UBUNTU-CVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
02 / AFFECTED SOFTWARE
Affected packages
65 explicit affected versions
124 explicit affected versions
4 explicit affected versions
44 explicit affected versions
34 explicit affected versions
66 explicit affected versions
25 explicit affected versions
6 explicit affected versions
2 explicit affected versions
6 explicit affected versions
26 explicit affected versions
7 explicit affected versions
3 explicit affected versions
42 explicit affected versions
39 explicit affected versions
2 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
05 / REFERENCES
Further evidence
- http://www.amd.com/en/corporate/speculative-execution
- https://developer.arm.com/support/security-update
- https://github.com/IAIK/KAISER
- https://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.html
- https://gruss.cc/files/kaiser.pdf
- https://meltdownattack.com/
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr
- https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
- https://ubuntu.com/security/CVE-2017-5754
- https://ubuntu.com/security/notices/USN-3516-1
- https://ubuntu.com/security/notices/USN-3522-1
- https://ubuntu.com/security/notices/USN-3522-2
- https://ubuntu.com/security/notices/USN-3523-1
- https://ubuntu.com/security/notices/USN-3523-2
- https://ubuntu.com/security/notices/USN-3524-1
- https://ubuntu.com/security/notices/USN-3524-2
- https://ubuntu.com/security/notices/USN-3525-1
- https://ubuntu.com/security/notices/USN-3540-1
- https://ubuntu.com/security/notices/USN-3540-2
- https://ubuntu.com/security/notices/USN-3541-1
- https://ubuntu.com/security/notices/USN-3541-2
- https://ubuntu.com/security/notices/USN-3583-1
- https://ubuntu.com/security/notices/USN-3597-1
- https://ubuntu.com/security/notices/USN-3597-2
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
- https://www.cve.org/CVERecord?id=CVE-2017-5754