CNVD-2018-13391

Vulnerability from cnvd - Published: 2018-07-18
VLAI
Title
多款CPU Hardware信息泄露漏洞
Description
CPU hardware是运行在中央处理器中用于管理和控制CPU的固件。 多款CPU Hardware信息泄露漏洞。该漏洞产生的原因是CPU高速缓存处理存在竞争条件。本地攻击者可以利用漏洞通过侧信道分析获取敏感信息。
Severity
中
Patch Name
多款CPU Hardware信息泄露漏洞的补丁
Patch Description
CPU hardware是运行在中央处理器中用于管理和控制CPU的固件。 多款CPU Hardware信息泄露漏洞。该漏洞产生的原因是CPU高速缓存处理存在竞争条件。本地攻击者可以利用漏洞通过侧信道分析获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html

Reference
https://securitytracker.com/id/1040949
Impacted products
Name
['ARM Cortex A57', 'Intel 5th generation Core Processors 无', 'ARM Cortex A72', 'Intel 6th generation Core processors 0', 'Intel 5th generation Core processors 0', 'Intel 4th generation Core processors 0', 'Intel 3rd generation Core processors 0', 'Intel 2nd generation Core processors 0', 'Intel 8th generation Core processors 0', 'Intel 7th generation Core processors 0', 'Intel Atom Processor A Series 0', 'Intel Atom Processor C Series 0', 'Intel Atom Processor E Series 0', 'Intel Atom Processor T Series 0', 'Intel Atom Processor X Series 0', 'Intel Atom Processor Z Series 0', 'Intel Core X-series Processor Family for Intel X99 platforms 0', 'Intel Celeron Processor J Series 0', 'Intel Celeron Processor N Series 0', 'Intel Core M processor family 0', 'Intel Core X-series Processor Family for Intel X299 platforms 0', 'Intel Pentium Processor N Series 0', 'Intel Pentium Processor Silver Series 0', 'Intel Xeon processor 3400 series 0', 'Intel Xeon processor 3600 series 0', 'Intel Xeon processor 5500 series 0', 'Intel Xeon processor 5600 series 0', 'Intel Xeon processor 7500 series 0', 'Intel Xeon processor 6500 series 0', 'Intel Pentium Processor J Series 0', 'Intel Xeon Processor E3 Family 0', 'Intel Xeon Processor E3 v2 Family 0', 'Intel Xeon Processor E3 v3 Family 0', 'Intel Xeon Processor E3 v4 Family 0', 'Intel Xeon Processor E3 v5 Family 0', 'Intel Xeon Processor E3 v6 Family 0', 'Intel Xeon Processor E5 Family 0', 'Intel Xeon Processor E5 v2 Family 0', 'Intel Xeon Processor E5 v3 Family 0', 'Intel Xeon Processor E5 v4 Family 0', 'Intel Xeon Processor E7 Family 0', 'Intel Xeon Processor E7 v2 Family 0', 'Intel Xeon Processor E7 v3 Family 0', 'Intel Xeon Processor E7 v4 Family 0']
Show details on source website
To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "104232"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-3639"
    }
  },
  "description": "CPU hardware\u662f\u8fd0\u884c\u5728\u4e2d\u592e\u5904\u7406\u5668\u4e2d\u7528\u4e8e\u7ba1\u7406\u548c\u63a7\u5236CPU\u7684\u56fa\u4ef6\u3002\r\n\r\n\u591a\u6b3eCPU Hardware\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662fCPU\u9ad8\u901f\u7f13\u5b58\u5904\u7406\u5b58\u5728\u7ade\u4e89\u6761\u4ef6\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u901a\u8fc7\u4fa7\u4fe1\u9053\u5206\u6790\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "Ken Johnson of Microsoft Corporation and Jann Horn of Google Project Zero",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-13391",
  "openTime": "2018-07-18",
  "patchDescription": "CPU hardware\u662f\u8fd0\u884c\u5728\u4e2d\u592e\u5904\u7406\u5668\u4e2d\u7528\u4e8e\u7ba1\u7406\u548c\u63a7\u5236CPU\u7684\u56fa\u4ef6\u3002\r\n\r\n\u591a\u6b3eCPU Hardware\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662fCPU\u9ad8\u901f\u7f13\u5b58\u5904\u7406\u5b58\u5728\u7ade\u4e89\u6761\u4ef6\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u901a\u8fc7\u4fa7\u4fe1\u9053\u5206\u6790\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eCPU Hardware\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "ARM Cortex A57",
      "Intel 5th generation Core Processors \u65e0",
      "ARM Cortex A72",
      "Intel 6th generation Core processors 0",
      "Intel 5th generation Core processors 0",
      "Intel 4th generation Core processors 0",
      "Intel 3rd generation Core processors 0",
      "Intel 2nd generation Core processors 0",
      "Intel 8th generation Core processors 0",
      "Intel 7th generation Core processors 0",
      "Intel Atom Processor A Series 0",
      "Intel Atom Processor C Series 0",
      "Intel Atom Processor E Series 0",
      "Intel Atom Processor T Series 0",
      "Intel Atom Processor X Series 0",
      "Intel Atom Processor Z Series 0",
      "Intel Core X-series Processor Family for Intel X99 platforms 0",
      "Intel Celeron Processor J Series 0",
      "Intel Celeron Processor N Series 0",
      "Intel Core M processor family 0",
      "Intel Core X-series Processor Family for Intel X299 platforms 0",
      "Intel Pentium Processor N Series 0",
      "Intel Pentium Processor Silver Series 0",
      "Intel Xeon processor 3400 series 0",
      "Intel Xeon processor 3600 series 0",
      "Intel Xeon processor 5500 series 0",
      "Intel Xeon processor 5600 series 0",
      "Intel Xeon processor 7500 series 0",
      "Intel Xeon processor 6500 series 0",
      "Intel Pentium Processor J Series 0",
      "Intel Xeon Processor E3 Family 0",
      "Intel Xeon Processor E3 v2 Family 0",
      "Intel Xeon Processor E3 v3 Family 0",
      "Intel Xeon Processor E3 v4 Family 0",
      "Intel Xeon Processor E3 v5 Family 0",
      "Intel Xeon Processor E3 v6 Family 0",
      "Intel Xeon Processor E5 Family 0",
      "Intel Xeon Processor E5 v2 Family 0",
      "Intel Xeon Processor E5 v3 Family 0",
      "Intel Xeon Processor E5 v4 Family 0",
      "Intel Xeon Processor E7 Family 0",
      "Intel Xeon Processor E7 v2 Family 0",
      "Intel Xeon Processor E7 v3 Family 0",
      "Intel Xeon Processor E7 v4 Family 0"
    ]
  },
  "referenceLink": "https://securitytracker.com/id/1040949",
  "serverity": "\u4e2d",
  "submitTime": "2018-05-22",
  "title": "\u591a\u6b3eCPU Hardware\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.