CVE-2018-3665

MEDIUM

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

CVSS v3.1 Score

5.6
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Published: 6/21/2018Modified: 6/17/2026

Related Intelligence (1)

CRITICALAi

58 hardware vulnerabilities: A guide to the threats

In January 2018, the entire computer industry was put on alert by two new processor vulnerabilities dubbed Meltdown and Spectre that defeated the fundamental OS security boundaries separating kernel and user space memory. The flaws stemmed from a performance feature of modern CPUs known as speculative execution and mitigating them required one of the biggest patch coordination efforts in history,

CVE-2017-5753CVE-2017-5715
CSO Online

References (50)

http://www.securityfocus.com/bid/104460Third Party AdvisoryVDB Entryhttp://www.securitytracker.com/id/1041124Third Party AdvisoryVDB Entryhttp://www.securitytracker.com/id/1041125Third Party AdvisoryVDB Entryhttps://access.redhat.com/errata/RHSA-2018:1852Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2018:1944Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2018:2164Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2018:2165Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2019:1170Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2019:1190Third Party Advisoryhttps://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0Third Party Advisoryhttps://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlThird Party Advisoryhttps://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlThird Party Advisoryhttps://nvidia.custhelp.com/app/answers/detail/a_id/4787Third Party Advisoryhttps://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.ascThird Party Advisoryhttps://security.netapp.com/advisory/ntap-20181016-0001/Third Party Advisoryhttps://security.paloaltonetworks.com/CVE-2018-3665Third Party Advisoryhttps://support.citrix.com/article/CTX235745Third Party Advisoryhttps://usn.ubuntu.com/3696-1/Third Party Advisoryhttps://usn.ubuntu.com/3696-2/Third Party Advisoryhttps://usn.ubuntu.com/3698-1/Third Party Advisoryhttps://usn.ubuntu.com/3698-2/Third Party Advisoryhttps://www.debian.org/security/2018/dsa-4232Third Party Advisoryhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.htmlVendor Advisoryhttps://www.oracle.com/security-alerts/cpujul2020.htmlThird Party Advisoryhttps://www.synology.com/support/security/Synology_SA_18_31Third Party Advisoryhttp://www.securityfocus.com/bid/104460Third Party AdvisoryVDB Entryhttp://www.securitytracker.com/id/1041124Third Party AdvisoryVDB Entryhttp://www.securitytracker.com/id/1041125Third Party AdvisoryVDB Entryhttps://access.redhat.com/errata/RHSA-2018:1852Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2018:1944Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2018:2164Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2018:2165Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2019:1170Third Party Advisoryhttps://access.redhat.com/errata/RHSA-2019:1190Third Party Advisoryhttps://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0Third Party Advisoryhttps://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlThird Party Advisoryhttps://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlThird Party Advisoryhttps://nvidia.custhelp.com/app/answers/detail/a_id/4787Third Party Advisoryhttps://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.ascThird Party Advisoryhttps://security.netapp.com/advisory/ntap-20181016-0001/Third Party Advisoryhttps://security.paloaltonetworks.com/CVE-2018-3665Third Party Advisoryhttps://support.citrix.com/article/CTX235745Third Party Advisoryhttps://usn.ubuntu.com/3696-1/Third Party Advisoryhttps://usn.ubuntu.com/3696-2/Third Party Advisoryhttps://usn.ubuntu.com/3698-1/Third Party Advisoryhttps://usn.ubuntu.com/3698-2/Third Party Advisoryhttps://www.debian.org/security/2018/dsa-4232Third Party Advisoryhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.htmlVendor Advisoryhttps://www.oracle.com/security-alerts/cpujul2020.htmlThird Party Advisoryhttps://www.synology.com/support/security/Synology_SA_18_31Third Party Advisory