https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:24:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00995 bdu:2018-00995 https://cve.radiocsirt.org/vuln/bdu:2018-00995 https://cve.radiocsirt.org/vuln/bell-cve-2018-3620 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-3620 https://cve.radiocsirt.org/vuln/certfr-2018-avi-385 certfr-2018-avi-385 https://cve.radiocsirt.org/vuln/certfr-2018-avi-385 https://cve.radiocsirt.org/vuln/cisco-sa-20180814-cpusidechannel <p>5On August 14th, 2018, three vulnerabilities were disclosed by Intel and security researchers that leverage a speculative execution side-channel method referred to as L1 Terminal Fault (L1TF) that affects modern Intel microprocessors. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes. The first vulnerability, CVE-2018-3615, affects Intel SGX technology and is referred to by the researchers who discovered it as foreshadow. This vulnerability is not known to affect any Cisco devices as the Cisco devices do not utilize Intel SGX technology. The second vulnerability, CVE-2018-3620, and the third vulnerability, CVE-2018-3646, are referred to as L1 Terminal Fault attacks by Intel. These two vulnerabilities affect multi-core processors that leverage Intel Hyper-Threading technology supporting Operating System, System Management Mode, and Virtualized workloads. Like the previously disclosed Spectre vulnerabilities, all three new vulnerabilities leverage cache-timing attacks to infer any disclosed data. To exploit any of these vulnerabilities, an attacker must be able to run crafted or script code on an affected device. Although the underlying CPU and operating system combination in a product or service may be affected by these vulnerabilities, the majority of Cisco products are closed systems that do not allow customers to run custom code and are, therefore, not vulnerable. Ther…</p> <p>5On August 14th, 2018, three vulnerabilities were disclosed by Intel and security researchers that leverage a speculative execution side-channel method referred to as L1 Terminal Fault (L1TF) that affects modern Intel microprocessors. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes. The first vulnerability, CVE-2018-3615, affects Intel SGX technology and is referred to by the researchers who discovered it as foreshadow. This vulnerability is not known to affect any Cisco devices as the Cisco devices do not utilize Intel SGX technology. The second vulnerability, CVE-2018-3620, and the third vulnerability, CVE-2018-3646, are referred to as L1 Terminal Fault attacks by Intel. These two vulnerabilities affect multi-core processors that leverage Intel Hyper-Threading technology supporting Operating System, System Management Mode, and Virtualized workloads. Like the previously disclosed Spectre vulnerabilities, all three new vulnerabilities leverage cache-timing attacks to infer any disclosed data. To exploit any of these vulnerabilities, an attacker must be able to run crafted or script code on an affected device. Although the underlying CPU and operating system combination in a product or service may be affected by these vulnerabilities, the majority of Cisco products are closed systems that do not allow customers to run custom code and are, therefore, not vulnerable. Ther…</p> https://cve.radiocsirt.org/vuln/cisco-sa-20180814-cpusidechannel https://cve.radiocsirt.org/vuln/cnvd-2018-15495 cnvd-2018-15495 https://cve.radiocsirt.org/vuln/cnvd-2018-15495 https://cve.radiocsirt.org/vuln/euvd-2026-323007 EUVD-2026-323007 https://cve.radiocsirt.org/vuln/euvd-2026-323007 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3620 <p>Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.</p> <p>Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3620 https://cve.radiocsirt.org/vuln/ghsa-h9mf-j5vf-pc99 <p>Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.</p> <p>Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.</p> https://cve.radiocsirt.org/vuln/ghsa-h9mf-j5vf-pc99 https://cve.radiocsirt.org/vuln/gsd-2018-3620 gsd-2018-3620 https://cve.radiocsirt.org/vuln/gsd-2018-3620 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11242-1 <p>spectre-meltdown-checker-26.36.0602723-1.1 on GA media</p> <p>spectre-meltdown-checker-26.36.0602723-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11242-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2387 <p>Kernel: hw: cpu: L1 terminal fault (L1TF) hw: cpu: speculative store bypass Kernel: hw: cpu: L1 terminal fault (L1TF)</p> <p>Kernel: hw: cpu: L1 terminal fault (L1TF) hw: cpu: speculative store bypass Kernel: hw: cpu: L1 terminal fault (L1TF)</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2387 https://cve.radiocsirt.org/vuln/suse-su-2018:2328-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2328-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3620 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-kvm, Ubuntu:Pro:FIPS:16.04:LTS: linux-fips and 14 more</p> <p>Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:16.04:LTS: linux, Ubuntu:16.04:LTS: linux-aws, Ubuntu:16.04:LTS: linux-azure, Ubuntu:16.04:LTS: linux-gcp, Ubuntu:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-kvm, Ubuntu:Pro:FIPS:16.04:LTS: linux-fips and 14 more</p> <p>Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3620 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1212 <p>Ein Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1212