https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:57:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00994 bdu:2018-00994 https://cve.radiocsirt.org/vuln/bdu:2018-00994 https://cve.radiocsirt.org/vuln/certfr-2018-avi-387 certfr-2018-avi-387 https://cve.radiocsirt.org/vuln/certfr-2018-avi-387 https://cve.radiocsirt.org/vuln/cisco-sa-20180814-cpusidechannel <p>5On August 14th, 2018, three vulnerabilities were disclosed by Intel and security researchers that leverage a speculative execution side-channel method referred to as L1 Terminal Fault (L1TF) that affects modern Intel microprocessors. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes. The first vulnerability, CVE-2018-3615, affects Intel SGX technology and is referred to by the researchers who discovered it as foreshadow. This vulnerability is not known to affect any Cisco devices as the Cisco devices do not utilize Intel SGX technology. The second vulnerability, CVE-2018-3620, and the third vulnerability, CVE-2018-3646, are referred to as L1 Terminal Fault attacks by Intel. These two vulnerabilities affect multi-core processors that leverage Intel Hyper-Threading technology supporting Operating System, System Management Mode, and Virtualized workloads. Like the previously disclosed Spectre vulnerabilities, all three new vulnerabilities leverage cache-timing attacks to infer any disclosed data. To exploit any of these vulnerabilities, an attacker must be able to run crafted or script code on an affected device. Although the underlying CPU and operating system combination in a product or service may be affected by these vulnerabilities, the majority of Cisco products are closed systems that do not allow customers to run custom code and are, therefore, not vulnerable. Ther…</p> <p>5On August 14th, 2018, three vulnerabilities were disclosed by Intel and security researchers that leverage a speculative execution side-channel method referred to as L1 Terminal Fault (L1TF) that affects modern Intel microprocessors. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes. The first vulnerability, CVE-2018-3615, affects Intel SGX technology and is referred to by the researchers who discovered it as foreshadow. This vulnerability is not known to affect any Cisco devices as the Cisco devices do not utilize Intel SGX technology. The second vulnerability, CVE-2018-3620, and the third vulnerability, CVE-2018-3646, are referred to as L1 Terminal Fault attacks by Intel. These two vulnerabilities affect multi-core processors that leverage Intel Hyper-Threading technology supporting Operating System, System Management Mode, and Virtualized workloads. Like the previously disclosed Spectre vulnerabilities, all three new vulnerabilities leverage cache-timing attacks to infer any disclosed data. To exploit any of these vulnerabilities, an attacker must be able to run crafted or script code on an affected device. Although the underlying CPU and operating system combination in a product or service may be affected by these vulnerabilities, the majority of Cisco products are closed systems that do not allow customers to run custom code and are, therefore, not vulnerable. Ther…</p> https://cve.radiocsirt.org/vuln/cisco-sa-20180814-cpusidechannel https://cve.radiocsirt.org/vuln/cnvd-2018-15496 cnvd-2018-15496 https://cve.radiocsirt.org/vuln/cnvd-2018-15496 https://cve.radiocsirt.org/vuln/euvd-2026-323008 EUVD-2026-323008 https://cve.radiocsirt.org/vuln/euvd-2026-323008 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3615 <p>Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.</p> <p>Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3615 https://cve.radiocsirt.org/vuln/ghsa-9w6j-7396-jgw4 <p>Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.</p> <p>Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.</p> https://cve.radiocsirt.org/vuln/ghsa-9w6j-7396-jgw4 https://cve.radiocsirt.org/vuln/gsd-2018-3615 gsd-2018-3615 https://cve.radiocsirt.org/vuln/gsd-2018-3615 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11242-1 <p>spectre-meltdown-checker-26.36.0602723-1.1 on GA media</p> <p>spectre-meltdown-checker-26.36.0602723-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11242-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3615 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-azure</p> <p>Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux-azure</p> <p>Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3615