ISOMAN

CVE

CVE-2018-3665

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.

Severity
MEDIUM
CVSS
5.6
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/104460
  2. http://www.securitytracker.com/id/1041124
  3. http://www.securitytracker.com/id/1041125
  4. https://access.redhat.com/errata/RHSA-2018:1852
  5. https://access.redhat.com/errata/RHSA-2018:1944
  6. https://access.redhat.com/errata/RHSA-2018:2164
  7. https://access.redhat.com/errata/RHSA-2018:2165
  8. https://access.redhat.com/errata/RHSA-2019:1170
  9. https://access.redhat.com/errata/RHSA-2019:1190
  10. https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
  11. https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
  12. https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
  13. https://nvidia.custhelp.com/app/answers/detail/a_id/4787
  14. https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.asc
  15. https://security.netapp.com/advisory/ntap-20181016-0001/
  16. https://security.paloaltonetworks.com/CVE-2018-3665
  17. https://support.citrix.com/article/CTX235745
  18. https://usn.ubuntu.com/3696-1/
  19. https://usn.ubuntu.com/3696-2/
  20. https://usn.ubuntu.com/3698-1/