CVE-2017-5753

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

References

• https://packetstorm.news/files/id/225767/
• https://packetstorm.news/download/225767
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14830
• http://nvidia.custhelp.com/app/answers/detail/a_id/4609
• https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
• https://www.debian.org/security/2018/dsa-4187
• https://usn.ubuntu.com/3542-2/
• https://security.gentoo.org/glsa/201810-06
• https://usn.ubuntu.com/3540-2/
• https://access.redhat.com/security/vulnerabilities/speculativeexecution
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
• https://usn.ubuntu.com/3597-1/
• https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/4611
• https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
• https://cert.vde.com/en-us/advisories/vde-2018-002
• https://usn.ubuntu.com/3580-1/
• https://support.f5.com/csp/article/K91229003
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
• https://www.debian.org/security/2018/dsa-4188
• https://access.redhat.com/errata/RHSA-2018:0292
• http://xenbits.xen.org/xsa/advisory-254.html
• https://security.netapp.com/advisory/ntap-20180104-0001/
• https://www.synology.com/support/security/Synology_SA_18_01
• http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
• https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability