CVE-2018-3615
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
- Score
- CVSS 3.1 7.3 High
- Status
- Modified - secure@intel.com
- Published
- 2018-08-14
- Last modified
- 2026-05-29
- Weaknesses
- CWE-203
Affected products
- Core I3 (Intel)
- Core I5 (Intel)
- Core I7 (Intel)
- Xeon E3 (Intel)
- Xeon E3 1220 V5 (Intel)
- Xeon E3 1220 V6 (Intel)
- Xeon E3 1225 V5 (Intel)
- Xeon E3 1225 V6 (Intel)
- Xeon E3 1230 V5 (Intel)
- Xeon E3 1230 V6 (Intel)
- Xeon E3 1235l V5 (Intel)
- Xeon E3 1240 V5 (Intel)
- Xeon E3 1240 V6 (Intel)
- Xeon E3 1240l V5 (Intel)
- Xeon E3 1245 V5 (Intel)
- Xeon E3 1245 V6 (Intel)
- Xeon E3 1260l V5 (Intel)
- Xeon E3 1268l V5 (Intel)
- Xeon E3 1270 V5 (Intel)
- Xeon E3 1270 V6 (Intel)
- Xeon E3 1275 V5 (Intel)
- Xeon E3 1275 V6 (Intel)
- Xeon E3 1280 V5 (Intel)
- Xeon E3 1280 V6 (Intel)
- Xeon E3 1285 V6 (Intel)
- Xeon E3 1501l V6 (Intel)
- Xeon E3 1501m V6 (Intel)
- Xeon E3 1505l V5 (Intel)
- Xeon E3 1505l V6 (Intel)
- Xeon E3 1505m V5 (Intel)
- Multiple (Intel Corporation)
References
- http://support.lenovo.com/us/en/solutions/LEN-24163
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
- http://www.securityfocus.com/bid/105080
- http://www.securitytracker.com/id/1041451
- https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://foreshadowattack.eu/
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008
- https://security.netapp.com/advisory/ntap-20180815-0001/
- https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
- https://support.f5.com/csp/article/K35558453
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
- https://www.kb.cert.org/vuls/id/982149
- https://www.synology.com/support/security/Synology_SA_18_45
