CVE-2017-5715 json
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of informatio…
published 2018-01-04 8 y ago modified 2026-06-17 4 mo ago also EUVD-2017-14792
- cvss
- 5.6
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 73.2%
- EPSS 73.2% chance of exploitation in 30 days, percentile 99.4%
- public exploits
- 1
- Exploit-DB
Summary
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Patch / fix
- oracle vm_virtualbox 5.1.32, 5.2.6
- xen Debian 14, Debian 13, Debian 12 4.11.1~pre+1.733450b39b-1
- qemu Debian 14, Debian 13, Debian 12 1:2.12~rc3+dfsg-1
- linux Debian 14, Debian 13, Debian 12 4.15.11-1
- amd64-microcode Debian 14, Debian 13, Debian 12 3.20180515.1
- intel-microcode Debian 14, Debian 13, Debian 12 3.20180425.1
- arm-trusted-firmware Debian 14 2.12.16+dfsg-1
- nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 384.111-1
debian advisories DEBIAN-CVE-2017-5715
- qemu Ubuntu 14.04 LTS 2.0.0+dfsg-2ubuntu1.38
- qemu Ubuntu 16.04 LTS 1:2.5+dfsg-5ubuntu10.20
- qemu Ubuntu 18.04 LTS 1:2.11+dfsg-1ubuntu2
- linux Ubuntu 14.04 LTS 3.13.0-141.190
- linux Ubuntu 16.04 LTS 4.4.0-112.135
- firefox Ubuntu 14.04 LTS 57.0.4+build1-0ubuntu0.14.04.1
- firefox Ubuntu 16.04 LTS 57.0.4+build1-0ubuntu0.16.04.1
- firefox Ubuntu 18.04 LTS 59.0.1+build1-0ubuntu1
ubuntu advisories UBUNTU-CVE-2017-5715
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- linux-firmware RHEL 7 20180220-62.git6d51311.el7
- iwl100-firmware RHEL 7 39.31.5.1-62.el7
- iwl105-firmware RHEL 7 18.168.6.1-62.el7
- iwl135-firmware RHEL 7 18.168.6.1-62.el7
- iwl1000-firmware RHEL 7 1:39.31.5.1-62.el7
- iwl2000-firmware RHEL 7 18.168.6.1-62.el7
- iwl2030-firmware RHEL 7 18.168.6.1-62.el7
- iwl3160-firmware RHEL 7 22.0.7.0-62.el7
red hat advisories RHEA-2018:0874RHEA-2018:0704RHEA-2018:0690RHBA-2018:0831RHSA-2018:1967RHSA-2018:1062
- drbd SLE High Availability Extension 11 SP4 8.4.4-0.27.6.1
- gfs2 SLE Real Time 11 SP4, SLE High Availability Extension 11 SP4 2-0.24.6.1
- ofed SLES for SAP 11 SP4, SLES 11 SP4, SLE Software Development Kit 11 SP4 +1 more 1.5.4.1-22.6.1
- ocfs2 SLE Real Time 11 SP4, SLE High Availability Extension 11 SP4 1.6-0.28.9.1
- drbd-kmp SLE Real Time 11 SP4, SLE High Availability Extension 11 SP4 8.4.4-0.27.6.1
- oracleasm SLES for SAP 11 SP4, SLES 11 SP4 2.0.5-7.44.2.1
- iscsitarget SLES for SAP 11 SP4, SLES 11 SP4, SLE Real Time 11 SP4 1.4.20-0.43.7.1
- cluster-network SLE Real Time 11 SP4, SLE High Availability Extension 11 SP4 1.4-2.32.6.1
suse advisories SUSE-SU-2019:13999-1SUSE-SU-2018:2631-2SUSE-SU-2018:1699-2SUSE-SU-2018:1571-2SUSE-SU-2018:2631-1SUSE-SU-2018:2528-1
- spectre-meltdown-checker openSUSE Tumbleweed 26.36.0602723-1.1
- kernel-firmware-all openSUSE Tumbleweed 20250206-1.1
- kernel-firmware-amdgpu openSUSE Tumbleweed 20250206-1.1
- kernel-firmware-ath10k openSUSE Tumbleweed 20250206-1.1
- kernel-firmware-ath11k openSUSE Tumbleweed 20250206-1.1
- kernel-firmware-ath12k openSUSE Tumbleweed 20250206-1.1
- kernel-firmware-atheros openSUSE Tumbleweed 20250206-1.1
- kernel-firmware-bluetooth openSUSE Tumbleweed 20250208-1.1
opensuse advisories openSUSE-SU-2026:11242-1openSUSE-SU-2025:14804-1openSUSE-SU-2025:14769-1openSUSE-SU-2025:14770-1openSUSE-SU-2025:14771-1openSUSE-SU-2025:14772-1
- kernel AlmaLinux 8 4.18.0-372.9.1.el8
- perf AlmaLinux 8 4.18.0-372.9.1.el8
- bpftool AlmaLinux 8 4.18.0-372.9.1.el8
- kernel-core AlmaLinux 8 4.18.0-372.9.1.el8
- kernel-tools AlmaLinux 8 4.18.0-372.9.1.el8
- python3-perf AlmaLinux 8 4.18.0-372.9.1.el8
- kernel-modules AlmaLinux 8 4.18.0-372.9.1.el8
- kernel-debug-core AlmaLinux 8 4.18.0-372.9.1.el8
almalinux advisories ALSA-2022:1988
- xen Alpine 3.5 4.7.3-r4
- xen Alpine 3.6 4.8.2-r4
alpine advisories ALPINE-CVE-2017-5715
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2017-5715 updated cvss 5.6
hw: cpu: speculative execution branch target injection
-
Red Hat Enterprise Linux 5 microcode_ctl Red Hat Enterprise Linux 6 libvirt, qemu-img, qemu-kvm, microcode_ctl, qemu-kvm-rhev, libvirt-client, +5 more Red Hat Enterprise Linux 7 qemu-img, qemu-kvm, libcacard, qemu-kvm-tools, libcacard-tools, qemu-kvm-common, +1 more Red Hat Enterprise Linux OpenStack Platform 6 (Juno) qemu-kvm-rhev Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) qemu-img-rhev, qemu-kvm-rhev, libcacard-rhev, qemu-kvm-tools-rhev, libcacard-devel-rhev, libcacard-tools-rhev, +1 more Red Hat Enterprise Virtualization 3 vdsm, rhev-hypervisor, rhev-hypervisor-ng, rhevm-setup-pluginsaffected: no fix available
+6 more productsfewer
Red Hat OpenStack Platform 8 (Liberty) qemu-img-rhev, qemu-kvm-rhev, libcacard-rhev, qemu-kvm-tools-rhev, libcacard-devel-rhev, libcacard-tools-rhev, +1 more Red Hat OpenStack Platform 9 (Mitaka) qemu-img-rhev, qemu-kvm-rhev, libcacard-rhev, qemu-kvm-tools-rhev, libcacard-devel-rhev, libcacard-tools-rhev, +1 more Red Hat OpenStack Platform 10 (Newton) qemu-img-rhev, qemu-kvm-rhev, qemu-kvm-tools-rhev, qemu-kvm-common-rhev Red Hat OpenStack Platform 11 (Ocata) qemu-kvm-rhev Red Hat OpenStack Platform 12 (Pike) qemu-img-rhev, qemu-kvm-rhev, qemu-kvm-tools-rhev, qemu-kvm-common-rhev Red Hat Virtualization 4 vdsm, vdsm-api, vdsm-cli, vdsm-http, vdsm-infra, vdsm-client, +23 more -
Red Hat CloudForms Management Engine 4.5fixed: vendor fix RHSA-2018:0091
-
Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-862.el7, libvirt 3.9.0-14.el7, kernel 3.10.0-862.el7, dracut 033-502.el7_4.1, microcode_ctl 2.1-29.el7, libvirt-libs 3.9.0-14.el7, +53 more Red Hat Enterprise Linux Client Optional (v. 7) libvirt-nss 3.9.0-14.el7, libvirt-admin 3.9.0-14.el7, dracut-caps 033-502.el7_4.1, dracut-tools 033-502.el7_4.1, libvirt-daemon-lxc 3.9.0-14.el7, libvirt-login-shell 3.9.0-14.el7, +2 more Red Hat Enterprise Linux ComputeNode (v. 7) perf 3.10.0-862.el7, libvirt 3.9.0-14.el7, kernel 3.10.0-862.el7, dracut 033-502.el7_4.1, microcode_ctl 2.1-29.el7, libvirt-libs 3.9.0-14.el7, +29 morefixed: vendor fix RHBA-2018:0042
-
Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) perf 3.10.0-514.48.1.el7, kernel 3.10.0-514.48.1.el7, python-perf 3.10.0-514.48.1.el7, kernel-tools 3.10.0-514.48.1.el7, kernel-tools-libs 3.10.0-514.48.1.el7, kernel-abi-whitelists 3.10.0-514.48.1.el7, +1 morefixed: vendor fix RHSA-2018:1129
-
Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) perf 3.10.0-693.25.2.el7, kernel 3.10.0-693.25.2.el7, python-perf 3.10.0-693.25.2.el7, kernel-tools 3.10.0-693.25.2.el7, kernel-tools-libs 3.10.0-693.25.2.el7, kernel-abi-whitelists 3.10.0-693.25.2.el7, +1 morefixed: vendor fix RHSA-2018:1130
-
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt 3.9.0-14.el7, libvirt-nss 3.9.0-14.el7, libvirt-admin 3.9.0-14.el7, qemu-img 1.5.3-141.el7_4.6, qemu-kvm 1.5.3-141.el7_4.6, dracut-caps 033-502.el7_4.1, +27 morefixed: vendor fix RHBA-2018:0042
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) qemu-img 1.5.3-126.el7_3.13, qemu-kvm 1.5.3-126.el7_3.13, qemu-kvm-tools 1.5.3-126.el7_3.13, qemu-kvm-common 1.5.3-126.el7_3.13, kernel-debuginfo-common-x86_64 3.10.0-514.48.1.el7fixed: vendor fix RHSA-2018:1129
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-debuginfo-common-x86_64 3.10.0-693.25.2.el7fixed: vendor fix RHSA-2018:1130
show 17 moreshow fewer
-
Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-696.28.1.el6, kernel 2.6.32-696.28.1.el6, kernel-firmware 2.6.32-696.28.1.el6, kernel-abi-whitelists 2.6.32-696.28.1.el6, kernel-debuginfo-common-i686 2.6.32-696.28.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.28.1.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf 2.6.32-696.28.1.el6, kernel-debuginfo-common-i686 2.6.32-696.28.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.28.1.el6fixed: vendor fix RHSA-2018:1319
-
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libvirt 3.9.0-14.el7, dracut 033-502.el7_4.1, perf 4.14.0-49.8.1.el7a, kernel 4.14.0-49.8.1.el7a, libvirt-libs 3.9.0-14.el7, qemu-img-ma 2.10.0-21.el7, +55 more Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libvirt 3.9.0-14.el7, libvirt-nss 3.9.0-14.el7, libvirt-libs 3.9.0-14.el7, libvirt-admin 3.9.0-14.el7, dracut-caps 033-502.el7_4.1, libvirt-client 3.9.0-14.el7, +24 morefixed: vendor fix RHBA-2018:0042
-
Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-693.11.1.rt56.639.el7, kernel-rt-kvm 3.10.0-693.11.1.rt56.639.el7, kernel-rt-trace 3.10.0-693.11.1.rt56.639.el7, kernel-rt-debug-kvm 3.10.0-693.11.1.rt56.639.el7, kernel-rt-trace-kvm 3.10.0-693.11.1.rt56.639.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-693.11.1.rt56.639.el7fixed: vendor fix RHSA-2018:0016
-
Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-696.28.1.el6, kernel 2.6.32-696.28.1.el6, kernel-firmware 2.6.32-696.28.1.el6, kernel-abi-whitelists 2.6.32-696.28.1.el6, kernel-debuginfo-common-i686 2.6.32-696.28.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.28.1.el6fixed: vendor fix RHSA-2018:1319
-
Red Hat Enterprise Linux HPC Node EUS (v. 6.7) perf 2.6.32-573.55.2.el6, kernel 2.6.32-573.55.2.el6, kernel-firmware 2.6.32-573.55.2.el6, kernel-abi-whitelists 2.6.32-573.55.2.el6, kernel-debuginfo-common-i686 2.6.32-573.55.2.el6, kernel-debuginfo-common-x86_64 2.6.32-573.55.2.el6fixed: vendor fix RHSA-2018:1346
-
Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf 2.6.32-696.28.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.28.1.el6fixed: vendor fix RHSA-2018:1319
-
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) python-perf 2.6.32-573.55.2.el6, kernel-debuginfo-common-x86_64 2.6.32-573.55.2.el6fixed: vendor fix RHSA-2018:1346
-
Red Hat Enterprise Linux Long Life (v. 5.9 server) kernel 2.6.18-348.39.1.el5, kernel-PAE 2.6.18-348.39.1.el5, kernel-xen 2.6.18-348.39.1.el5, kernel-debuginfo-common 2.6.18-348.39.1.el5fixed: vendor fix RHSA-2018:1252
-
Red Hat Enterprise Linux Realtime (v. 7) kernel-rt 3.10.0-693.11.1.rt56.639.el7, kernel-rt-trace 3.10.0-693.11.1.rt56.639.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-693.11.1.rt56.639.el7fixed: vendor fix RHSA-2018:0016
-
Red Hat Enterprise Linux Server (v. 5 ELS) kernel 2.6.18-430.el5, kernel-PAE 2.6.18-430.el5, kernel-xen 2.6.18-430.el5, kernel-kdump 2.6.18-430.el5, kernel-debuginfo-common 2.6.18-430.el5fixed: vendor fix RHSA-2018:1196
-
Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-696.28.1.el6, kernel 2.6.32-696.28.1.el6, kernel-kdump 2.6.32-696.28.1.el6, kernel-firmware 2.6.32-696.28.1.el6, kernel-bootwrapper 2.6.32-696.28.1.el6, kernel-abi-whitelists 2.6.32-696.28.1.el6, +4 morefixed: vendor fix RHSA-2018:1319
-
Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-862.el7, libvirt 3.9.0-14.el7, kernel 3.10.0-862.el7, dracut 033-502.el7_4.1, microcode_ctl 2.1-29.el7, libvirt-libs 3.9.0-14.el7, +62 morefixed: vendor fix RHBA-2018:0042
-
Red Hat Enterprise Linux Server AUS (v. 6.2) perf 2.6.32-220.76.2.el6, kernel 2.6.32-220.76.2.el6, kernel-firmware 2.6.32-220.76.2.el6, kernel-debuginfo-common-x86_64 2.6.32-220.76.2.el6fixed: vendor fix RHSA-2018:0020
-
Red Hat Enterprise Linux Server AUS (v. 6.4) perf 2.6.32-358.84.2.el6, kernel 2.6.32-358.84.2.el6, kernel-firmware 2.6.32-358.84.2.el6, kernel-debuginfo-common-x86_64 2.6.32-358.84.2.el6fixed: vendor fix RHSA-2018:0018
-
Red Hat Enterprise Linux Server AUS (v. 6.5) perf 2.6.32-431.85.2.el6, kernel 2.6.32-431.85.2.el6, kernel-firmware 2.6.32-431.85.2.el6, kernel-abi-whitelists 2.6.32-431.85.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.85.2.el6fixed: vendor fix RHSA-2018:0022
-
Red Hat Enterprise Linux Server AUS (v. 6.6) perf 2.6.32-504.64.4.el6, kernel 2.6.32-504.64.4.el6, kernel-firmware 2.6.32-504.64.4.el6, kernel-abi-whitelists 2.6.32-504.64.4.el6, kernel-debuginfo-common-x86_64 2.6.32-504.64.4.el6fixed: vendor fix RHSA-2018:0017
-
Red Hat Enterprise Linux Server AUS (v. 7.2) perf 3.10.0-327.66.1.el7, kernel 3.10.0-327.66.1.el7, python-perf 3.10.0-327.66.1.el7, kernel-tools 3.10.0-327.66.1.el7, kernel-tools-libs 3.10.0-327.66.1.el7, kernel-abi-whitelists 3.10.0-327.66.1.el7, +1 morefixed: vendor fix RHSA-2018:1216
25 more fixed, 2 more not affected in the full advisory
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-23-257-04 updated cvss 5.9
Siemens RUGGEDCOM APE1808 Products
-
Siemens RUGGEDCOM APE1808 ADM (6GK6015-0AL20-0GL0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 ADM CC (6GK6015-0AL20-0GL1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 CKP (6GK6015-0AL20-0GK0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 CKP CC (6GK6015-0AL20-0GK1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 CLOUDCONNECT (6GK6015-0AL20-0GM0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 CLOUDCONNECT CC (6GK6015-0AL20-0GM1) <BIOS_V1.0.212Naffected: fixed in V1.0.212N support.industry.siemens.com
+16 more productsfewer
Siemens RUGGEDCOM APE1808 ELAN (6GK6015-0AL20-0GP0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 ELAN CC (6GK6015-0AL20-0GP1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 SAM-L (6GK6015-0AL20-0GN0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808 SAM-L CC (6GK6015-0AL20-0GN1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-P (6GK6015-0AL20-1AA0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-P CC (6GK6015-0AL20-1AA1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-S1 (6GK6015-0AL20-1AB0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-S1 CC (6GK6015-0AL20-1AB1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-S3 (6GK6015-0AL20-1AD0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-S3 CC (6GK6015-0AL20-1AD1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-S5 (6GK6015-0AL20-1AF0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808CLA-S5 CC (6GK6015-0AL20-1AF1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808W10 (6GK6015-0AL20-0GJ0) <BIOS_V1.0.212N Siemens RUGGEDCOM APE1808W10 CC (6GK6015-0AL20-0GJ1) <BIOS_V1.0.212N
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
Timeline
- First public exploit (EDB-43427)
- Published
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 18 mo ago
Exploit prediction
73.25% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-43427 Multiple CPUs - 'Spectre' Information Disclosure local, 2018-01-03
- packetstormsecurity.com http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 5.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
| NVD | 3.1 | 5.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
| CNA | 3.1 | 5.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
| NVD | 2.0 | 1.9 | AV:L/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- Intel Corporation Microprocessors with Speculative Execution
Classification
- Weakness
-
- CWE-203 Observable Discrepancy
References
-
portal.msrc.microsoft.com
/en-US/security-guidance/advisory/ADV180002
patch, third-party-advisory, vendor-advisory
-
exploit-db.com
/exploits/43427/
exploit, third-party-advisory, vdb-entry
-
packetstormsecurity.com
/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html
exploit, third-party-advisory, vdb-entry
-
usn.ubuntu.com
/3560-1/
vendor-advisory
-
debian.org
/security/2018/dsa-4187
vendor-advisory
-
usn.ubuntu.com
/3542-2/
vendor-advisory
-
security.gentoo.org
/glsa/201810-06
vendor-advisory
-
usn.ubuntu.com
/3540-2/
vendor-advisory
-
usn.ubuntu.com
/3597-1/
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00008.html
vendor-advisory, broken-link
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00007.html
vendor-advisory, broken-link
-
debian.org
/security/2018/dsa-4213
vendor-advisory
-
debian.org
/security/2018/dsa-4120
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00009.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3580-1/
vendor-advisory
-
usn.ubuntu.com
/3531-3/
vendor-advisory
-
usn.ubuntu.com
/3620-2/
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00014.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3582-1/
vendor-advisory
-
debian.org
/security/2018/dsa-4188
vendor-advisory
-
access.redhat.com
/errata/RHSA-2018:0292
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00012.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3594-1/
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00005.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3690-1/
vendor-advisory
-
usn.ubuntu.com
/3549-1/
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00003.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3531-1/
vendor-advisory
-
security.freebsd.org
/advisories/FreeBSD-SA-18:03.speculative_execution.asc
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00002.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3581-1/
vendor-advisory
-
usn.ubuntu.com
/3597-2/
vendor-advisory
-
usn.ubuntu.com
/3581-2/
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00006.html
vendor-advisory, broken-link
-
tools.cisco.com
/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel
vendor-advisory
-
usn.ubuntu.com
/usn/usn-3516-1/
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00013.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3541-2/
vendor-advisory
-
usn.ubuntu.com
/3777-3/
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00016.html
vendor-advisory, broken-link
-
lists.opensuse.org
/opensuse-security-announce/2018-01/msg00004.html
vendor-advisory, broken-link
-
usn.ubuntu.com
/3561-1/
vendor-advisory
-
security-center.intel.com
/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr
vendor-advisory
-
nvidia.custhelp.com
/app/answers/detail/a_id/4609
third-party-advisory
-
nvidia.custhelp.com
/app/answers/detail/a_id/4611
third-party-advisory
-
nvidia.custhelp.com
/app/answers/detail/a_id/4613
third-party-advisory
-
nvidia.custhelp.com
/app/answers/detail/a_id/4614
third-party-advisory
-
packetstormsecurity.com
/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html
third-party-advisory, vdb-entry
-
arubanetworks.com
/assets/alert/ARUBA-PSA-2018-001.txt
third-party-advisory
-
arubanetworks.com
/assets/alert/ARUBA-PSA-2019-003.txt
third-party-advisory
-
kb.cert.org
/vuls/id/584653
third-party-advisory, us-government-resource
-
oracle.com
/technetwork/security-advisory/cpujan2018-3236628.html
third-party-advisory
-
oracle.com
/technetwork/security-advisory/cpujul2018-4258247.html
third-party-advisory
-
oracle.com
/technetwork/security-advisory/cpuoct2018-4428296.html
third-party-advisory
-
securityfocus.com
/bid/102376
third-party-advisory, vdb-entry
-
securitytracker.com
/id/1040071
third-party-advisory, vdb-entry
-
xenbits.xen.org
/xsa/advisory-254.html
third-party-advisory
-
access.redhat.com
/security/vulnerabilities/speculativeexecution
third-party-advisory
-
aws.amazon.com
/de/security/security-bulletins/AWS-2018-013/
third-party-advisory
-
blog.mozilla.org
/security/2018/01/03/mitigations-landing-new-class-timing-attack/
third-party-advisory
Sources
- CVE List CVE-2017-5715
- NVD CVE-2017-5715
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.