Most recent entries from all

bdu:2019-01065

certfr-2018-ale-001 — \[Mise à jour du 25/05/2018 : ajout de bulletins Microsoft (cf. section Documentation)\] \[Mi…

certfr-2018-ale-001

certfr-2018-avi-429 — De multiples vulnérabilités ont été découvertes dans SCADA les produits Siemens. Elles permettent à un attaquant de pro…
certfr-2018-avi-429

cisco-sa-20180521-cpusidechannel — CPU Side-Channel Information Disclosure Vulnerabilities: May 2018

On May 21, 2018, researchers disclosed two vulnerabilities that take advantage of the implementation of speculative execution of instructions on many modern microprocessor architectures to perform side-channel information disclosure attacks. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes. The first vulnerability, CVE-2018-3639, is known as Spectre Variant 4 or SpectreNG. The second vulnerability, CVE-2018-3640, is known as Spectre Variant 3a. Both of these attacks are variants of the attacks disclosed in January 2018 and leverage cache-timing attacks to infer any disclosed data. To exploit either of these vulnerabilities, an attacker must be able to run crafted or script code on an affected device. Although the underlying CPU and operating system combination in a product or service may be affected by these vulnerabilities, the majority of Cisco products are closed systems that do not allow customers to run custom code and are, therefore, not vulnerable. There is no vector to exploit them. Cisco products are considered potentially vulnerable only if they allow customers to execute custom code side-by-side with Cisco code on the same microprocessor. A Cisco product that may be deployed as a virtual machine or a container, even while not directly affected by any of these vulnerabilities, could be targeted by such attacks if the hosting environment is vulnerable. Cisco…

cnvd-2018-13356
cnvd-2018-13356

EUVD-2026-170056
EUVD-2026-170056

fkie_cve-2018-3640

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

GHSA-wm4v-x65g-m25r

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

gsd-2018-3640
gsd-2018-3640

openSUSE-SU-2024:11478-1 — ucode-intel-20210608-1.2 on GA media

ucode-intel-20210608-1.2 on GA media

SUSE-SU-2018:1926-1 — Security update for ucode-intel

Security update for ucode-intel

UBUNTU-CVE-2018-3640

Affected: Ubuntu:14.04:LTS: intel-microcode, Ubuntu:16.04:LTS: intel-microcode, Ubuntu:18.04:LTS: intel-microcode

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

WID-SEC-W-2023-2072 — Prozessoren verschiedener Hersteller: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Ein lokaler Angreifer kann mehrere Schwachstellen in Prozessoren unterschiedlicher Hersteller ausnutzen, um Sicherheitsvorkehrungen zu umgehen.