CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
- Score
- CVSS 3.1 5.6 Medium
- Status
- Modified - secure@intel.com
- Published
- 2018-01-04
- Last modified
- 2026-05-28
- Weaknesses
- CWE-203
Affected products
- Cortex-a12 Firmware (Arm)
- Cortex-a15 Firmware (Arm)
- Cortex-a17 Firmware (Arm)
- Cortex-a57 Firmware (Arm)
- Cortex-a72 Firmware (Arm)
- Cortex-a73 Firmware (Arm)
- Cortex-a75 Firmware (Arm)
- Cortex-a76 Firmware (Arm)
- Cortex-a77 Firmware (Arm)
- Cortex-a78 Firmware (Arm)
- Cortex-a78ae Firmware (Arm)
- Cortex-a8 Firmware (Arm)
- Cortex-a9 Firmware (Arm)
- Cortex-r7 Firmware (Arm)
- Cortex-r8 Firmware (Arm)
- Cortex-x1 Firmware (Arm)
- Neoverse N1 Firmware (Arm)
- Neoverse N2 Firmware (Arm)
- Ubuntu Linux (Canonical)
- Debian Linux (Debian)
- Atom C (Intel)
- Atom E (Intel)
- Atom X3 (Intel)
- Atom X5-e3930 (Intel)
- Atom X5-e3940 (Intel)
- Atom X7-e3950 (Intel)
- Atom Z (Intel)
- Celeron J (Intel)
- Celeron N (Intel)
- Core I3 (Intel)
- Core I5 (Intel)
- Core I7 (Intel)
- Core M (Intel)
- Core M3 (Intel)
- Core M5 (Intel)
- Core M7 (Intel)
- Pentium J (Intel)
- Pentium N (Intel)
- Xeon (Intel)
- Xeon Bronze 3104 (Intel)
- Xeon Bronze 3106 (Intel)
- Xeon E-1105c (Intel)
- Xeon E3 (Intel)
- Xeon E3 1105c V2 (Intel)
- Xeon E3 1125c (Intel)
- Xeon E3 1125c V2 (Intel)
- Xeon E3 1220 (Intel)
- Xeon E3 12201 (Intel)
- Xeon E3 12201 V2 (Intel)
- Xeon E3 1220 V2 (Intel)
- Xeon E3 1220 V3 (Intel)
- Xeon E3 1220 V5 (Intel)
- Xeon E3 1220 V6 (Intel)
- Xeon E3 1220l V3 (Intel)
- Xeon E3 1225 (Intel)
- Xeon E3 1225 V2 (Intel)
- Xeon E3 1225 V3 (Intel)
- Xeon E3 1225 V5 (Intel)
- Xeon E3 1225 V6 (Intel)
- Xeon E3 1226 V3 (Intel)
- Xeon E3 1230 (Intel)
- Xeon E3 1230 V2 (Intel)
- Xeon E3 1230 V3 (Intel)
- Xeon E3 1230 V5 (Intel)
- Xeon E3 1230 V6 (Intel)
- Xeon E3 1230l V3 (Intel)
- Xeon E3 1231 V3 (Intel)
- Xeon E3 1235 (Intel)
- Xeon E3 1235l V5 (Intel)
- Xeon E3 1240 (Intel)
- Xeon E3 1240 V2 (Intel)
- Xeon E3 1240 V3 (Intel)
- Xeon E3 1240 V5 (Intel)
- Xeon E3 1240 V6 (Intel)
- Xeon E3 1240l V3 (Intel)
- Xeon E3 1240l V5 (Intel)
- Xeon E3 1241 V3 (Intel)
- Xeon E3 1245 (Intel)
- Xeon E3 1245 V2 (Intel)
- Xeon E3 1245 V3 (Intel)
- Xeon E3 1245 V5 (Intel)
- Xeon E3 1245 V6 (Intel)
- Xeon E3 1246 V3 (Intel)
- Xeon E3 1258l V4 (Intel)
- Xeon E3 1260l (Intel)
- Xeon E3 1260l V5 (Intel)
- Xeon E3 1265l V2 (Intel)
- Xeon E3 1265l V3 (Intel)
- Xeon E3 1265l V4 (Intel)
- Xeon E3 1268l V3 (Intel)
- Xeon E3 1268l V5 (Intel)
- Xeon E3 1270 (Intel)
- Xeon E3 1270 V2 (Intel)
- Xeon E3 1270 V3 (Intel)
- Xeon E3 1270 V5 (Intel)
- Xeon E3 1270 V6 (Intel)
- Xeon E3 1271 V3 (Intel)
- Xeon E3 1275 (Intel)
- Xeon E3 1275 V2 (Intel)
- Xeon E3 1275 V3 (Intel)
References
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
- http://nvidia.custhelp.com/app/answers/detail/a_id/4609
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611
- http://nvidia.custhelp.com/app/answers/detail/a_id/4613
- http://nvidia.custhelp.com/app/answers/detail/a_id/4614
- http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt
- http://www.kb.cert.org/vuls/id/584653
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.securityfocus.com/bid/102371
- http://www.securitytracker.com/id/1040071
- http://xenbits.xen.org/xsa/advisory-254.html
- https://access.redhat.com/errata/RHSA-2018:0292
- https://access.redhat.com/security/vulnerabilities/speculativeexecution
- https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/
- https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
- https://cdrdv2.intel.com/v1/dl/getContent/685359
- https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://cert.vde.com/en-us/advisories/vde-2018-002
- https://cert.vde.com/en-us/advisories/vde-2018-003
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html
- https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
- https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
