ZeroHour

CVE-2018-3615

CVSS 3.1
7.3 high
EPSS
6%p93
Published
()
Modified
Description

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Vendors
intel
Products
core i3, core i5, core i7, xeon e3, xeon e3 1220 v5, xeon e3 1225 v5, xeon e3 1230 v5, xeon e3 1235l v5, xeon e3 1240 v5, xeon e3 1240l v5, xeon e3 1245 v5, xeon e3 1260l v5
Weakness
CWE-203
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

In the news