← back
CVE-2018-3665

CVE-2018-3665

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
exploitation probability
0.6%top 54% of all CVEs
observed exploitation
nono source reports it
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
Affected products
Intel Corporation · Intel Core-based microprocessors
References
https://access.redhat.com/errata/RHSA-2018:1852https://access.redhat.com/errata/RHSA-2018:1944https://access.redhat.com/errata/RHSA-2018:2164https://access.redhat.com/errata/RHSA-2018:2165https://access.redhat.com/errata/RHSA-2019:1170https://access.redhat.com/errata/RHSA-2019:1190https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0https://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlhttps://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlhttps://nvidia.custhelp.com/app/answers/detail/a_id/4787https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.aschttps://security.netapp.com/advisory/ntap-20181016-0001/