CVE-2018-3620
- State
- Published
- Severity
- 5.6 Medium
- Published
- Aug 14, 2018
- Updated
- May 29, 2026
- Reserved
- Dec 28, 2017
Description
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.6 Medium | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-203 Observable Discrepancy
Affected Products
| Product | Versions |
|---|---|
MultipleIntel Corporation |
|
References
- VU#982149third-party-advisory
- 1041451vdb-entry
- GLSA-201810-06vendor-advisory
- USN-3741-2vendor-advisory
- RHSA-2018:2393vendor-advisory
- USN-3823-1vendor-advisory
- RHSA-2018:2389vendor-advisory
- RHSA-2018:2390vendor-advisory
- RHSA-2018:2403vendor-advisory
- 105080vdb-entry
- RHSA-2018:2395vendor-advisory
- RHSA-2018:2384vendor-advisory
- USN-3740-2vendor-advisory
- FreeBSD-SA-18:09vendor-advisory
- DSA-4274vendor-advisory
- FEDORA-2018-1c80fea1cdvendor-advisory
- RHSA-2018:2388vendor-advisory
- USN-3741-1vendor-advisory
- RHSA-2018:2603vendor-advisory
- RHSA-2018:2402vendor-advisory
- 20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018vendor-advisory
- FEDORA-2018-f8cba144aevendor-advisory
- USN-3742-2vendor-advisory
- RHSA-2018:2404vendor-advisory
- USN-3740-1vendor-advisory
- RHSA-2018:2391vendor-advisory
- RHSA-2018:2396vendor-advisory
- DSA-4279vendor-advisory
- RHSA-2018:2392vendor-advisory
- [debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security updatemailing-list
- USN-3742-1vendor-advisory
- RHSA-2018:2602vendor-advisory
- [debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security updatemailing-list
- RHSA-2018:2394vendor-advisory
- RHSA-2018:2387vendor-advisory
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- http://xenbits.xen.org/xsa/advisory-273.html
- https://foreshadowattack.eu/
- http://www.vmware.com/security/advisories/VMSA-2018-0021.html
- https://security.netapp.com/advisory/ntap-20180815-0001/
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018
- https://support.f5.com/csp/article/K95275140
- http://support.lenovo.com/us/en/solutions/LEN-24163
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
- https://www.synology.com/support/security/Synology_SA_18_45
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0009
- https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03874en_us
- https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.