Home > Vulnerability Database > CVE-2018-3640

Mend.io Vulnerability Database

CVE-2018-3640

Date: May 22, 2018

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

Severity Score

5.6

Related Resources (24)

Url: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005

Url: https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability

Url: https://www.us-cert.gov/ncas/alerts/TA18-141A

Url: https://security.netapp.com/advisory/ntap-20180521-0001/

Url: https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf

Url: https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006

Url: http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html

Url: https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html

Url: https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html

Url: https://www.synology.com/support/security/Synology_SA_18_23

Url: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel

Url: https://www.kb.cert.org/vuls/id/180049

Url: https://usn.ubuntu.com/3756-1/

Url: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html

Url: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us

Url: https://www.debian.org/security/2018/dsa-4273

Url: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013

Url: https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

Url: http://support.lenovo.com/us/en/solutions/LEN-22133

Url: http://www.securitytracker.com/id/1042004

Url: http://www.securityfocus.com/bid/104228

Url: http://www.securitytracker.com/id/1040949

Url: https://nvd.nist.gov/vuln/detail/CVE-2018-3640

Url: https://www.mend.io/vulnerability-database/CVE-2018-3640

Severity Score

5.6

Weakness Type (CWE)

Observable Discrepancy

CWE-203

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	4.7
Access Vector (AV):	LOCAL
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2018-3640

Date: May 22, 2018

Severity Score

Related Resources (24)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?