Vulnerabilitycritical
Oracle issued security patches for recently discovered Spectre and Meltdown issues
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2018-3639+1 related CVE | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are… | 5.5 group max | 61% |
From the original article
1 min read at securityaffairs.com
In May, tech giants Intel, AMD, ARM, IBM, Microsoft and other tech firms teamed to disclose two new variants of both Meltdown and Spectre issues. The so-called Variant 4 (CVE-2018-3639) relies on a Speculative Store Bypass (SSB), while the Variant 3a (CVE-2018-3640) is a Rogue System Register. Both Variant 4 and Variant 3a could be exploited by a local attacker for this reason they have been rated “medium severity”
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.