CVE-2017-5715

MEDIUM

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS v3.1 Score

5.6

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector

LOCAL

Complexity

HIGH

Privileges

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Published: 1/4/2018Modified: 6/17/2026

Related Intelligence (1)

58 hardware vulnerabilities: A guide to the threats

In January 2018, the entire computer industry was put on alert by two new processor vulnerabilities dubbed Meltdown and Spectre that defeated the fundamental OS security boundaries separating kernel and user space memory. The flaws stemmed from a performance feature of modern CPUs known as speculative execution and mitigating them required one of the biggest patch coordination efforts in history,

CVE-2017-5753CVE-2017-5715

Sep 24, 2026CSO Online

References (188)

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.htmlBroken Link http://nvidia.custhelp.com/app/answers/detail/a_id/4609Third Party Advisory http://nvidia.custhelp.com/app/answers/detail/a_id/4611Third Party Advisory http://nvidia.custhelp.com/app/answers/detail/a_id/4613Third Party Advisory http://nvidia.custhelp.com/app/answers/detail/a_id/4614Third Party Advisory http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.htmlExploitThird Party Advisory http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.htmlThird Party AdvisoryVDB Entry http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txtThird Party Advisory http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txtThird Party Advisory http://www.kb.cert.org/vuls/id/584653Third Party AdvisoryUS Government Resource http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlThird Party Advisory http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlThird Party Advisory http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlThird Party Advisory http://www.securityfocus.com/bid/102376Third Party AdvisoryVDB Entry http://www.securitytracker.com/id/1040071Third Party AdvisoryVDB Entry http://xenbits.xen.org/xsa/advisory-254.htmlThird Party Advisory https://access.redhat.com/errata/RHSA-2018:0292Third Party Advisory https://access.redhat.com/security/vulnerabilities/speculativeexecutionThird Party Advisory https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/Third Party Advisory https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/Third Party Advisory https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfThird Party Advisory https://cert.vde.com/en-us/advisories/vde-2018-002Third Party Advisory https://cert.vde.com/en-us/advisories/vde-2018-003Third Party Advisory https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilityThird Party Advisory https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.htmlThird Party Advisory https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+FixesThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/09/msg00017.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2020/03/msg00025.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002PatchThird Party Advisory https://seclists.org/bugtraq/2019/Jun/36Issue TrackingMailing List https://seclists.org/bugtraq/2019/Nov/16Issue TrackingMailing List https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-frVendor Advisory https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.ascThird Party Advisory https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.ascThird Party Advisory https://security.gentoo.org/glsa/201810-06Third Party Advisory https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlThird Party Advisory https://security.netapp.com/advisory/ntap-20180104-0001/Third Party Advisory https://security.paloaltonetworks.com/CVE-2017-5715Third Party Advisory https://spectreattack.com/Third Party Advisory https://support.citrix.com/article/CTX231399Third Party Advisory https://support.f5.com/csp/article/K91229003Third Party Advisory https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_usThird Party Advisory https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_usThird Party Advisory https://support.lenovo.com/us/en/solutions/LEN-18282Third Party Advisory https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannelThird Party Advisory https://usn.ubuntu.com/3531-1/Third Party Advisory https://usn.ubuntu.com/3531-3/Third Party Advisory https://usn.ubuntu.com/3540-2/Third Party Advisory https://usn.ubuntu.com/3541-2/Third Party Advisory https://usn.ubuntu.com/3542-2/Third Party Advisory https://usn.ubuntu.com/3549-1/Third Party Advisory https://usn.ubuntu.com/3560-1/Third Party Advisory https://usn.ubuntu.com/3561-1/Third Party Advisory https://usn.ubuntu.com/3580-1/Third Party Advisory https://usn.ubuntu.com/3581-1/Third Party Advisory https://usn.ubuntu.com/3581-2/Third Party Advisory https://usn.ubuntu.com/3582-1/Third Party Advisory https://usn.ubuntu.com/3582-2/Third Party Advisory https://usn.ubuntu.com/3594-1/Third Party Advisory https://usn.ubuntu.com/3597-1/Third Party Advisory https://usn.ubuntu.com/3597-2/Third Party Advisory https://usn.ubuntu.com/3620-2/Third Party Advisory https://usn.ubuntu.com/3690-1/Third Party Advisory https://usn.ubuntu.com/3777-3/Third Party Advisory https://usn.ubuntu.com/usn/usn-3516-1/Third Party Advisory https://www.debian.org/security/2018/dsa-4120Third Party Advisory https://www.debian.org/security/2018/dsa-4187Third Party Advisory https://www.debian.org/security/2018/dsa-4188Third Party Advisory https://www.debian.org/security/2018/dsa-4213Third Party Advisory https://www.exploit-db.com/exploits/43427/ExploitThird Party Advisory https://www.kb.cert.org/vuls/id/180049Third Party AdvisoryUS Government Resource https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001Third Party Advisory https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlThird Party Advisory https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/Third Party Advisory https://www.synology.com/support/security/Synology_SA_18_01Third Party Advisory https://www.vmware.com/security/advisories/VMSA-2018-0007.htmlThird Party Advisory https://www.vmware.com/us/security/advisories/VMSA-2018-0002.htmlThird Party Advisory https://www.vmware.com/us/security/advisories/VMSA-2018-0004.htmlThird Party Advisory http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlBroken Link http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.htmlBroken Link http://nvidia.custhelp.com/app/answers/detail/a_id/4609Third Party Advisory http://nvidia.custhelp.com/app/answers/detail/a_id/4611Third Party Advisory http://nvidia.custhelp.com/app/answers/detail/a_id/4613Third Party Advisory http://nvidia.custhelp.com/app/answers/detail/a_id/4614Third Party Advisory http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.htmlExploitThird Party Advisory http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.htmlThird Party AdvisoryVDB Entry http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txtThird Party Advisory http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txtThird Party Advisory http://www.kb.cert.org/vuls/id/584653Third Party AdvisoryUS Government Resource http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlThird Party Advisory http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlThird Party Advisory http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlThird Party Advisory http://www.securityfocus.com/bid/102376Third Party AdvisoryVDB Entry http://www.securitytracker.com/id/1040071Third Party AdvisoryVDB Entry http://xenbits.xen.org/xsa/advisory-254.htmlThird Party Advisory https://access.redhat.com/errata/RHSA-2018:0292Third Party Advisory https://access.redhat.com/security/vulnerabilities/speculativeexecutionThird Party Advisory https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/Third Party Advisory https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/Third Party Advisory https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfThird Party Advisory https://cert.vde.com/en-us/advisories/vde-2018-002Third Party Advisory https://cert.vde.com/en-us/advisories/vde-2018-003Third Party Advisory https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilityThird Party Advisory https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.htmlThird Party Advisory https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+FixesThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2018/09/msg00017.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2020/03/msg00025.htmlMailing ListThird Party Advisory https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002PatchThird Party Advisory https://seclists.org/bugtraq/2019/Jun/36Issue TrackingMailing List https://seclists.org/bugtraq/2019/Nov/16Issue TrackingMailing List https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-frVendor Advisory https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.ascThird Party Advisory https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.ascThird Party Advisory https://security.gentoo.org/glsa/201810-06Third Party Advisory https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlThird Party Advisory https://security.netapp.com/advisory/ntap-20180104-0001/Third Party Advisory https://security.paloaltonetworks.com/CVE-2017-5715Third Party Advisory https://spectreattack.com/Third Party Advisory https://support.citrix.com/article/CTX231399Third Party Advisory https://support.f5.com/csp/article/K91229003Third Party Advisory https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_usThird Party Advisory https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_usThird Party Advisory https://support.lenovo.com/us/en/solutions/LEN-18282Third Party Advisory https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannelThird Party Advisory https://usn.ubuntu.com/3531-1/Third Party Advisory https://usn.ubuntu.com/3531-3/Third Party Advisory https://usn.ubuntu.com/3540-2/Third Party Advisory https://usn.ubuntu.com/3541-2/Third Party Advisory https://usn.ubuntu.com/3542-2/Third Party Advisory https://usn.ubuntu.com/3549-1/Third Party Advisory https://usn.ubuntu.com/3560-1/Third Party Advisory https://usn.ubuntu.com/3561-1/Third Party Advisory https://usn.ubuntu.com/3580-1/Third Party Advisory https://usn.ubuntu.com/3581-1/Third Party Advisory https://usn.ubuntu.com/3581-2/Third Party Advisory https://usn.ubuntu.com/3582-1/Third Party Advisory https://usn.ubuntu.com/3582-2/Third Party Advisory https://usn.ubuntu.com/3594-1/Third Party Advisory https://usn.ubuntu.com/3597-1/Third Party Advisory https://usn.ubuntu.com/3597-2/Third Party Advisory https://usn.ubuntu.com/3620-2/Third Party Advisory https://usn.ubuntu.com/3690-1/Third Party Advisory https://usn.ubuntu.com/3777-3/Third Party Advisory https://usn.ubuntu.com/usn/usn-3516-1/Third Party Advisory https://www.debian.org/security/2018/dsa-4120Third Party Advisory https://www.debian.org/security/2018/dsa-4187Third Party Advisory https://www.debian.org/security/2018/dsa-4188Third Party Advisory https://www.debian.org/security/2018/dsa-4213Third Party Advisory https://www.exploit-db.com/exploits/43427/ExploitThird Party Advisory https://www.kb.cert.org/vuls/id/180049Third Party AdvisoryUS Government Resource https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001Third Party Advisory https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlThird Party Advisory https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/Third Party Advisory https://www.synology.com/support/security/Synology_SA_18_01Third Party Advisory https://www.vmware.com/security/advisories/VMSA-2018-0007.htmlThird Party Advisory https://www.vmware.com/us/security/advisories/VMSA-2018-0002.htmlThird Party Advisory https://www.vmware.com/us/security/advisories/VMSA-2018-0004.htmlThird Party Advisory