UBUNTU-CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
02 / AFFECTED SOFTWARE
Affected packages
65 explicit affected versions
136 explicit affected versions
6 explicit affected versions
46 explicit affected versions
1 explicit affected versions
34 explicit affected versions
68 explicit affected versions
27 explicit affected versions
15 explicit affected versions
4 explicit affected versions
15 explicit affected versions
34 explicit affected versions
8 explicit affected versions
4 explicit affected versions
43 explicit affected versions
40 explicit affected versions
2 explicit affected versions
20 explicit affected versions
2 explicit affected versions
4 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
05 / REFERENCES
Further evidence
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611
- http://www.amd.com/en/corporate/speculative-execution
- https://developer.arm.com/support/security-update
- https://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.html
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr
- https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
- https://spectreattack.com/
- https://ubuntu.com/security/CVE-2017-5753
- https://ubuntu.com/security/notices/USN-3516-1
- https://ubuntu.com/security/notices/USN-3521-1
- https://ubuntu.com/security/notices/USN-3530-1
- https://ubuntu.com/security/notices/USN-3540-1
- https://ubuntu.com/security/notices/USN-3540-2
- https://ubuntu.com/security/notices/USN-3541-1
- https://ubuntu.com/security/notices/USN-3541-2
- https://ubuntu.com/security/notices/USN-3542-1
- https://ubuntu.com/security/notices/USN-3542-2
- https://ubuntu.com/security/notices/USN-3549-1
- https://ubuntu.com/security/notices/USN-3580-1
- https://ubuntu.com/security/notices/USN-3597-1
- https://ubuntu.com/security/notices/USN-3597-2
- https://webkitgtk.org/security/WSA-2018-0001.html
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
- https://www.cve.org/CVERecord?id=CVE-2017-5753