CVE-2018-3665

MEDIUM

Intel Core i3 - Unauthorized Data Exposure via Lazy FP State Restore Side Channel

Title source: llm
STIX 2.1

Description

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

References (25)

Core 25
Core References
Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2164
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3696-1/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041125
Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:1944
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:1852
Third Party Advisory vendor-advisory x_refsource_freebsd
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.asc
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041124
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2165
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4232
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3698-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3696-2/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/104460
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3698-2/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1170
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1190
Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujul2020.html
Third Party Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/4787
Third Party Advisory x_refsource_confirm
https://www.synology.com/support/security/Synology_SA_18_31
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20181016-0001/
Third Party Advisory x_refsource_confirm
https://support.citrix.com/article/CTX235745
Third Party Advisory x_refsource_confirm
https://security.paloaltonetworks.com/CVE-2018-3665

Scores

CVSS v3 5.6
EPSS 0.0126
EPSS Percentile 79.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (50)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
citrix/xenserver 7.0
citrix/xenserver 7.1
citrix/xenserver 7.3
citrix/xenserver 7.4
citrix/xenserver 7.5
debian/debian_linux 8.0
debian/debian_linux 9.0
... and 40 more
Published Jun 21, 2018
Tracked Since Feb 18, 2026