Skip to content
Fencer Intel
medium 5.6

CVE-2017-5753 json

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an a…

published 2018-01-04 8 y ago modified 2026-06-17 4 mo ago also EUVD-2017-14830

cvss
5.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
93.8%
EPSS 93.8% chance of exploitation in 30 days, percentile 99.8%
public exploits
1
Exploit-DB

Summary

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Patch / fix

  • synology router_manager 1.1.7-6941-1
  • synology virtual_machine_manager 6.2-23739
  • vmware fusion 8.5.9
  • vmware workstation 12.5.8
  • synology diskstation_manager 6.2.2-24922
  • siemens simatic_itc1500_firmware 3.1
  • siemens simatic_itc1500_pro_firmware 3.1
  • siemens simatic_itc1900_firmware 3.1
  • siemens simatic_itc1900_pro_firmware 3.1
  • siemens simatic_itc2200_firmware 3.1
  • siemens simatic_itc2200_pro_firmware 3.1
  • siemens simatic_winac_rtx_(f)_2010_firmware 2010
  • linux Debian 14, Debian 13, Debian 12 4.15.11-1
  • nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 384.111-1

debian advisories DEBIAN-CVE-2017-5753

  • linux Ubuntu 14.04 LTS 3.13.0-157.207
  • linux Ubuntu 16.04 LTS 4.4.0-112.135
  • firefox Ubuntu 14.04 LTS 57.0.4+build1-0ubuntu0.14.04.1
  • firefox Ubuntu 16.04 LTS 57.0.4+build1-0ubuntu0.16.04.1
  • firefox Ubuntu 18.04 LTS 59.0.1+build1-0ubuntu1
  • linux-aws Ubuntu 14.04 LTS 4.4.0-1011.11
  • linux-aws Ubuntu 16.04 LTS 4.4.0-1049.58
  • linux-gcp Ubuntu 16.04 LTS 4.15.0-1014.14~16.04.1

ubuntu advisories UBUNTU-CVE-2017-5753

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel-alt RHEL 7 4.14.0-49.el7a
  • perf RHEL 7 4.14.0-49.el7a
  • kernel RHEL 7 4.14.0-49.el7a
  • python-perf RHEL 7 4.14.0-49.el7a
  • kernel-kdump RHEL 7 4.14.0-49.el7a
  • kernel-tools RHEL 7 4.14.0-49.el7a
  • kernel-tools-libs RHEL 7 4.14.0-49.el7a
  • kernel-bootwrapper RHEL 7 4.14.0-49.el7a

red hat advisories RHSA-2018:0654RHSA-2018:0151RHSA-2018:0512RHSA-2018:0464RHSA-2018:0496RHSA-2018:0292

  • kernel-64kb SLES 15 SP3-LTSS, SLE High Performance Computing 15 SP3-LTSS, Enterprise Storage 7.1 5.3.18-150300.59.201.1
  • kernel-syms SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE High Performance Computing 15 SP3-LTSS +1 more 5.3.18-150300.59.201.1
  • kernel-source SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE High Performance Computing 15 SP3-LTSS +1 more 5.3.18-150300.59.201.1
  • kernel-default SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Micro 5.2 +5 more 5.3.18-150300.59.201.1
  • kernel-preempt SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE High Performance Computing 15 SP3-LTSS +1 more 5.3.18-150300.59.201.1
  • kernel-obs-build SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE High Performance Computing 15 SP3-LTSS +1 more 5.3.18-150300.59.201.1
  • kernel-default-base SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Micro 5.2 +3 more 5.3.18-150300.59.201.1.150300.18.120.1
  • kernel-64kb SLES 15 SP5-LTSS, SLE High Performance Computing 15 SP5-LTSS, SLE High Performance Computing 15 SP5-ESPOS 5.14.21-150500.55.100.1

suse advisories SUSE-SU-2025:02099-1SUSE-SU-2025:1293-1SUSE-SU-2025:1263-1SUSE-SU-2025:1241-1SUSE-SU-2025:1195-1SUSE-SU-2025:1194-1

  • spectre-meltdown-checker openSUSE Tumbleweed 26.36.0602723-1.1
  • kernel-source openSUSE Tumbleweed 5.14.6-1.4
  • gtk3 openSUSE Tumbleweed 2.32.4-1.1
  • wireshark openSUSE Tumbleweed 3.4.8-1.2
  • xen openSUSE Tumbleweed 4.15.1_01-1.2
  • kernel-source openSUSE Tumbleweed 6.6.17-1.1
  • spectre-meltdown-checker openSUSE Leap 15.2 0.44-lp152.2.3.1
  • spectre-meltdown-checker openSUSE Leap 15.3 0.44-3.6.1

opensuse advisories openSUSE-SU-2026:11242-1openSUSE-SU-2024:10728-1openSUSE-SU-2024:11506-1openSUSE-SU-2024:11513-1openSUSE-SU-2024:11520-1openSUSE-SU-2024:13704-1

  • xen Alpine 3.5 4.7.3-r4
  • xen Alpine 3.6 4.8.2-r4
  • xen Alpine 3.7 4.9.1-r3
  • intel-ucode Alpine 3.24, Alpine 3.23, Alpine 3.22 +10 more 20190514a-r0

alpine advisories ALPINE-CVE-2017-5753

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • linux-zen Arch Linux 4.15.1-1
  • linux-hardened Arch Linux 4.15.1.1-1
  • linux-lts Arch Linux 4.9.75-1
  • linux Arch Linux 4.15.1-1

arch linux advisories AVG-557AVG-558AVG-559AVG-987

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-5753 updated cvss 5.5

hw: cpu: speculative execution bounds-check bypass

  • Red Hat CloudForms Management Engine 4.5
    fixed: vendor fix RHSA-2018:0091
  • Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-693.17.1.el7, kernel 3.10.0-693.17.1.el7, python-perf 3.10.0-693.17.1.el7, kernel-tools 3.10.0-693.17.1.el7, kernel-tools-libs 3.10.0-693.17.1.el7, kernel-abi-whitelists 3.10.0-693.17.1.el7, +1 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-693.17.1.el7 Red Hat Enterprise Linux ComputeNode (v. 7) perf 3.10.0-693.17.1.el7, kernel 3.10.0-693.17.1.el7, python-perf 3.10.0-693.17.1.el7, kernel-tools 3.10.0-693.17.1.el7, kernel-tools-libs 3.10.0-693.17.1.el7, kernel-abi-whitelists 3.10.0-693.17.1.el7, +1 more
    fixed: vendor fix RHSA-2018:0151
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) perf 3.10.0-514.41.1.el7, kernel 3.10.0-514.41.1.el7, python-perf 3.10.0-514.41.1.el7, kernel-tools 3.10.0-514.41.1.el7, kernel-tools-libs 3.10.0-514.41.1.el7, kernel-abi-whitelists 3.10.0-514.41.1.el7, +1 more
    fixed: vendor fix RHSA-2018:0182
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-693.17.1.el7
    fixed: vendor fix RHSA-2018:0151
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) kernel-debuginfo-common-x86_64 3.10.0-514.41.1.el7
    fixed: vendor fix RHSA-2018:0182
  • Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-696.23.1.el6, kernel 2.6.32-696.23.1.el6, kernel-firmware 2.6.32-696.23.1.el6, kernel-abi-whitelists 2.6.32-696.23.1.el6, kernel-debuginfo-common-i686 2.6.32-696.23.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.23.1.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf 2.6.32-696.23.1.el6, kernel-debuginfo-common-i686 2.6.32-696.23.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.23.1.el6
    fixed: vendor fix RHSA-2018:0512
  • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) perf 4.14.0-49.el7a, kernel 4.14.0-49.el7a, kernel-alt 4.14.0-49.el7a, python-perf 4.14.0-49.el7a, kernel-kdump 4.14.0-49.el7a, kernel-tools 4.14.0-49.el7a, +6 more Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debuginfo-common-aarch64 4.14.0-49.el7a, kernel-debuginfo-common-ppc64le 4.14.0-49.el7a
    fixed: vendor fix RHSA-2018:0654
  • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-693.11.1.rt56.639.el7, kernel-rt-kvm 3.10.0-693.11.1.rt56.639.el7, kernel-rt-trace 3.10.0-693.11.1.rt56.639.el7, kernel-rt-debug-kvm 3.10.0-693.11.1.rt56.639.el7, kernel-rt-trace-kvm 3.10.0-693.11.1.rt56.639.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-693.11.1.rt56.639.el7
    fixed: vendor fix RHSA-2018:0016
show 26 more
  • Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-696.23.1.el6, kernel 2.6.32-696.23.1.el6, kernel-firmware 2.6.32-696.23.1.el6, kernel-abi-whitelists 2.6.32-696.23.1.el6, kernel-debuginfo-common-i686 2.6.32-696.23.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.23.1.el6
    fixed: vendor fix RHSA-2018:0512
  • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) perf 2.6.32-573.53.1.el6, kernel 2.6.32-573.53.1.el6, kernel-firmware 2.6.32-573.53.1.el6, kernel-abi-whitelists 2.6.32-573.53.1.el6, kernel-debuginfo-common-i686 2.6.32-573.53.1.el6, kernel-debuginfo-common-x86_64 2.6.32-573.53.1.el6
    fixed: vendor fix RHSA-2018:0496
  • Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf 2.6.32-696.23.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.23.1.el6
    fixed: vendor fix RHSA-2018:0512
  • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) python-perf 2.6.32-573.53.1.el6, kernel-debuginfo-common-x86_64 2.6.32-573.53.1.el6
    fixed: vendor fix RHSA-2018:0496
  • Red Hat Enterprise Linux Long Life (v. 5.9 server) kernel 2.6.18-348.35.1.el5, kernel-PAE 2.6.18-348.35.1.el5, kernel-xen 2.6.18-348.35.1.el5, kernel-debuginfo-common 2.6.18-348.35.1.el5
    fixed: vendor fix RHSA-2018:0464
  • Red Hat Enterprise Linux Realtime (v. 7) kernel-rt 3.10.0-693.11.1.rt56.639.el7, kernel-rt-trace 3.10.0-693.11.1.rt56.639.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-693.11.1.rt56.639.el7
    fixed: vendor fix RHSA-2018:0016
  • Red Hat Enterprise Linux Server (v. 5 ELS) kernel 2.6.18-426.el5, kernel-PAE 2.6.18-426.el5, kernel-xen 2.6.18-426.el5, kernel-kdump 2.6.18-426.el5, kernel-debuginfo-common 2.6.18-426.el5
    fixed: vendor fix RHSA-2018:0292
  • Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-696.23.1.el6, kernel 2.6.32-696.23.1.el6, kernel-kdump 2.6.32-696.23.1.el6, kernel-firmware 2.6.32-696.23.1.el6, kernel-bootwrapper 2.6.32-696.23.1.el6, kernel-abi-whitelists 2.6.32-696.23.1.el6, +4 more
    fixed: vendor fix RHSA-2018:0512
  • Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-693.17.1.el7, kernel 3.10.0-693.17.1.el7, python-perf 3.10.0-693.17.1.el7, kernel-kdump 3.10.0-693.17.1.el7, kernel-tools 3.10.0-693.17.1.el7, kernel-tools-libs 3.10.0-693.17.1.el7, +6 more
    fixed: vendor fix RHSA-2018:0151
  • Red Hat Enterprise Linux Server AUS (v. 6.2) perf 2.6.32-220.76.2.el6, kernel 2.6.32-220.76.2.el6, kernel-firmware 2.6.32-220.76.2.el6, kernel-debuginfo-common-x86_64 2.6.32-220.76.2.el6
    fixed: vendor fix RHSA-2018:0020
  • Red Hat Enterprise Linux Server AUS (v. 6.4) perf 2.6.32-358.84.2.el6, kernel 2.6.32-358.84.2.el6, kernel-firmware 2.6.32-358.84.2.el6, kernel-debuginfo-common-x86_64 2.6.32-358.84.2.el6
    fixed: vendor fix RHSA-2018:0018
  • Red Hat Enterprise Linux Server AUS (v. 6.5) perf 2.6.32-431.85.2.el6, kernel 2.6.32-431.85.2.el6, kernel-firmware 2.6.32-431.85.2.el6, kernel-abi-whitelists 2.6.32-431.85.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.85.2.el6
    fixed: vendor fix RHSA-2018:0022
  • Red Hat Enterprise Linux Server AUS (v. 6.6) perf 2.6.32-504.64.4.el6, kernel 2.6.32-504.64.4.el6, kernel-firmware 2.6.32-504.64.4.el6, kernel-abi-whitelists 2.6.32-504.64.4.el6, kernel-debuginfo-common-x86_64 2.6.32-504.64.4.el6
    fixed: vendor fix RHSA-2018:0017
  • Red Hat Enterprise Linux Server AUS (v. 7.2) perf 3.10.0-327.62.4.el7, kernel 3.10.0-327.62.4.el7, python-perf 3.10.0-327.62.4.el7, kernel-tools 3.10.0-327.62.4.el7, kernel-tools-libs 3.10.0-327.62.4.el7, kernel-abi-whitelists 3.10.0-327.62.4.el7, +1 more Red Hat Enterprise Linux Server E4S (v. 7.2) perf 3.10.0-327.62.4.el7, kernel 3.10.0-327.62.4.el7, python-perf 3.10.0-327.62.4.el7, kernel-tools 3.10.0-327.62.4.el7, kernel-tools-libs 3.10.0-327.62.4.el7, kernel-abi-whitelists 3.10.0-327.62.4.el7, +1 more
    fixed: vendor fix RHSA-2018:0010
  • Red Hat Enterprise Linux Server EUS (v. 6.7) perf 2.6.32-573.53.1.el6, kernel 2.6.32-573.53.1.el6, kernel-kdump 2.6.32-573.53.1.el6, kernel-firmware 2.6.32-573.53.1.el6, kernel-bootwrapper 2.6.32-573.53.1.el6, kernel-abi-whitelists 2.6.32-573.53.1.el6, +4 more
    fixed: vendor fix RHSA-2018:0496
  • Red Hat Enterprise Linux Server EUS (v. 7.3) perf 3.10.0-514.41.1.el7, kernel 3.10.0-514.41.1.el7, python-perf 3.10.0-514.41.1.el7, kernel-kdump 3.10.0-514.41.1.el7, kernel-tools 3.10.0-514.41.1.el7, kernel-tools-libs 3.10.0-514.41.1.el7, +6 more
    fixed: vendor fix RHSA-2018:0182
  • Red Hat Enterprise Linux Server Optional (v. 6) python-perf 2.6.32-696.23.1.el6, kernel-debuginfo-common-i686 2.6.32-696.23.1.el6, kernel-debuginfo-common-ppc64 2.6.32-696.23.1.el6, kernel-debuginfo-common-s390x 2.6.32-696.23.1.el6, kernel-debuginfo-common-x86_64 2.6.32-696.23.1.el6
    fixed: vendor fix RHSA-2018:0512
  • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-ppc64 3.10.0-693.17.1.el7, kernel-debuginfo-common-x86_64 3.10.0-693.17.1.el7, kernel-debuginfo-common-ppc64le 3.10.0-693.17.1.el7
    fixed: vendor fix RHSA-2018:0151
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel 2.6.32-220.76.2.el6, python-perf 2.6.32-220.76.2.el6, kernel-debuginfo-common-x86_64 2.6.32-220.76.2.el6
    fixed: vendor fix RHSA-2018:0020
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.4) kernel 2.6.32-358.84.2.el6, python-perf 2.6.32-358.84.2.el6, kernel-debuginfo-common-x86_64 2.6.32-358.84.2.el6
    fixed: vendor fix RHSA-2018:0018
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel 2.6.32-431.85.2.el6, python-perf 2.6.32-431.85.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.85.2.el6
    fixed: vendor fix RHSA-2018:0022
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.6) python-perf 2.6.32-504.64.4.el6, kernel-debuginfo-common-x86_64 2.6.32-504.64.4.el6
    fixed: vendor fix RHSA-2018:0017
  • Red Hat Enterprise Linux Server Optional EUS (v. 6.7) python-perf 2.6.32-573.53.1.el6, kernel-debuginfo-common-i686 2.6.32-573.53.1.el6, kernel-debuginfo-common-ppc64 2.6.32-573.53.1.el6, kernel-debuginfo-common-s390x 2.6.32-573.53.1.el6, kernel-debuginfo-common-x86_64 2.6.32-573.53.1.el6
    fixed: vendor fix RHSA-2018:0496
  • Red Hat Enterprise Linux Server Optional EUS (v. 7.3) kernel-debuginfo-common-ppc64 3.10.0-514.41.1.el7, kernel-debuginfo-common-x86_64 3.10.0-514.41.1.el7, kernel-debuginfo-common-ppc64le 3.10.0-514.41.1.el7
    fixed: vendor fix RHSA-2018:0182
  • Red Hat Enterprise Linux Server Optional TUS (v. 6.6) python-perf 2.6.32-504.64.4.el6, kernel-debuginfo-common-x86_64 2.6.32-504.64.4.el6 Red Hat Enterprise Linux Server TUS (v. 6.6) perf 2.6.32-504.64.4.el6, kernel 2.6.32-504.64.4.el6, kernel-firmware 2.6.32-504.64.4.el6, kernel-abi-whitelists 2.6.32-504.64.4.el6, kernel-debuginfo-common-x86_64 2.6.32-504.64.4.el6
    fixed: vendor fix RHSA-2018:0017
  • Red Hat Enterprise Linux Server TUS (v. 7.2) perf 3.10.0-327.62.4.el7, kernel 3.10.0-327.62.4.el7, python-perf 3.10.0-327.62.4.el7, kernel-tools 3.10.0-327.62.4.el7, kernel-tools-libs 3.10.0-327.62.4.el7, kernel-abi-whitelists 3.10.0-327.62.4.el7, +1 more
    fixed: vendor fix RHSA-2018:0010

5 more fixed in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (EDB-43427)
  2. Published

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
5 mo ago

Exploit prediction

93.84% chance of exploitation in the next 30 days, higher than 99.8% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-43427 Multiple CPUs - 'Spectre' Information Disclosure local, 2018-01-03
  • packetstormsecurity.com http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CNA 3.1 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
NVD 2.0 4.7 AV:L/AC:M/Au:N/C:C/I:N/A:N

Affected products

  • Intel Corporation Most Modern Operating Systems

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.