Vulnerability Description
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I3 | 6006u |
| Intel | Core I5 | 650 |
| Intel | Core I7 | 610e |
| Intel | Xeon E3 | 1515m_v5 |
| Intel | Xeon E3 1220 V5 | - |
| Intel | Xeon E3 1225 V5 | - |
| Intel | Xeon E3 1230 V5 | - |
| Intel | Xeon E3 1235L V5 | - |
| Intel | Xeon E3 1240 V5 | - |
| Intel | Xeon E3 1240L V5 | - |
| Intel | Xeon E3 1245 V5 | - |
| Intel | Xeon E3 1260L V5 | - |
| Intel | Xeon E3 1268L V5 | - |
| Intel | Xeon E3 1270 V5 | - |
| Intel | Xeon E3 1275 V5 | - |
| Intel | Xeon E3 1280 V5 | - |
| Intel | Xeon E3 1505L V5 | - |
| Intel | Xeon E3 1505M V5 | - |
| Intel | Xeon E3 1220 V6 | - |
| Intel | Xeon E3 1225 V6 | - |
Related Weaknesses (CWE)
References
- http://support.lenovo.com/us/en/solutions/LEN-24163Third Party Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-enThird Party Advisory
- http://www.securityfocus.com/bid/105080Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041451Third Party AdvisoryVDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://foreshadowattack.eu/Technical DescriptionThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008Third Party Advisory
- https://security.netapp.com/advisory/ntap-20180815-0001/Third Party Advisory
- https://software.intel.com/security-software-guidance/software-guidance/l1-termiMitigationVendor Advisory
- https://support.f5.com/csp/article/K35558453Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpeThird Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.Vendor Advisory
FAQ
What is CVE-2018-3615?
CVE-2018-3615 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an encl...
How severe is CVE-2018-3615?
CVE-2018-3615 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-3615?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Core I3, Intel Core I5, Intel Core I7, Intel Xeon E3, Intel Xeon E3 1220 V5.