UBUNTU-CVE-2017-5715
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
02 / AFFECTED SOFTWARE
Affected packages
1 explicit affected versions
26 explicit affected versions
4 explicit affected versions
6 explicit affected versions
40 explicit affected versions
46 explicit affected versions
7 explicit affected versions
23 explicit affected versions
31 explicit affected versions
8 explicit affected versions
65 explicit affected versions
51 explicit affected versions
34 explicit affected versions
2 explicit affected versions
1 explicit affected versions
1 explicit affected versions
125 explicit affected versions
6 explicit affected versions
2 explicit affected versions
1 explicit affected versions
4 explicit affected versions
2 explicit affected versions
5 explicit affected versions
26 explicit affected versions
60 explicit affected versions
12 explicit affected versions
4 explicit affected versions
2 explicit affected versions
7 explicit affected versions
20 explicit affected versions
32 explicit affected versions
68 explicit affected versions
43 explicit affected versions
49 explicit affected versions
27 explicit affected versions
7 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
05 / REFERENCES
Further evidence
- http://www.amd.com/en/corporate/speculative-execution
- https://developer.arm.com/support/security-update
- https://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.html
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr
- https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
- https://spectreattack.com/
- https://ubuntu.com/security/CVE-2017-5715
- https://ubuntu.com/security/notices/USN-3516-1
- https://ubuntu.com/security/notices/USN-3530-1
- https://ubuntu.com/security/notices/USN-3531-1
- https://ubuntu.com/security/notices/USN-3531-2
- https://ubuntu.com/security/notices/USN-3531-3
- https://ubuntu.com/security/notices/USN-3540-1
- https://ubuntu.com/security/notices/USN-3540-2
- https://ubuntu.com/security/notices/USN-3541-1
- https://ubuntu.com/security/notices/USN-3541-2
- https://ubuntu.com/security/notices/USN-3542-1
- https://ubuntu.com/security/notices/USN-3542-2
- https://ubuntu.com/security/notices/USN-3549-1
- https://ubuntu.com/security/notices/USN-3560-1
- https://ubuntu.com/security/notices/USN-3561-1
- https://ubuntu.com/security/notices/USN-3580-1
- https://ubuntu.com/security/notices/USN-3581-1
- https://ubuntu.com/security/notices/USN-3581-2
- https://ubuntu.com/security/notices/USN-3582-1
- https://ubuntu.com/security/notices/USN-3582-2
- https://ubuntu.com/security/notices/USN-3594-1
- https://ubuntu.com/security/notices/USN-3597-1
- https://ubuntu.com/security/notices/USN-3597-2
- https://ubuntu.com/security/notices/USN-3620-2
- https://ubuntu.com/security/notices/USN-3690-1
- https://ubuntu.com/security/notices/USN-3777-3
- https://webkitgtk.org/security/WSA-2018-0001.html
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
- https://www.cve.org/CVERecord?id=CVE-2017-5715
- https://www.qemu.org/2018/01/04/spectre/
- https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/