CVE-2017-5715mediumCWE-203

CVE-2017-5715: medium-severity vulnerability in Intel Corporation Microprocessors with…

Published · Updated

Follow this CVE+ Monitor Microprocessors with Speculative Execution+ Monitor linux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

57Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.6epss 73%
from disclosure to weaponsame day
Published on NVDJan 4
1st PoCJan 3
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
12 products (91 components)
Red Hat Virtualization 4 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) · Red Hat OpenStack Platform 8 (Liberty) · and others 7
none_available: Affected
Fixed
52 products (1,662 components)
Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) · Red Hat Enterprise Linux Workstation (v. 7) · Red Hat Enterprise Linux Client (v. 7) · Red Hat Enterprise Linux Server EUS (v. 7.3) · and others 47
fix ↗
Not affected
2 products (6 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 8
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products
Intel Corporation · Microprocessors with Speculative Execution
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.