PT-2016-3282 · Intel+5 · Intel Core+5

Published 2016-02-09 · Updated 2024-06-15 · CVE-2018-3665

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Core-based microprocessors (affected versions not specified)

Description The issue is related to insufficient protection of data in FPU registers, which may allow an attacker to access sensitive information through a speculative execution side channel. This could potentially enable a local process to infer data from another process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2019-00719

BDU:2019-02816

CESA-2018_1852

CESA-2018_2164

CVE-2018-3665

DLA-1422-1

DLA-1422-2

DSA-4232-1

FREEBSD-SA-18_07

OPENSUSE-SU-2018_1773-1

OPENSUSE-SU-2018_2116-1

OPENSUSE-SU-2018_2211-1

OPENSUSE-SU-2024:11520-1

RHSA-2018:1852

RHSA-2018:1944

RHSA-2018:2164

RHSA-2018:2165

RHSA-2018_1852

RHSA-2018_1944

RHSA-2018_2164

RHSA-2019:1170

RHSA-2019:1190

SUSE-SU-2018:1761-1

SUSE-SU-2018:1762-1

SUSE-SU-2018:1772-1

SUSE-SU-2018:1816-1

SUSE-SU-2018:1821-1

SUSE-SU-2018:1846-1

SUSE-SU-2018:1849-1

SUSE-SU-2018:1855-1

SUSE-SU-2018:1855-2

SUSE-SU-2018:1940-1

SUSE-SU-2018:1942-1

SUSE-SU-2018:1943-1

SUSE-SU-2018:1944-1

SUSE-SU-2018:1945-1

SUSE-SU-2018:1946-1

SUSE-SU-2018:1947-1

SUSE-SU-2018:1948-1

SUSE-SU-2018:1949-1

SUSE-SU-2018:1981-1

SUSE-SU-2018:2037-1

SUSE-SU-2018:2048-1

SUSE-SU-2018:2056-1

SUSE-SU-2018:2059-1

SUSE-SU-2018:2069-1

SUSE-SU-2018:2081-1

SUSE-SU-2018:2081-2

SUSE-SU-2018:2086-1

SUSE-SU-2018:2087-1

SUSE-SU-2018:2088-1

SUSE-SU-2018:2090-1

SUSE-SU-2018:2091-1

SUSE-SU-2018:2093-1

SUSE-SU-2018:2094-1

SUSE-SU-2018:2095-1

SUSE-SU-2018:2096-1

SUSE-SU-2018:2097-1

SUSE-SU-2018:2098-1

SUSE-SU-2018:2099-1

SUSE-SU-2018:2100-1

SUSE-SU-2018:2101-1

SUSE-SU-2018:2102-1

SUSE-SU-2018:2103-1

SUSE-SU-2018:2104-1

SUSE-SU-2018:2105-1

SUSE-SU-2018:2106-1

SUSE-SU-2018:2107-1

SUSE-SU-2018:2108-1

SUSE-SU-2018:2109-1

SUSE-SU-2018:2110-1

SUSE-SU-2018:2111-1

SUSE-SU-2018:2112-1

SUSE-SU-2018:2113-1

SUSE-SU-2018:2114-1

SUSE-SU-2018:2115-1

SUSE-SU-2018:2248-1

SUSE-SU-2018:2250-1

SUSE-SU-2018:2254-1

SUSE-SU-2018:2255-1

SUSE-SU-2018:2262-1

SUSE-SU-2018:2263-1

SUSE-SU-2018:2264-1

SUSE-SU-2018:2266-1

SUSE-SU-2018:2267-1

SUSE-SU-2018:2268-1

SUSE-SU-2018:2269-1

SUSE-SU-2018:2270-1

SUSE-SU-2018:2271-1

SUSE-SU-2018:2528-1

SUSE-SU-2018_1821-1

SUSE-SU-2018_1849-1

SUSE-SU-2018_1940-1

SUSE-SU-2018_1942-1

SUSE-SU-2018_1943-1

SUSE-SU-2018_1944-1

SUSE-SU-2018_1945-1

SUSE-SU-2018_1946-1

SUSE-SU-2018_1947-1

SUSE-SU-2018_1948-1

SUSE-SU-2018_1949-1

SUSE-SU-2018_2048-1

SUSE-SU-2018_2086-1

SUSE-SU-2018_2087-1

SUSE-SU-2018_2088-1

SUSE-SU-2018_2090-1

SUSE-SU-2018_2091-1

SUSE-SU-2018_2093-1

SUSE-SU-2018_2094-1

SUSE-SU-2018_2095-1

SUSE-SU-2018_2096-1

SUSE-SU-2018_2097-1

SUSE-SU-2018_2098-1

SUSE-SU-2018_2100-1

SUSE-SU-2018_2101-1

SUSE-SU-2018_2102-1

SUSE-SU-2018_2103-1

SUSE-SU-2018_2104-1

SUSE-SU-2018_2105-1

SUSE-SU-2018_2106-1

SUSE-SU-2018_2107-1

SUSE-SU-2018_2108-1

SUSE-SU-2018_2109-1

SUSE-SU-2018_2110-1

SUSE-SU-2018_2111-1

SUSE-SU-2018_2112-1

SUSE-SU-2018_2113-1

SUSE-SU-2018_2114-1

SUSE-SU-2018_2115-1

USN-3696-1

USN-3696-2

USN-3698-1

USN-3698-2

Affected Products

Centos

Freebsd

Intel Core

Red Hat

Suse

Ubuntu

References · 585

• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2094-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1946-1 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-3696-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2037-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1190 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2164 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12193 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10021 · Vendor Advisory
• https://usn.ubuntu.com/3696-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2262-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2104-1 · Vendor Advisory
• https://usn.ubuntu.com/3698-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3665 · Security Note