35
CVE-2018-3665
- CVSS 3.1
- 5.6 medium
- EPSS
- <1%p48
- Published
- ·
- Modified
Description · NVD
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
- Products
- core i3, core i5, core i7, core m, core m3, core m5, core m7, xenserver, ubuntu linux, debian linux, freebsd, enterprise linux
- Weakness
- CWE-200
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
In the news
3 stories35
58 hardware vulnerabilities: A guide to the threats
CSO Online reference guide catalogs 58 CPU and DRAM hardware vulnerabilities from Spectre and Meltdown onward, covering side-channel flaws and mitigation limits.
18