CVE-2017-5715

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

References

• https://packetstorm.news/files/id/225767/
• https://packetstorm.news/download/225767
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14792
• http://nvidia.custhelp.com/app/answers/detail/a_id/4609
• https://usn.ubuntu.com/3560-1/
• https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
• https://www.debian.org/security/2018/dsa-4187
• https://usn.ubuntu.com/3542-2/
• https://security.gentoo.org/glsa/201810-06
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
• https://usn.ubuntu.com/3540-2/
• https://access.redhat.com/security/vulnerabilities/speculativeexecution
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
• https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
• https://usn.ubuntu.com/3597-1/
• https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/4611
• https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
• https://www.debian.org/security/2018/dsa-4213
• https://cert.vde.com/en-us/advisories/vde-2018-002
• https://www.debian.org/security/2018/dsa-4120
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html
• https://usn.ubuntu.com/3580-1/
• https://support.f5.com/csp/article/K91229003
• https://usn.ubuntu.com/3531-3/
• https://usn.ubuntu.com/3620-2/
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html