PT-2017-3249 · Unknown+9 · Microprocessors+12
Published
2017-12-22
·
Updated
2025-11-12
·
CVE-2017-5754
CVSS v3.1
5.6
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Systems with microprocessors (affected versions not specified)
Description
The issue is related to speculative execution and indirect branch prediction in microprocessors, which may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. This can be used to read the content of memory across a trusted boundary, leading to information disclosure. The vulnerability is caused by an error in memory access control during speculative execution of processor instructions. Microsoft has released updates to help mitigate the vulnerability, preventing attackers from triggering a weakness in the CPU that could allow the contents of memory to be disclosed.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Edge
Freebsd
Ibm Aix
Internet Explorer
Sql Server
Red Hat
Suse
Ubuntu
Vmware Vcenter
Windows
Microprocessors