CVEvulnerability
CVE-2018-3640
5.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.6 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-203
Description
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Affected configurations
• intel atom c c2308
• intel atom c c3308
• intel atom c c3338
• intel atom c c3508
• intel atom c c3538
• intel atom c c3558
• intel atom c c3708
• intel atom c c3750
• intel atom c c3758
• intel atom c c3808
• intel atom c c3830
• intel atom c c3850
• intel atom c c3858
• intel atom c c3950
• intel atom c c3955
• intel atom c c3958
• intel atom e e3805
• intel atom e e3815
• intel atom e e3825
• intel atom e e3826
• intel atom e e3827
• intel atom e e3845
• intel atom z z2420
• intel atom z z2460
• intel atom z z2480
• intel atom z z2520
• intel atom z z2560
• intel atom z z2580
• intel atom z z2760
• intel atom z z3460
• intel atom z z3480
• intel atom z z3530
• intel atom z z3560
• intel atom z z3570
• intel atom z z3580
• intel atom z z3590
• intel atom z z3735d
• intel atom z z3735e
• intel atom z z3735f
• intel atom z z3735g
• intel atom z z3736f
• intel atom z z3736g
• intel atom z z3740
• intel atom z z3740d
• intel atom z z3745
• intel atom z z3745d
• intel atom z z3770
• intel atom z z3770d
• intel atom z z3775
• intel atom z z3775d
• intel atom z z3785
• intel atom z z3795
• intel celeron j j3455
• intel celeron j j4005
• intel celeron j j4105
• intel celeron n n3450
• intel core i3 32nm
• intel core i3 45nm
• intel core i5 32nm
• intel core i5 45nm
… and 440 more
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- http://support.lenovo.com/us/en/solutions/LEN-22133 Third Party Advisory
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html Third Party Advisory
- http://www.securityfocus.com/bid/104228 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042004 www.securitytracker.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf cert-portal.siemens.com
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html lists.debian.org
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013 Patch, Third Party Advisory, Vendor Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005 psirt.global.sonicwall.com
- https://security.netapp.com/advisory/ntap-20180521-0001/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel Third Party Advisory
- https://usn.ubuntu.com/3756-1/ usn.ubuntu.com
- https://www.debian.org/security/2018/dsa-4273 www.debian.org
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/180049 Third Party Advisory, US Government Resource
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006 www.mitel.com
- https://www.synology.com/support/security/Synology_SA_18_23 Third Party Advisory
- https://www.us-cert.gov/ncas/alerts/TA18-141A Third Party Advisory, US Government Resource
- http://support.lenovo.com/us/en/solutions/LEN-22133 Third Party Advisory
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html Third Party Advisory
- http://www.securityfocus.com/bid/104228 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042004 www.securitytracker.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf cert-portal.siemens.com
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html lists.debian.org
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013 Patch, Third Party Advisory, Vendor Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005 psirt.global.sonicwall.com
- https://security.netapp.com/advisory/ntap-20180521-0001/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel Third Party Advisory
- https://usn.ubuntu.com/3756-1/ usn.ubuntu.com
- https://www.debian.org/security/2018/dsa-4273 www.debian.org
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/180049 Third Party Advisory, US Government Resource
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006 www.mitel.com
- https://www.synology.com/support/security/Synology_SA_18_23 Third Party Advisory
- https://www.us-cert.gov/ncas/alerts/TA18-141A Third Party Advisory, US Government Resource