Search vulnerabilities

Results 7

Export CSV
CVE-2017-5753

hw: cpu: speculative execution bounds-check bypass

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1 · 5.6 Medium EPSS 93.8% KEV · Not listed
Vendors
Arm Canonical Debian and 11 more
Products
CVE-2017-5754

hw: cpu: speculative execution permission faults handling

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

CVSS 3.1 · 5.6 Medium EPSS 67.4% KEV · Not listed
Vendors
Products
Cortex-a Atom C Atom E and 215 more
CVE-2017-5715

hw: cpu: speculative execution branch target injection

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1 · 5.6 Medium EPSS 73.2% KEV · Not listed
Vendors
Arm Canonical Debian and 5 more
Products
CVE-2018-9056

hw: cpu: speculative execution branch predictor side-channel attack

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.

CVSS 3.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Cortex-a Atom C Atom E and 206 more
CVE-2018-3693

Kernel: speculative bounds check bypass store

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.

CVSS 3.1 · 5.6 Medium EPSS 8.6% KEV · Not listed
Vendors
Arm Fujitsu Intel and 4 more
Products
Cortex-a Cortex-r M12-1 and 227 more
CVE-2017-5703

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service.

CVSS 3.0 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Products