CVE-2017-5753
MEDIUM severity · CVSS 5.6 · CWE-203
5.6CVSS MEDIUM
Summary
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Impact & exploitability
Attack vectorLocal
Attack complexityHigh
Privileges requiredLow
User interactionNone
Confidentiality impactHigh
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)94%
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products we track (2)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.htmlAdvisory
- http://nvidia.custhelp.com/app/answers/detail/a_id/4609Advisory
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611Advisory
- http://nvidia.custhelp.com/app/answers/detail/a_id/4613Advisory