CVEvulnerability

CVE-2018-9056

5.6 MEDIUM Published 2018-03-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.6 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200

Description

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.

Affected configurations

• intel atom c c2308 • intel atom c c2316 • intel atom c c2338 • intel atom c c2350 • intel atom c c2358 • intel atom c c2508 • intel atom c c2516 • intel atom c c2518 • intel atom c c2530 • intel atom c c2538 • intel atom c c2550 • intel atom c c2558 • intel atom c c2718 • intel atom c c2730 • intel atom c c2738 • intel atom c c2750 • intel atom c c2758 • intel atom c c3308 • intel atom c c3338 • intel atom c c3508 • intel atom c c3538 • intel atom c c3558 • intel atom c c3708 • intel atom c c3750 • intel atom c c3758 • intel atom c c3808 • intel atom c c3830 • intel atom c c3850 • intel atom c c3858 • intel atom c c3950 • intel atom c c3955 • intel atom c c3958 • intel atom e e3805 • intel atom e e3815 • intel atom e e3825 • intel atom e e3826 • intel atom e e3827 • intel atom e e3845 • intel atom x3 c3130 • intel atom x3 c3200rk • intel atom x3 c3205rk • intel atom x3 c3230rk • intel atom x3 c3235rk • intel atom x3 c3265rk • intel atom x3 c3295rk • intel atom x3 c3405 • intel atom x3 c3445 • intel atom z z2420 • intel atom z z2460 • intel atom z z2480 • intel atom z z2520 • intel atom z z2560 • intel atom z z2580 • intel atom z z2760 • intel atom z z3460 • intel atom z z3480 • intel atom z z3530 • intel atom z z3560 • intel atom z z3570 • intel atom z z3580 … and 1005 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References