CVEvulnerability
CVE-2018-3665
5.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.6 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-200
Description
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
Affected configurations
• intel core i3 330e
• intel core i3 330m
• intel core i3 330um
• intel core i3 350m
• intel core i3 370m
• intel core i3 380m
• intel core i3 380um
• intel core i3 390m
• intel core i3 530
• intel core i3 540
• intel core i3 550
• intel core i3 560
• intel core i3 2100
• intel core i3 2100t
• intel core i3 2102
• intel core i3 2105
• intel core i3 2115c
• intel core i3 2120
• intel core i3 2120t
• intel core i3 2125
• intel core i3 2130
• intel core i3 2310e
• intel core i3 2310m
• intel core i3 2312m
• intel core i3 2328m
• intel core i3 2330e
• intel core i3 2330m
• intel core i3 2340ue
• intel core i3 2348m
• intel core i3 2350m
• intel core i3 2357m
• intel core i3 2365m
• intel core i3 2367m
• intel core i3 2370m
• intel core i3 2375m
• intel core i3 2377m
• intel core i3 3110m
• intel core i3 3115c
• intel core i3 3120m
• intel core i3 3120me
• intel core i3 3130m
• intel core i3 3210
• intel core i3 3217u
• intel core i3 3217ue
• intel core i3 3220
• intel core i3 3220t
• intel core i3 3225
• intel core i3 3227u
• intel core i3 3229y
• intel core i3 3240
• intel core i3 3240t
• intel core i3 3245
• intel core i3 3250
• intel core i3 3250t
• intel core i3 4000m
• intel core i3 4005u
• intel core i3 4010u
• intel core i3 4010y
• intel core i3 4012y
• intel core i3 4020y
… and 421 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/104460 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041124 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041125 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1852 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1944 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2164 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2165 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1170 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1190 Third Party Advisory
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html Third Party Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/4787 Third Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.asc Third Party Advisory
- https://security.netapp.com/advisory/ntap-20181016-0001/ Third Party Advisory
- https://security.paloaltonetworks.com/CVE-2018-3665 Third Party Advisory
- https://support.citrix.com/article/CTX235745 Third Party Advisory
- https://usn.ubuntu.com/3696-1/ Third Party Advisory
- https://usn.ubuntu.com/3696-2/ Third Party Advisory
- https://usn.ubuntu.com/3698-1/ Third Party Advisory
- https://usn.ubuntu.com/3698-2/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4232 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html Vendor Advisory
- https://www.oracle.com/security-alerts/cpujul2020.html Third Party Advisory
- https://www.synology.com/support/security/Synology_SA_18_31 Third Party Advisory
- http://www.securityfocus.com/bid/104460 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041124 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041125 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1852 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1944 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2164 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2165 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1170 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1190 Third Party Advisory
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html Third Party Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/4787 Third Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.asc Third Party Advisory
- https://security.netapp.com/advisory/ntap-20181016-0001/ Third Party Advisory
- https://security.paloaltonetworks.com/CVE-2018-3665 Third Party Advisory
- https://support.citrix.com/article/CTX235745 Third Party Advisory
- https://usn.ubuntu.com/3696-1/ Third Party Advisory
- https://usn.ubuntu.com/3696-2/ Third Party Advisory
- https://usn.ubuntu.com/3698-1/ Third Party Advisory
- https://usn.ubuntu.com/3698-2/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4232 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html Vendor Advisory
- https://www.oracle.com/security-alerts/cpujul2020.html Third Party Advisory
- https://www.synology.com/support/security/Synology_SA_18_31 Third Party Advisory