PT-2018-1002 · Intel+13 · Intel Processors+15
Jann Horn
·
Publicado
2018-01-03
·
Atualizado
2026-03-06
·
CVE-2017-5715
CVSS v3.1
5.6
Média
| Vetor | AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Intel processors (affected versions not specified)
ARM processors (affected versions not specified)
AMD processors (affected versions not specified)
Description
The issue is related to the speculative execution and indirect branch prediction mechanisms in modern processors. It allows an attacker with local user access to potentially disclose information from protected memory by exploiting the side-channel analysis vulnerability. This can lead to information disclosure across trusted boundaries. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.
Technical details about exploitation include the use of the
Indirect Branch Predictor (IBP) and Branch Target Buffer (BTB) components to bypass existing protection and compromise security. The iBranch Locator tool can be used to detect indirect branches and perform targeted injections. The vulnerability can be exploited through the API Endpoints and Vulnerable Parameters or Variables are not explicitly mentioned.Recommendations
For Intel processors, consider using more aggressive indirect branch prediction barriers and strengthening the branch predictor block construction, including more complex tags, encryption, and randomization.
For ARM processors, consider implementing similar measures to those for Intel processors to mitigate the vulnerability.
For AMD processors, consider implementing similar measures to those for Intel processors to mitigate the vulnerability.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the speculative execution feature until a patch is available. Restrict access to sensitive memory areas to minimize the risk of exploitation. Avoid using vulnerable code paths in the affected processors until the issue is resolved.
Exploit
Information Disclosure
Side Channel Attack
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Amd Processors
Centos
Edge
Freebsd
Huawei Vrp
Ibm Aix
Intel Processors
Internet Explorer
Sql Server
Red Hat
Suse
Ubuntu
Vmware Vcenter
Virtualbox
Windows