GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

BDU:2018-00996 (CVE-2018-3646)

Vulnerability from fstec – Published: 2018-08-16 – Updated: 2024-09-30 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость процессоров Intel, связанная с возможностью спекулятивного выполнения команд и позволяющая нарушителю преодолеть механизм изоляции памяти виртуальных машин
Summary
Уязвимость процессоров Intel связана с возможностью спекулятивного выполнения команд. Эксплуатация уязвимости может позволить нарушителю получить доступ из гостевой виртуальной машины к памяти гипервизора или других виртуальных машин (преодолеть механизм изоляции памяти виртуальных машин) путём реализации атаки по побочным каналам, позволяющей прочесть данные кэша первого уровня (L1), в котором после спекулятивного выполнения остаются фрагменты защищаемых данных
Severity
3.3 (Low) CVSS 2.0
AV:L/AC:M/Au:N/C:P/I:P/A:N
7.1 (High) CVSS 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Class
Architecture vulnerability
Status
Confirmed by the vendor
Exploitation
Timing and state manipulation
Incidents
Being clarified
Remediation
Software update
CWE
  • CWE-208 - Утечка информации на основании временных расхождений
  • CWE-524 - Раскрытие информации посредством кэширования
Aliases
CVE-2018-3646, CISCO-SA-20180814-CPUSIDECHANNEL, INTEL-SA-00161
References
Impacted products
Vendors
Microsoft Corp, ООО «РусБИТех-Астра», Red Hat, Inc., Canonical Ltd., АО «ИВК», Fedora Project, Сообщество свободного программного обеспечения, Novell Inc., Intel Corp., Oracle Corp., Siemens AG
Products
Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1, Windows 10, Astra Linux Special Edition (запись в едином реестре российских программ №369), Windows 10 1607, Red Hat Enterprise Linux, Ubuntu, Windows 10 1703, Альт Линукс СПТ (запись в едином реестре российских программ №9), Windows Server 2016, Windows RT 8.1, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Fedora, Debian GNU/Linux, OpenSUSE Leap, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows 10 1709, Intel Xeon, Intel Core, Windows Server 1709 (Server Core Installation), Windows 10 1803, Windows Server 1803 (Server Core Installation), Solaris, SIMATIC Field PG M5, SIMATIC IPC427E, SIMATIC IPC477E, SIMATIC IPC547E, SIMATIC IPC547G, SIMATIC IPC627D, SIMATIC IPC647D, SIMATIC IPC677D, SIMATIC IPC827D, SIMATIC IPC847D, SIMATIC ITP1000, SIMATIC IPC427C, SIMATIC IPC477C, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, RUGGEDCOM APE, RUGGEDCOM RX1400 VPE, SIMATIC ET 200SP Open Controller, SIMATIC ET 200 SP Open Controller (F), SIMATIC Field PG M4, SIMATIC IPC3000 SMART V2, SIMATIC IPC347E, SIMATIC IPC427D, SIMATIC IPC477D, SIMATIC IPC477E Pro, SIMATIC IPC627C, SIMATIC IPC647C, SIMATIC IPC677C, SIMATIC IPC827C, SIMATIC IPC847C, SIMATIC S7-1500 CPU S7-1518-4 PN/DP MFP, SIMATIC S7-1500 CPU S7-1518F-4 PN/DP MFP, SIMATIC S7-1500 Software Controller, SIMOTION P320-4E, SIMOTION P320-4S, SINUMERIK 840D sl, SINUMERIK PCU 50.5, SINUMERIK Panels с интегрированной TCU, SINUMERIK TCU 30.3, Suse Linux Enterprise Server, Red Hat Enterprise MRG, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Альт 8 СП Сервер, Альт 8 СП Рабочая станция, SUSE Linux Enterprise Build System Kit, SUSE Linux Enterprise High Availability, Communications EAGLE LNP Application Processor, SIMATIC WinAC RTX 2010 incl. F, SUSE Linux Enterprise High Performance Computing, Oracle Communications LSMS, Red Hat Virtualization, Windows Server 2012 (Server Core installation)
Versions
- (Windows 7 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows 8.1), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1), - (Windows 10), 1.5 «Смоленск» (Astra Linux Special Edition), - (Windows 10 1607), 6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 16.04 LTS (Ubuntu), - (Windows 10 1703), 7.0 (Альт Линукс СПТ), - (Windows Server 2016), - (Windows RT 8.1), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), 27 (Fedora), 9 (Debian GNU/Linux), 42.3 (OpenSUSE Leap), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Windows 10 1709), - (Intel Xeon), - (Intel Core), - (Windows Server 1709 (Server Core Installation)), 18.04 LTS (Ubuntu), - (Windows 10 1803), - (Windows Server 1803 (Server Core Installation)), 28 (Fedora), 11 (Solaris), до 22.01.06 (SIMATIC Field PG M5), до 21.01.09 (SIMATIC IPC427E), до 21.01.09 (SIMATIC IPC477E), до R1.30.0 (SIMATIC IPC547E), до R1.23.0 (SIMATIC IPC547G), до 19.02.11 (SIMATIC IPC627D), до 19.01.14 (SIMATIC IPC647D), до 19.02.11 (SIMATIC IPC677D), до 19.02.11 (SIMATIC IPC827D), до 19.01.14 (SIMATIC IPC847D), до 23.01.04 (SIMATIC ITP1000), - (SIMATIC IPC427C), - (SIMATIC IPC477C), 12 SP3 (Suse Linux Enterprise Desktop), 12 SP4 (Suse Linux Enterprise Desktop), 12 SP2 (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-BCL (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-ESPOS (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Software Development Kit), 12 SP4 (SUSE Linux Enterprise Software Development Kit), - (RUGGEDCOM APE), - (RUGGEDCOM RX1400 VPE), - (SIMATIC ET 200SP Open Controller), - (SIMATIC ET 200 SP Open Controller (F)), до 18.01.09 (SIMATIC Field PG M4), до 1.4 (SIMATIC IPC3000 SMART V2), до 1.4 (SIMATIC IPC347E), до 17.0X.14 (SIMATIC IPC427D), до 17.0X.14 (SIMATIC IPC477D), до 21.01.09 (SIMATIC IPC477E Pro), до 15.02.15 (SIMATIC IPC627C), до 15.01.14 (SIMATIC IPC647C), до 15.02.15 (SIMATIC IPC677C), до 15.02.15 (SIMATIC IPC827C), до 15.01.14 (SIMATIC IPC847C), до 2.6 (SIMATIC S7-1500 CPU S7-1518-4 PN/DP MFP), до 2.6 (SIMATIC S7-1500 CPU S7-1518F-4 PN/DP MFP), - (SIMATIC S7-1500 Software Controller), до 17.0X.14 (SIMOTION P320-4E), до 17.0X.14 (SIMOTION P320-4S), - (SINUMERIK 840D sl), до 15.02.15 (SINUMERIK PCU 50.5), Выпущенные до 2016 включительно (SINUMERIK Panels с интегрированной TCU), - (SINUMERIK TCU 30.3), 12 SP3 (Suse Linux Enterprise Server), 12 SP4 (Suse Linux Enterprise Server), 11 SP4 (Suse Linux Enterprise Server), 11 SP4 (SUSE Linux Enterprise Software Development Kit), 12.04 ESM (Ubuntu), 2.0 (Red Hat Enterprise MRG), 2.12 «Орёл» (Astra Linux Common Edition), - (Альт 8 СП Сервер), - (Альт 8 СП Рабочая станция), 15.0 (OpenSUSE Leap), 12 SP3 (SUSE Linux Enterprise Build System Kit), 12 SP2-BCL (Suse Linux Enterprise Server), 12 SP2-ESPOS (Suse Linux Enterprise Server), 12 SP2 (SUSE Linux Enterprise High Availability), 12 SP3 (SUSE Linux Enterprise High Availability), 12 SP4 (SUSE Linux Enterprise High Availability), 15 (SUSE Linux Enterprise High Availability), 15 SP1 (SUSE Linux Enterprise High Availability), 12-LTSS (Suse Linux Enterprise Server), 11 SP3-LTSS (SUSE Linux Enterprise Server for SAP Applications), 11 SP4 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12 SP1-LTSS (Suse Linux Enterprise Server), 12 SP2-LTSS (Suse Linux Enterprise Server), 7.4 EUS (Red Hat Enterprise Linux), 14.04 ESM (Ubuntu), 12 SP5 (Suse Linux Enterprise Server), 12 SP5 (SUSE Linux Enterprise Software Development Kit), 8 (Debian GNU/Linux), 16.1.0 (Communications EAGLE LNP Application Processor), 16.2.0 (Communications EAGLE LNP Application Processor), 11 SP3-LTSS (Suse Linux Enterprise Server), до SP3 (SIMATIC WinAC RTX 2010 incl. F), 7.2 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Telco Extended Update Support (Red Hat Enterprise Linux), 5 Extended Lifecycle Support (Red Hat Enterprise Linux), 5.9 Long Life (Red Hat Enterprise Linux), 7.3 Extended Update Support (Red Hat Enterprise Linux), 6.5 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Telco Extended Update Support (Red Hat Enterprise Linux), 6.4 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 6.7 Extended Update Support (Red Hat Enterprise Linux), 12 SP5 (SUSE Linux Enterprise High Performance Computing), 12 SP5 (SUSE Linux Enterprise High Availability), 13.1 (Oracle Communications LSMS), 13.2 (Oracle Communications LSMS), 13.3 (Oracle Communications LSMS), 4 for RHEL7 (Red Hat Virtualization), - (Windows Server 2012 (Server Core installation))
Product types
Operating system, Appliance software, Firmware, Средство АСУ ТП, ПО программно-аппаратного средства АСУ ТП, Network appliance software, Application software, Industrial control system software, Virtualization software
Platforms
Microsoft Corp Windows 7 Service Pack 1 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows 7 Service Pack 1 - 32-bit, Microsoft Corp Windows 8.1 - 64-bit, Microsoft Corp Windows 8.1 - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 -, Microsoft Corp Windows Server 2012 R2 -, Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, ООО «РусБИТех-Астра» Astra Linux Special Edition 1.5 «Смоленск» (запись в едином реестре российских программ №369), Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Red Hat, Inc. Red Hat Enterprise Linux 6, Inc. Red Hat Enterprise Linux 7, Canonical Ltd. Ubuntu 16.04 LTS, Microsoft Corp Windows 10 1703 - 32-bit, АО «ИВК» Альт Линукс СПТ 7.0 (запись в едином реестре российских программ №9), Microsoft Corp Windows Server 2016 -, Microsoft Corp Windows RT 8.1 -, Microsoft Corp Windows 10 1703 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 32-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) -, Microsoft Corp Windows Server 2016 (Server Core installation) -, Fedora Project Fedora 27, Сообщество свободного программного обеспечения Debian GNU/Linux 9, Novell Inc. OpenSUSE Leap 42.3, Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows 10 1709 - 64-bit, Microsoft Corp Windows 10 1709 - 32-bit, Microsoft Corp Windows Server 1709 (Server Core Installation) -, Canonical Ltd. Ubuntu 18.04 LTS, Microsoft Corp Windows 10 1803 - 64-bit, Microsoft Corp Windows 10 1803 - 32-bit, Microsoft Corp Windows Server 1803 (Server Core Installation) -, Fedora Project Fedora 28, Oracle Corp. Solaris 11, Novell Inc. Suse Linux Enterprise Desktop 12 SP3, Novell Inc. Suse Linux Enterprise Desktop 12 SP4, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-BCL, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP3, Intel Corp. - - Intel Core, Intel Corp. - - Intel Xeon, Novell Inc. Suse Linux Enterprise Server 12 SP3, Novell Inc. Suse Linux Enterprise Server 12 SP4, Novell Inc. Suse Linux Enterprise Server 11 SP4, Canonical Ltd. Ubuntu 12.04 ESM, АО «ИВК» Альт 8 СП Сервер -, АО «ИВК» Альт 8 СП Рабочая станция -, Novell Inc. OpenSUSE Leap 15.0, Novell Inc. Suse Linux Enterprise Server 12 SP2-BCL, Novell Inc. Suse Linux Enterprise Server 12 SP2-ESPOS, Novell Inc. Suse Linux Enterprise Server 12-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP3-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP4, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12-LTSS, Novell Inc. Suse Linux Enterprise Server 12 SP1-LTSS, Novell Inc. Suse Linux Enterprise Server 12 SP2-LTSS, Inc. Red Hat Enterprise Linux 7.4 EUS, Canonical Ltd. Ubuntu 14.04 ESM, Novell Inc. Suse Linux Enterprise Server 12 SP5, Сообщество свободного программного обеспечения Debian GNU/Linux 8, Novell Inc. Suse Linux Enterprise Server 11 SP3-LTSS, Inc. Red Hat Enterprise Linux 7.2 Advanced Update Support, Inc. Red Hat Enterprise Linux 7.2 Telco Extended Update Support, Inc. Red Hat Enterprise Linux 5 Extended Lifecycle Support, Inc. Red Hat Enterprise Linux 5.9 Long Life, Inc. Red Hat Enterprise Linux 7.3 Extended Update Support, Inc. Red Hat Enterprise Linux 6.5 Advanced Update Support, Inc. Red Hat Enterprise Linux 6.6 Advanced Update Support, Inc. Red Hat Enterprise Linux 6.6 Telco Extended Update Support, Inc. Red Hat Enterprise Linux 6.4 Advanced Update Support, Inc. Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 6.7 Extended Update Support, Microsoft Corp Windows Server 2012 (Server Core installation) -
Mitigations
Использование рекомендаций разработчика: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html Для SIMATIC Field PG M4 до версии BIOS V18.01.09: https://support.industry.siemens.com/cs/de/en/view/109037537 Для SIMATIC Field PG M5 до версии BIOS V22.01.06: https://support.industry.siemens.com/cs/de/en/view/109738122 Для SIMATIC IPC3000 SMART V2 и SIMATIC IPC347E до версии BIOS V1.4: https://support.industry.siemens.com/cs/ww/en/view/109759824 Для SIMATIC IPC427D, SIMATIC IPC477D, SIMOTION P320-4E и SIMOTION P320-4S до версии BIOS V17.0X.14: https://support.industry.siemens.com/cs/de/en/view/108608500 Для SIMATIC IPC427E, SIMATIC IPC477E и SIMATIC IPC477E Pro до версии BIOS V21.01.09: https://support.industry.siemens.com/cs/de/en/view/109742593 Для SIMATIC IPC547E до версии BIOS R1.30.0: https://support.industry.siemens.com/cs/us/en/view/109481624 Для SIMATIC IPC547G до версии BIOS R1.23.0: https://support.industry.siemens.com/cs/us/en/view/109750349 Для SIMATIC IPC627D, SIMATIC IPC677D и SIMATIC IPC827D до версии BIOS V19.02.11: https://support.industry.siemens.com/cs/ww/de/view/109474954 Для SIMATIC IPC627C, SIMATIC IPC677C, SINUMERIK PCU 50.5 и SIMATIC IPC827C до версии BIOS V15.02.15: https://support.industry.siemens.com/cs/ww/en/view/48792087 Для SIMATIC IPC647C и SIMATIC IPC847C до версии BIOS V15.01.14: https://support.industry.siemens.com/cs/ww/en/view/48792076 Для SIMATIC IPC647D и SIMATIC IPC847D до версии BIOS V19.01.14: https://support.industry.siemens.com/cs/ww/en/view/109037779 Для SIMATIC ITP1000 до версии BIOS V23.01.04: https://support.industry.siemens.com/cs/us/en/view/109748173 Для SIMATIC S7-1500 CPU S7-1518-4 PN/DP MFP и SIMATIC S7-1500 CPU S7-1518F-4 PN/DP MFP до версии BIOS V2.6: https://support.industry.siemens.com/cs/ww/en/view/109478459 Компенсирующие меры: Для RUGGEDCOM APE и RUGGEDCOM RX1400 VPE: Применение исправлений Debian по мере их появления Ограничение возможностей запуска ненадежного кода, если это возможно Применение концепции углубленной защиты https://www.siemens.com/industrialsecurity Для ОС Astra Linux 1.6 «Смоленск»: - обновить пакет linux до 4.15.3-1.astra17 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734 - обновить пакет xen до 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734 - обновить пакет intel-microcode до 3.20180807a.2 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734
Credits
Класс атак, связанных с уязвимостью, получил названия Foreshadow -NG (название предложено исследователями, выявившими уязвимость) и L1 Terminal Fault (название используется разработчиком Intel)
To clipboard 

{
  "CVSS 2.0": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Red Hat, Inc., Canonical Ltd., \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb, Fedora Project, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Novell Inc., Intel Corp., Oracle Corp., Siemens AG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Windows 7 Service Pack 1), - (Windows Server 2008 Service Pack 2), - (Windows 8.1), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1), - (Windows 10), 1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), - (Windows 10 1607), 6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 16.04 LTS (Ubuntu), - (Windows 10 1703), 7.0 (\u0410\u043b\u044c\u0442 \u041b\u0438\u043d\u0443\u043a\u0441 \u0421\u041f\u0422), - (Windows Server 2016), - (Windows RT 8.1), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), 27 (Fedora), 9 (Debian GNU/Linux), 42.3 (OpenSUSE Leap), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Windows 10 1709), - (Intel Xeon), - (Intel Core), - (Windows Server 1709 (Server Core Installation)), 18.04 LTS (Ubuntu), - (Windows 10 1803), - (Windows Server 1803 (Server Core Installation)), 28 (Fedora), 11 (Solaris), \u0434\u043e 22.01.06 (SIMATIC Field PG M5), \u0434\u043e 21.01.09 (SIMATIC IPC427E), \u0434\u043e 21.01.09 (SIMATIC IPC477E), \u0434\u043e R1.30.0 (SIMATIC IPC547E), \u0434\u043e R1.23.0 (SIMATIC IPC547G), \u0434\u043e 19.02.11 (SIMATIC IPC627D), \u0434\u043e 19.01.14 (SIMATIC IPC647D), \u0434\u043e 19.02.11 (SIMATIC IPC677D), \u0434\u043e 19.02.11 (SIMATIC IPC827D), \u0434\u043e 19.01.14 (SIMATIC IPC847D), \u0434\u043e 23.01.04 (SIMATIC ITP1000), - (SIMATIC IPC427C), - (SIMATIC IPC477C), 12 SP3 (Suse Linux Enterprise Desktop), 12 SP4 (Suse Linux Enterprise Desktop), 12 SP2 (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-BCL (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-ESPOS (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Software Development Kit), 12 SP4 (SUSE Linux Enterprise Software Development Kit), - (RUGGEDCOM APE), - (RUGGEDCOM RX1400 VPE), - (SIMATIC ET 200SP Open Controller), - (SIMATIC ET 200 SP Open Controller (F)), \u0434\u043e 18.01.09 (SIMATIC Field PG M4), \u0434\u043e 1.4 (SIMATIC IPC3000 SMART V2), \u0434\u043e 1.4 (SIMATIC IPC347E), \u0434\u043e 17.0X.14 (SIMATIC IPC427D), \u0434\u043e 17.0X.14 (SIMATIC IPC477D), \u0434\u043e 21.01.09 (SIMATIC IPC477E Pro), \u0434\u043e 15.02.15 (SIMATIC IPC627C), \u0434\u043e 15.01.14 (SIMATIC IPC647C), \u0434\u043e 15.02.15 (SIMATIC IPC677C), \u0434\u043e 15.02.15 (SIMATIC IPC827C), \u0434\u043e 15.01.14 (SIMATIC IPC847C), \u0434\u043e 2.6 (SIMATIC S7-1500 CPU S7-1518-4 PN/DP MFP), \u0434\u043e 2.6 (SIMATIC S7-1500 CPU S7-1518F-4 PN/DP MFP), - (SIMATIC S7-1500 Software Controller), \u0434\u043e 17.0X.14 (SIMOTION P320-4E), \u0434\u043e 17.0X.14 (SIMOTION P320-4S), - (SINUMERIK 840D sl), \u0434\u043e 15.02.15 (SINUMERIK PCU 50.5), \u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u043e 2016 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (SINUMERIK Panels \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 TCU), - (SINUMERIK TCU 30.3), 12 SP3 (Suse Linux Enterprise Server), 12 SP4 (Suse Linux Enterprise Server), 11 SP4 (Suse Linux Enterprise Server), 11 SP4 (SUSE Linux Enterprise Software Development Kit), 12.04 ESM (Ubuntu), 2.0 (Red Hat Enterprise MRG), 2.12 \u00ab\u041e\u0440\u0451\u043b\u00bb (Astra Linux Common Edition), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f \u0421\u0435\u0440\u0432\u0435\u0440), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f \u0420\u0430\u0431\u043e\u0447\u0430\u044f \u0441\u0442\u0430\u043d\u0446\u0438\u044f), 15.0 (OpenSUSE Leap), 12 SP3 (SUSE Linux Enterprise Build System Kit), 12 SP2-BCL (Suse Linux Enterprise Server), 12 SP2-ESPOS (Suse Linux Enterprise Server), 12 SP2 (SUSE Linux Enterprise High Availability), 12 SP3 (SUSE Linux Enterprise High Availability), 12 SP4 (SUSE Linux Enterprise High Availability), 15 (SUSE Linux Enterprise High Availability), 15 SP1 (SUSE Linux Enterprise High Availability), 12-LTSS (Suse Linux Enterprise Server), 11 SP3-LTSS (SUSE Linux Enterprise Server for SAP Applications), 11 SP4 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12 SP1-LTSS (Suse Linux Enterprise Server), 12 SP2-LTSS (Suse Linux Enterprise Server), 7.4 EUS (Red Hat Enterprise Linux), 14.04 ESM (Ubuntu), 12 SP5 (Suse Linux Enterprise Server), 12 SP5 (SUSE Linux Enterprise Software Development Kit), 8 (Debian GNU/Linux), 16.1.0 (Communications EAGLE LNP Application Processor), 16.2.0 (Communications EAGLE LNP Application Processor), 11 SP3-LTSS (Suse Linux Enterprise Server), \u0434\u043e SP3 (SIMATIC WinAC RTX 2010 incl. F), 7.2 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Telco Extended Update Support (Red Hat Enterprise Linux), 5 Extended Lifecycle Support (Red Hat Enterprise Linux), 5.9 Long Life (Red Hat Enterprise Linux), 7.3 Extended Update Support (Red Hat Enterprise Linux), 6.5 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Advanced Update Support (Red Hat Enterprise Linux), 6.6 Telco Extended Update Support (Red Hat Enterprise Linux), 6.4 Advanced Update Support (Red Hat Enterprise Linux), 7.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 6.7 Extended Update Support (Red Hat Enterprise Linux), 12 SP5 (SUSE Linux Enterprise High Performance Computing), 12 SP5 (SUSE Linux Enterprise High Availability), 13.1 (Oracle Communications LSMS), 13.2 (Oracle Communications LSMS), 13.3 (Oracle Communications LSMS), 4 for RHEL7 (Red Hat Virtualization), - (Windows Server 2012 (Server Core installation))",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html\n\n\u0414\u043b\u044f SIMATIC Field PG M4 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V18.01.09:\nhttps://support.industry.siemens.com/cs/de/en/view/109037537\n\n\u0414\u043b\u044f SIMATIC Field PG M5 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V22.01.06:\nhttps://support.industry.siemens.com/cs/de/en/view/109738122\n\n\u0414\u043b\u044f SIMATIC IPC3000 SMART V2 \u0438 SIMATIC IPC347E \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V1.4:\nhttps://support.industry.siemens.com/cs/ww/en/view/109759824\n\n\u0414\u043b\u044f SIMATIC IPC427D, SIMATIC IPC477D, SIMOTION P320-4E \u0438 SIMOTION P320-4S \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V17.0X.14:\nhttps://support.industry.siemens.com/cs/de/en/view/108608500\n\n\u0414\u043b\u044f SIMATIC IPC427E, SIMATIC IPC477E \u0438 SIMATIC IPC477E Pro \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V21.01.09:\nhttps://support.industry.siemens.com/cs/de/en/view/109742593\n\n\u0414\u043b\u044f SIMATIC IPC547E \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS R1.30.0:\nhttps://support.industry.siemens.com/cs/us/en/view/109481624\n\n\u0414\u043b\u044f SIMATIC IPC547G \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS R1.23.0:\nhttps://support.industry.siemens.com/cs/us/en/view/109750349\n\n\u0414\u043b\u044f SIMATIC IPC627D, SIMATIC IPC677D \u0438 SIMATIC IPC827D \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V19.02.11: https://support.industry.siemens.com/cs/ww/de/view/109474954\n\n\u0414\u043b\u044f SIMATIC IPC627C, SIMATIC IPC677C, SINUMERIK PCU 50.5 \u0438 SIMATIC IPC827C \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V15.02.15:\nhttps://support.industry.siemens.com/cs/ww/en/view/48792087\n\n\u0414\u043b\u044f SIMATIC IPC647C \u0438 SIMATIC IPC847C \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V15.01.14:\nhttps://support.industry.siemens.com/cs/ww/en/view/48792076\n\n\u0414\u043b\u044f SIMATIC IPC647D \u0438 SIMATIC IPC847D \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V19.01.14:\nhttps://support.industry.siemens.com/cs/ww/en/view/109037779\n\n\u0414\u043b\u044f SIMATIC ITP1000 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V23.01.04:\nhttps://support.industry.siemens.com/cs/us/en/view/109748173\n\n\u0414\u043b\u044f SIMATIC S7-1500 CPU S7-1518-4 PN/DP MFP \u0438 SIMATIC S7-1500 CPU S7-1518F-4 PN/DP MFP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 BIOS V2.6:\nhttps://support.industry.siemens.com/cs/ww/en/view/109478459\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f RUGGEDCOM APE \u0438 RUGGEDCOM RX1400 VPE:\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 Debian \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0435\u0441\u043b\u0438 \u044d\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0443\u0433\u043b\u0443\u0431\u043b\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b\nhttps://www.siemens.com/industrialsecurity\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb:\n- \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 linux \u0434\u043e 4.15.3-1.astra17 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734\n- \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 xen \u0434\u043e 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734\n- \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 intel-microcode \u0434\u043e 3.20180807a.2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "03.01.2018",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "30.09.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "16.08.2018",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2018-00996",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2018-3646, CISCO-SA-20180814-cpusidechannel, INTEL-SA-00161",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1, Windows 10, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Windows 10 1607, Red Hat Enterprise Linux, Ubuntu, Windows 10 1703, \u0410\u043b\u044c\u0442 \u041b\u0438\u043d\u0443\u043a\u0441 \u0421\u041f\u0422 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21169), Windows Server 2016, Windows RT 8.1, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Fedora, Debian GNU/Linux, OpenSUSE Leap, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows 10 1709, Intel Xeon, Intel Core, Windows Server 1709 (Server Core Installation), Windows 10 1803, Windows Server 1803 (Server Core Installation), Solaris, SIMATIC Field PG M5, SIMATIC IPC427E, SIMATIC IPC477E, SIMATIC IPC547E, SIMATIC IPC547G, SIMATIC IPC627D, SIMATIC IPC647D, SIMATIC IPC677D, SIMATIC IPC827D, SIMATIC IPC847D, SIMATIC ITP1000, SIMATIC IPC427C, SIMATIC IPC477C, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, RUGGEDCOM APE, RUGGEDCOM RX1400 VPE, SIMATIC ET 200SP Open Controller, SIMATIC ET 200 SP Open Controller (F), SIMATIC Field PG M4, SIMATIC IPC3000 SMART V2, SIMATIC IPC347E, SIMATIC IPC427D, SIMATIC IPC477D, SIMATIC IPC477E Pro, SIMATIC IPC627C, SIMATIC IPC647C, SIMATIC IPC677C, SIMATIC IPC827C, SIMATIC IPC847C, SIMATIC S7-1500 CPU S7-1518-4 PN/DP MFP, SIMATIC S7-1500 CPU S7-1518F-4 PN/DP MFP, SIMATIC S7-1500 Software Controller, SIMOTION P320-4E, SIMOTION P320-4S, SINUMERIK 840D sl, SINUMERIK PCU 50.5, SINUMERIK Panels \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 TCU, SINUMERIK TCU 30.3, Suse Linux Enterprise Server, Red Hat Enterprise MRG, Astra Linux Common Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), \u0410\u043b\u044c\u0442 8 \u0421\u041f \u0421\u0435\u0440\u0432\u0435\u0440, \u0410\u043b\u044c\u0442 8 \u0421\u041f \u0420\u0430\u0431\u043e\u0447\u0430\u044f \u0441\u0442\u0430\u043d\u0446\u0438\u044f, SUSE Linux Enterprise Build System Kit, SUSE Linux Enterprise High Availability, Communications EAGLE LNP Application Processor, SIMATIC WinAC RTX 2010 incl. F, SUSE Linux Enterprise High Performance Computing, Oracle Communications LSMS, Red Hat Virtualization, Windows Server 2012 (Server Core installation)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows 7 Service Pack 1 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 32-bit, Microsoft Corp Windows 7 Service Pack 1 - 32-bit, Microsoft Corp Windows 8.1 - 64-bit, Microsoft Corp Windows 8.1 - 32-bit, Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 - , Microsoft Corp Windows Server 2012 R2 - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Red Hat, Inc. Red Hat Enterprise Linux 6 , Red Hat, Inc. Red Hat Enterprise Linux 7 , Canonical Ltd. Ubuntu 16.04 LTS , Microsoft Corp Windows 10 1703 - 32-bit, \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 \u041b\u0438\u043d\u0443\u043a\u0441 \u0421\u041f\u0422 7.0  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21169), Microsoft Corp Windows Server 2016 - , Microsoft Corp Windows RT 8.1 - , Microsoft Corp Windows 10 1703 - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 32-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) - , Microsoft Corp Windows Server 2016 (Server Core installation) - , Fedora Project Fedora 27 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , Novell Inc. OpenSUSE Leap 42.3 , Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows 10 1709 - 64-bit, Microsoft Corp Windows 10 1709 - 32-bit, Microsoft Corp Windows Server 1709 (Server Core Installation) - , Canonical Ltd. Ubuntu 18.04 LTS , Microsoft Corp Windows 10 1803 - 64-bit, Microsoft Corp Windows 10 1803 - 32-bit, Microsoft Corp Windows Server 1803 (Server Core Installation) - , Fedora Project Fedora 28 , Oracle Corp. Solaris 11 , Novell Inc. Suse Linux Enterprise Desktop 12 SP3 , Novell Inc. Suse Linux Enterprise Desktop 12 SP4 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-BCL , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP3 , Intel Corp. - - Intel Core, Intel Corp. - - Intel Xeon, Novell Inc. Suse Linux Enterprise Server 12 SP3 , Novell Inc. Suse Linux Enterprise Server 12 SP4 , Novell Inc. Suse Linux Enterprise Server 11 SP4 , Canonical Ltd. Ubuntu 12.04 ESM , \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f \u0421\u0435\u0440\u0432\u0435\u0440 - , \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f \u0420\u0430\u0431\u043e\u0447\u0430\u044f \u0441\u0442\u0430\u043d\u0446\u0438\u044f - , Novell Inc. OpenSUSE Leap 15.0 , Novell Inc. Suse Linux Enterprise Server 12 SP2-BCL , Novell Inc. Suse Linux Enterprise Server 12 SP2-ESPOS , Novell Inc. Suse Linux Enterprise Server 12-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP3-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP4 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP1-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP2-LTSS , Red Hat, Inc. Red Hat Enterprise Linux 7.4 EUS , Canonical Ltd. Ubuntu 14.04 ESM , Novell Inc. Suse Linux Enterprise Server 12 SP5 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , Novell Inc. Suse Linux Enterprise Server 11 SP3-LTSS , Red Hat, Inc. Red Hat Enterprise Linux 7.2 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 7.2 Telco Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 5 Extended Lifecycle Support , Red Hat, Inc. Red Hat Enterprise Linux 5.9 Long Life , Red Hat, Inc. Red Hat Enterprise Linux 7.3 Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.5 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.6 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.6 Telco Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 6.4 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 6.7 Extended Update Support , Microsoft Corp Windows Server 2012 (Server Core installation) - ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0439 (CWE-208), \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (CWE-524)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d (\u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d) \u043f\u0443\u0442\u0451\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0447\u0435\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u044d\u0448\u0430 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (L1), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0441\u043b\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "\u041a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f Foreshadow -NG (\u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c) \u0438 L1 Terminal Fault (\u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c Intel)",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.foreshadowattack.com/\nhttps://foreshadowattack.eu/foreshadow.pdf\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html\nhttps://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-208, CWE-524",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,3)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,1)"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.