CVE-2017-5753
63Vexday Risk Score
Haz seguimiento. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.6epss 93%
de la publicación al arma0 días
Publicada en NVD4 ene
1ª PoC3 ene
probabilidad de explotación
93%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
10 exploit(s) público(s)
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Productos afectados
Intel Corporation · Most Modern Operating SystemsPoCs públicas encontradas — 10
exploitdbwww.exploit-db.com/exploits/43427no verificadogithubgithub.com/Eugnis/spectre-attack★ 771githubgithub.com/00052/spectre-attack-example★ 12githubgithub.com/ixtal23/spectreScope★ 7githubgithub.com/EdwardOwusuAdjei/Spectre-PoC★ 4githubgithub.com/pedrolucasoliva/spectre-attack-demo★ 1githubgithub.com/albertleecn/cve-2017-5753★ 1githubgithub.com/sachinthaBS/Spectre-Vulnerability-CVE-2017-5753-★ 0cve_referencepacketstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.htmlno verificadocve_referencewww.exploit-db.com/exploits/43427/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.htmlhttp://nvidia.custhelp.com/app/answers/detail/a_id/4609http://nvidia.custhelp.com/app/answers/detail/a_id/4611http://nvidia.custhelp.com/app/answers/detail/a_id/4613http://nvidia.custhelp.com/app/answers/detail/a_id/4614http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.htmlhttps://access.redhat.com/errata/RHSA-2018:0292https://access.redhat.com/security/vulnerabilities/speculativeexecution