫ Core I7 Version 7820hk
Intel ≫ Core I7 Version 7820hq
Intel ≫ Core I7 Version 7920hq
Intel ≫ Core I3 Version 8100
Intel ≫ Core I3 Version 8350k
Intel ≫ Core I5 Version 8250u
Intel ≫ Core I5 Version 8350u
Intel ≫ Core I5 Version 8400
Intel ≫ Core I5 Version 8600k
Intel ≫ Core I7 Version 820qm
Intel ≫ Core I7 Version 840qm
Intel ≫ Core I7 Version 860
Intel ≫ Core I7 Version 860s
Intel ≫ Core I7 Version 870
Intel ≫ Core I7 Version 870s
Intel ≫ Core I7 Version 875k
Intel ≫ Core I7 Version 880
Intel ≫ Core I7 Version 8550u
Intel ≫ Core I7 Version 8650u
Intel ≫ Core I7 Version 8700
Intel ≫ Core I7 Version 8700k
Intel ≫ Xeon E3 Version 1515m_v5
Intel ≫ Xeon E3 Version 1535m_v5
Intel ≫ Xeon E3 Version 1545m_v5
Intel ≫ Xeon E3 Version 1558l_v5
Intel ≫ Xeon E3 Version 1565l_v5
Intel ≫ Xeon E3 Version 1575m_v5
Intel ≫ Xeon E3 Version 1578l_v5
Intel ≫ Xeon E3 Version 1585_v5
Intel ≫ Xeon E3 Version 1585l_v5
Intel ≫ Xeon E3 1220 V5 Version -
Intel ≫ Xeon E3 1225 V5 Version -
Intel ≫ Xeon E3 1230 V5 Version -
Intel ≫ Xeon E3 1235l V5 Version -
Intel ≫ Xeon E3 1240 V5 Version -
Intel ≫ Xeon E3 1240l V5 Version -
Intel ≫ Xeon E3 1245 V5 Version -
Intel ≫ Xeon E3 1260l V5 Version -
Intel ≫ Xeon E3 1268l V5 Version -
Intel ≫ Xeon E3 1270 V5 Version -
Intel ≫ Xeon E3 1275 V5 Version -
Intel ≫ Xeon E3 1280 V5 Version -
Intel ≫ Xeon E3 1505l V5 Version -
Intel ≫ Xeon E3 1505m V5 Version -
Intel ≫ Xeon E3 Version 1505m_v6
Intel ≫ Xeon E3 Version 1535m_v6
Intel ≫ Xeon E3 1220 V6 Version -
Intel ≫ Xeon E3 1225 V6 Version -
Intel ≫ Xeon E3 1230 V6 Version -
Intel ≫ Xeon E3 1240 V6 Version -
Intel ≫ Xeon E3 1245 V6 Version -
Intel ≫ Xeon E3 1270 V6 Version -
Intel ≫ Xeon E3 1275 V6 Version -
Intel ≫ Xeon E3 1280 V6 Version -
Intel ≫ Xeon E3 1285 V6 Version -
Intel ≫ Xeon E3 1501l V6 Version -
Intel ≫ Xeon E3 1501m V6 Version -
Intel ≫ Xeon E3 1505l V6 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.3% 0.927
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 1.1 4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
NIST 5.4 3.4 7.8
AV:L/AC:M/Au:N/C:C/I:P/A:N
CISA-ADP 7.3 2 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
http://support.lenovo.com/us/en/solutions/LEN-24163
Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
Third Party Advisory
http://www.securityfocus.com/bid/105080
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041451
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
https://foreshadowattack.eu/
Third Party Advisory
Technical Description
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180815-0001/
Third Party Advisory
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
Vendor Advisory
Mitigation
https://support.f5.com/csp/article/K35558453
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
Vendor Advisory
https://www.kb.cert.org/vuls/id/982149
Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_45
Third Party Advisory