CVE-2017-5925
EUVD-2017-1500027.02.2017, 07:59
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| allwinner | a64 | - |
| amd | athlon_ii_640_x4 | - |
| amd | e-350 | - |
| amd | fx-8120_8-core | - |
| amd | fx-8320_8-core | - |
| amd | fx-8350_8-core | - |
| amd | phenom_9550_4-core | - |
| intel | atom_c2750 | - |
| intel | celeron_n2840 | - |
| intel | core_i5_m480 | - |
| intel | core_i7-2620qm | - |
| intel | core_i7-3632qm | - |
| intel | core_i7-4500u | - |
| intel | core_i7-6700k | - |
| intel | core_i7_920 | - |
| intel | xeon_e3-1240_v5 | - |
| intel | xeon_e5-2658_v2 | - |
| nvidia | tegra_k1_cd570m-a1 | - |
| nvidia | tegra_k1_cd580m-a1 | - |
| samsung | exynos_5800 | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration