cbcvebase.
CVE-2018-3615
published 2018-08-14

CVE-2018-3615: Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information…

high7.3CVSS 3.1
AVLACLPRLUINSCCHILAN
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Affected

107 ranges· showing 25
VendorProductVersion rangeFixed in
debianintel-microcode< intel-microcode 3.20180703.1 (bookworm)intel-microcode 3.20180703.1 (bookworm)
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i3
intelcore_i5
intelcore_i5
intelcore_i5
intelcore_i5
intelcore_i5
intelcore_i5
intelcore_i5
intelcore_i5

CVSS provenance

nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
osv6.4MEDIUM