ZeroHour

CVE-2018-3665

CVSS 3.1
5.6 medium
EPSS
<1%p48
Published
()
Modified
Description

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

Vendors
intelcitrixcanonicaldebianfreebsdredhat
Products
core i3, core i5, core i7, core m, core m3, core m5, core m7, xenserver, ubuntu linux, debian linux, freebsd, enterprise linux
Weakness
CWE-200
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

In the news