CVE-2018-3646

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.6 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
intelxeon
*
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
intel-microcode
bullseye/non-free
3.20240813.1~deb11u1
fixed
jessie
ignored
bullseye/non-free (security)
3.20231114.1~deb11u1
fixed
bookworm/non-free-firmware
3.20240813.1~deb12u1
fixed
bookworm/non-free-firmware (security)
3.20231114.1~deb12u1
fixed
sid/non-free-firmware
3.20240910.1
fixed
trixie/non-free-firmware
3.20240910.1
fixed
linux
bullseye
5.10.223-1
fixed
jessie
ignored
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
xen
bullseye
4.14.6-1
fixed
jessie
ignored
bullseye (security)
4.14.5+94-ge49571868d-1
fixed
bookworm
4.17.3+10-g091466ba55-1~deb12u1
fixed
sid
4.17.3+36-g54dacb5c02-1
fixed
trixie
4.17.3+36-g54dacb5c02-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
intel-microcode
cosmic
not-affected
bionic
Fixed 3.20180807a.0ubuntu0.18.04.1
released
xenial
Fixed 3.20180807a.0ubuntu0.16.04.1
released
trusty
Fixed 3.20180807a.0ubuntu0.14.04.1
released
linux
cosmic
not-affected
bionic
Fixed 4.15.0-32.35
released
xenial
Fixed 4.4.0-133.159
released
trusty
Fixed 3.13.0-155.205
released
linux-aws
cosmic
not-affected
bionic
Fixed 4.15.0-1019.19
released
xenial
Fixed 4.4.0-1065.75
released
trusty
Fixed 4.4.0-1027.30
released
linux-aws-hwe
cosmic
dne
bionic
dne
xenial
not-affected
trusty
dne
linux-azure
cosmic
not-affected
bionic
Fixed 4.15.0-1021.21
released
xenial
Fixed 4.15.0-1021.21~16.04.1
released
trusty
not-affected
linux-azure-edge
cosmic
dne
bionic
Fixed 4.15.0-1021.21
released
xenial
Fixed 4.15.0-1021.21~16.04.1
released
trusty
dne
linux-euclid
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-flo
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-gcp
cosmic
not-affected
bionic
Fixed 4.15.0-1017.18
released
xenial
Fixed 4.15.0-1017.18~16.04.1
released
trusty
dne
linux-gcp-edge
cosmic
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gke
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-goldfish
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-grouper
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe
cosmic
dne
bionic
not-affected
xenial
Fixed 4.15.0-32.35~16.04.1
released
trusty
dne
linux-hwe-edge
cosmic
dne
bionic
not-affected
xenial
Fixed 4.15.0-32.35~16.04.1
released
trusty
dne
linux-kvm
cosmic
not-affected
bionic
Fixed 4.15.0-1019.19
released
xenial
Fixed 4.4.0-1031.37
released
trusty
dne
linux-lts-trusty
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-utopic
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-vivid
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-wily
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-xenial
cosmic
dne
bionic
dne
xenial
dne
trusty
Fixed 4.4.0-133.159~14.04.1
released
linux-maguro
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-mako
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-manta
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem
cosmic
not-affected
bionic
Fixed 4.15.0-1015.18
released
xenial
ignored
trusty
dne
linux-oracle
cosmic
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
linux-raspi2
cosmic
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
linux-snapdragon
cosmic
dne
bionic
not-affected
xenial
not-affected
trusty
dne
References
http://support.lenovo.com/us/en/solutions/LEN-24163
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
http://www.securityfocus.com/bid/105080
http://www.securitytracker.com/id/1041451
http://www.securitytracker.com/id/1042004
http://www.vmware.com/security/advisories/VMSA-2018-0020.html
http://xenbits.xen.org/xsa/advisory-273.html
https://access.redhat.com/errata/RHSA-2018:2384
https://access.redhat.com/errata/RHSA-2018:2387
https://access.redhat.com/errata/RHSA-2018:2388
https://access.redhat.com/errata/RHSA-2018:2389
https://access.redhat.com/errata/RHSA-2018:2390
https://access.redhat.com/errata/RHSA-2018:2391
https://access.redhat.com/errata/RHSA-2018:2392
https://access.redhat.com/errata/RHSA-2018:2393
https://access.redhat.com/errata/RHSA-2018:2394
https://access.redhat.com/errata/RHSA-2018:2395
https://access.redhat.com/errata/RHSA-2018:2396
https://access.redhat.com/errata/RHSA-2018:2402
https://access.redhat.com/errata/RHSA-2018:2403
https://access.redhat.com/errata/RHSA-2018:2404
https://access.redhat.com/errata/RHSA-2018:2602
https://access.redhat.com/errata/RHSA-2018:2603
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
https://foreshadowattack.eu/
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0010
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc
https://security.gentoo.org/glsa/201810-06
https://security.netapp.com/advisory/ntap-20180815-0001/
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
https://support.f5.com/csp/article/K31300402
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
https://usn.ubuntu.com/3740-1/
https://usn.ubuntu.com/3740-2/
https://usn.ubuntu.com/3741-1/
https://usn.ubuntu.com/3741-2/
https://usn.ubuntu.com/3742-1/
https://usn.ubuntu.com/3742-2/
https://usn.ubuntu.com/3756-1/
https://usn.ubuntu.com/3823-1/
https://www.debian.org/security/2018/dsa-4274
https://www.debian.org/security/2018/dsa-4279
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
https://www.kb.cert.org/vuls/id/982149
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.synology.com/support/security/Synology_SA_18_45
http://support.lenovo.com/us/en/solutions/LEN-24163
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
http://www.securityfocus.com/bid/105080
http://www.securitytracker.com/id/1041451
http://www.securitytracker.com/id/1042004
http://www.vmware.com/security/advisories/VMSA-2018-0020.html
http://xenbits.xen.org/xsa/advisory-273.html
https://access.redhat.com/errata/RHSA-2018:2384
https://access.redhat.com/errata/RHSA-2018:2387
https://access.redhat.com/errata/RHSA-2018:2388
https://access.redhat.com/errata/RHSA-2018:2389
https://access.redhat.com/errata/RHSA-2018:2390
https://access.redhat.com/errata/RHSA-2018:2391
https://access.redhat.com/errata/RHSA-2018:2392
https://access.redhat.com/errata/RHSA-2018:2393
https://access.redhat.com/errata/RHSA-2018:2394
https://access.redhat.com/errata/RHSA-2018:2395
https://access.redhat.com/errata/RHSA-2018:2396
https://access.redhat.com/errata/RHSA-2018:2402
https://access.redhat.com/errata/RHSA-2018:2403
https://access.redhat.com/errata/RHSA-2018:2404
https://access.redhat.com/errata/RHSA-2018:2602
https://access.redhat.com/errata/RHSA-2018:2603
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
https://foreshadowattack.eu/
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0010
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc
https://security.gentoo.org/glsa/201810-06
https://security.netapp.com/advisory/ntap-20180815-0001/
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
https://support.f5.com/csp/article/K31300402
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel
https://usn.ubuntu.com/3740-1/
https://usn.ubuntu.com/3740-2/
https://usn.ubuntu.com/3741-1/
https://usn.ubuntu.com/3741-2/
https://usn.ubuntu.com/3742-1/
https://usn.ubuntu.com/3742-2/
https://usn.ubuntu.com/3756-1/
https://usn.ubuntu.com/3823-1/
https://www.debian.org/security/2018/dsa-4274
https://www.debian.org/security/2018/dsa-4279
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
https://www.kb.cert.org/vuls/id/982149
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.synology.com/support/security/Synology_SA_18_45