CVEvulnerability

CVE-2018-3646

5.6 MEDIUM Published 2018-08-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-08-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.6 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 3.0 ([email protected])
5.6 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200

Description

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

Affected configurations

• intel core i3 330e • intel core i3 330m • intel core i3 330um • intel core i3 350m • intel core i3 370m • intel core i3 380m • intel core i3 380um • intel core i3 390m • intel core i3 530 • intel core i3 540 • intel core i3 550 • intel core i3 560 • intel core i3 2100 • intel core i3 2100t • intel core i3 2102 • intel core i3 2105 • intel core i3 2115c • intel core i3 2120 • intel core i3 2120t • intel core i3 2125 • intel core i3 2130 • intel core i3 2310e • intel core i3 2310m • intel core i3 2312m • intel core i3 2328m • intel core i3 2330e • intel core i3 2330m • intel core i3 2340ue • intel core i3 2348m • intel core i3 2350m • intel core i3 2357m • intel core i3 2365m • intel core i3 2367m • intel core i3 2370m • intel core i3 2375m • intel core i3 2377m • intel core i3 3110m • intel core i3 3115c • intel core i3 3120m • intel core i3 3120me • intel core i3 3130m • intel core i3 3210 • intel core i3 3217u • intel core i3 3217ue • intel core i3 3220 • intel core i3 3220t • intel core i3 3225 • intel core i3 3227u • intel core i3 3229y • intel core i3 3240 • intel core i3 3240t • intel core i3 3245 • intel core i3 3250 • intel core i3 3250t • intel core i3 4000m • intel core i3 4005u • intel core i3 4010u • intel core i3 4010y • intel core i3 4012y • intel core i3 4020y … and 403 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References