Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2018-3640

Date: May 20, 2018

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

Severity Score

Related Resources (26)

https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
https://security-tracker.debian.org/tracker/CVE-2018-3640
https://www.synology.com/support/security/Synology_SA_18_23
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel
https://www.kb.cert.org/vuls/id/180049
https://usn.ubuntu.com/3756-1/
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013
http://www.securitytracker.com/id/1042004
http://www.securitytracker.com/id/1040949
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
https://people.canonical.com/~ubuntu-security/cve/CVE-2018-3640
https://www.us-cert.gov/ncas/alerts/TA18-141A
https://security.netapp.com/advisory/ntap-20180521-0001/
http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
https://www.debian.org/security/2018/dsa-4273
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
http://support.lenovo.com/us/en/solutions/LEN-22133
http://www.securityfocus.com/bid/104228
https://nvd.nist.gov/vuln/detail/CVE-2018-3640
https://www.mend.io/vulnerability-database/CVE-2018-3640

Severity Score

Weakness Type (CWE)

Observable Discrepancy

CWE-203

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us