Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Weakness
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Atom_c | Intel | c2308 (including) | c2308 (including) |
| Atom_c | Intel | c3308 (including) | c3308 (including) |
| Atom_c | Intel | c3338 (including) | c3338 (including) |
| Atom_c | Intel | c3508 (including) | c3508 (including) |
| Atom_c | Intel | c3538 (including) | c3538 (including) |
| Atom_c | Intel | c3558 (including) | c3558 (including) |
| Atom_c | Intel | c3708 (including) | c3708 (including) |
| Atom_c | Intel | c3750 (including) | c3750 (including) |
| Atom_c | Intel | c3758 (including) | c3758 (including) |
| Atom_c | Intel | c3808 (including) | c3808 (including) |
| Atom_c | Intel | c3830 (including) | c3830 (including) |
| Atom_c | Intel | c3850 (including) | c3850 (including) |
| Atom_c | Intel | c3858 (including) | c3858 (including) |
| Atom_c | Intel | c3950 (including) | c3950 (including) |
| Atom_c | Intel | c3955 (including) | c3955 (including) |
| Atom_c | Intel | c3958 (including) | c3958 (including) |
| Atom_e | Intel | e3805 (including) | e3805 (including) |
| Atom_e | Intel | e3815 (including) | e3815 (including) |
| Atom_e | Intel | e3825 (including) | e3825 (including) |
| Atom_e | Intel | e3826 (including) | e3826 (including) |
| Atom_e | Intel | e3827 (including) | e3827 (including) |
| Atom_e | Intel | e3845 (including) | e3845 (including) |
| Atom_z | Intel | z2420 (including) | z2420 (including) |
| Atom_z | Intel | z2460 (including) | z2460 (including) |
| Atom_z | Intel | z2480 (including) | z2480 (including) |
| Atom_z | Intel | z2520 (including) | z2520 (including) |
| Atom_z | Intel | z2560 (including) | z2560 (including) |
| Atom_z | Intel | z2580 (including) | z2580 (including) |
| Atom_z | Intel | z2760 (including) | z2760 (including) |
| Atom_z | Intel | z3460 (including) | z3460 (including) |
| Atom_z | Intel | z3480 (including) | z3480 (including) |
| Atom_z | Intel | z3530 (including) | z3530 (including) |
| Atom_z | Intel | z3560 (including) | z3560 (including) |
| Atom_z | Intel | z3570 (including) | z3570 (including) |
| Atom_z | Intel | z3580 (including) | z3580 (including) |
| Atom_z | Intel | z3590 (including) | z3590 (including) |
| Atom_z | Intel | z3735d (including) | z3735d (including) |
| Atom_z | Intel | z3735e (including) | z3735e (including) |
| Atom_z | Intel | z3735f (including) | z3735f (including) |
| Atom_z | Intel | z3735g (including) | z3735g (including) |
| Atom_z | Intel | z3736f (including) | z3736f (including) |
| Atom_z | Intel | z3736g (including) | z3736g (including) |
| Atom_z | Intel | z3740 (including) | z3740 (including) |
| Atom_z | Intel | z3740d (including) | z3740d (including) |
| Atom_z | Intel | z3745 (including) | z3745 (including) |
| Atom_z | Intel | z3745d (including) | z3745d (including) |
| Atom_z | Intel | z3770 (including) | z3770 (including) |
| Atom_z | Intel | z3770d (including) | z3770d (including) |
| Atom_z | Intel | z3775 (including) | z3775 (including) |
| Atom_z | Intel | z3775d (including) | z3775d (including) |
| Atom_z | Intel | z3785 (including) | z3785 (including) |
| Atom_z | Intel | z3795 (including) | z3795 (including) |
| Celeron_j | Intel | j3455 (including) | j3455 (including) |
| Celeron_j | Intel | j4005 (including) | j4005 (including) |
| Celeron_j | Intel | j4105 (including) | j4105 (including) |
| Celeron_n | Intel | n3450 (including) | n3450 (including) |
| Core_i3 | Intel | 32nm (including) | 32nm (including) |
| Core_i3 | Intel | 45nm (including) | 45nm (including) |
| Core_i5 | Intel | 32nm (including) | 32nm (including) |
| Core_i5 | Intel | 45nm (including) | 45nm (including) |
| Core_i7 | Intel | 32nm (including) | 32nm (including) |
| Core_i7 | Intel | 45nm (including) | 45nm (including) |
| Core_m | Intel | 32nm (including) | 32nm (including) |
| Core_m | Intel | 45nm (including) | 45nm (including) |
| Pentium | Intel | n4000 (including) | n4000 (including) |
| Pentium | Intel | n4100 (including) | n4100 (including) |
| Pentium | Intel | n4200 (including) | n4200 (including) |
| Pentium_j | Intel | j4205 (including) | j4205 (including) |
| Pentium_silver | Intel | j5005 (including) | j5005 (including) |
| Pentium_silver | Intel | n5000 (including) | n5000 (including) |
| Xeon_e-1105c | Intel | - (including) | - (including) |
| Xeon_e3 | Intel | 125c_ (including) | 125c_ (including) |
| Xeon_e3 | Intel | 1220_ (including) | 1220_ (including) |
| Xeon_e3 | Intel | 1275_ (including) | 1275_ (including) |
| Xeon_e3 | Intel | 1505m_v6 (including) | 1505m_v6 (including) |
| Xeon_e3 | Intel | 1515m_v5 (including) | 1515m_v5 (including) |
| Xeon_e3 | Intel | 1535m_v5 (including) | 1535m_v5 (including) |
| Xeon_e3 | Intel | 1535m_v6 (including) | 1535m_v6 (including) |
| Xeon_e3 | Intel | 1545m_v5 (including) | 1545m_v5 (including) |
| Xeon_e3 | Intel | 1558l_v5 (including) | 1558l_v5 (including) |
| Xeon_e3 | Intel | 1565l_v5 (including) | 1565l_v5 (including) |
| Xeon_e3 | Intel | 1575m_v5 (including) | 1575m_v5 (including) |
| Xeon_e3 | Intel | 1578l_v5 (including) | 1578l_v5 (including) |
| Xeon_e3 | Intel | 1585_v5 (including) | 1585_v5 (including) |
| Xeon_e3 | Intel | 1585l_v5 (including) | 1585l_v5 (including) |
| Xeon_e3 | Intel | 3600 (including) | 3600 (including) |
| Xeon_e3 | Intel | 5600 (including) | 5600 (including) |
| Xeon_e3 | Intel | 7500 (including) | 7500 (including) |
| Xeon_e3 | Intel | e5502 (including) | e5502 (including) |
| Xeon_e3 | Intel | e5503 (including) | e5503 (including) |
| Xeon_e3 | Intel | e5504 (including) | e5504 (including) |
| Xeon_e3 | Intel | e5506 (including) | e5506 (including) |
| Xeon_e3 | Intel | e5507 (including) | e5507 (including) |
| Xeon_e3 | Intel | e5520 (including) | e5520 (including) |
| Xeon_e3 | Intel | e5530 (including) | e5530 (including) |
| Xeon_e3 | Intel | e5540 (including) | e5540 (including) |
| Xeon_e3 | Intel | e6510 (including) | e6510 (including) |
| Xeon_e3 | Intel | e6540 (including) | e6540 (including) |
| Xeon_e3 | Intel | e6550 (including) | e6550 (including) |
| Xeon_e3 | Intel | l3403 (including) | l3403 (including) |
| Xeon_e3 | Intel | l3406 (including) | l3406 (including) |
| Xeon_e3 | Intel | l3426 (including) | l3426 (including) |
| Xeon_e3 | Intel | l5506 (including) | l5506 (including) |
| Xeon_e3 | Intel | l5508_ (including) | l5508_ (including) |
| Xeon_e3 | Intel | l5518_ (including) | l5518_ (including) |
| Xeon_e3 | Intel | l5520 (including) | l5520 (including) |
| Xeon_e3 | Intel | l5530 (including) | l5530 (including) |
| Xeon_e3 | Intel | w5580 (including) | w5580 (including) |
| Xeon_e3 | Intel | w5590 (including) | w5590 (including) |
| Xeon_e3 | Intel | x3430 (including) | x3430 (including) |
| Xeon_e3 | Intel | x3440 (including) | x3440 (including) |
| Xeon_e3 | Intel | x3450 (including) | x3450 (including) |
| Xeon_e3 | Intel | x3460 (including) | x3460 (including) |
| Xeon_e3 | Intel | x3470 (including) | x3470 (including) |
| Xeon_e3 | Intel | x3480 (including) | x3480 (including) |
| Xeon_e3 | Intel | x5550 (including) | x5550 (including) |
| Xeon_e3 | Intel | x5560 (including) | x5560 (including) |
| Xeon_e3 | Intel | x5570 (including) | x5570 (including) |
| Xeon_e3_1105c_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1125c_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1220_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1220_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1220_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1220_v6 | Intel | - (including) | - (including) |
| Xeon_e3_12201 | Intel | - (including) | - (including) |
| Xeon_e3_12201_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1220l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1225 | Intel | - (including) | - (including) |
| Xeon_e3_1225_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1225_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1225_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1225_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1226_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1230 | Intel | - (including) | - (including) |
| Xeon_e3_1230_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1230_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1230_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1230_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1230l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1231_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1235 | Intel | - (including) | - (including) |
| Xeon_e3_1235l_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1240 | Intel | - (including) | - (including) |
| Xeon_e3_1240_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1240_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1240_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1240_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1240l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1240l_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1241_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1245 | Intel | - (including) | - (including) |
| Xeon_e3_1245_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1245_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1245_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1245_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1246_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1258l_v4 | Intel | - (including) | - (including) |
| Xeon_e3_1260l | Intel | - (including) | - (including) |
| Xeon_e3_1260l_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1265l_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1265l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1265l_v4 | Intel | - (including) | - (including) |
| Xeon_e3_1268l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1268l_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1270 | Intel | - (including) | - (including) |
| Xeon_e3_1270_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1270_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1270_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1270_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1271_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1275_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1275_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1275_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1275_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1275l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1276_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1278l_v4 | Intel | - (including) | - (including) |
| Xeon_e3_1280 | Intel | - (including) | - (including) |
| Xeon_e3_1280_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1280_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1280_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1280_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1281_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1285_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1285_v4 | Intel | - (including) | - (including) |
| Xeon_e3_1285_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1285l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1285l_v4 | Intel | - (including) | - (including) |
| Xeon_e3_1286_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1286l_v3 | Intel | - (including) | - (including) |
| Xeon_e3_1290 | Intel | - (including) | - (including) |
| Xeon_e3_1290_v2 | Intel | - (including) | - (including) |
| Xeon_e3_1501l_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1501m_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1505l_v5 | Intel | - (including) | - (including) |
| Xeon_e3_1505l_v6 | Intel | - (including) | - (including) |
| Xeon_e3_1505m_v5 | Intel | - (including) | - (including) |
| Xeon_e5 | Intel | 2650l_v4 (including) | 2650l_v4 (including) |
| Xeon_e5 | Intel | 2658 (including) | 2658 (including) |
| Xeon_e5 | Intel | 2658_v2 (including) | 2658_v2 (including) |
| Xeon_e5 | Intel | 2658_v3 (including) | 2658_v3 (including) |
| Xeon_e5 | Intel | 2658_v4 (including) | 2658_v4 (including) |
| Xeon_e5 | Intel | 2658a_v3 (including) | 2658a_v3 (including) |
| Xeon_e5 | Intel | 2660 (including) | 2660 (including) |
| Xeon_e5 | Intel | 2660_v2 (including) | 2660_v2 (including) |
| Xeon_e5 | Intel | 2660_v3 (including) | 2660_v3 (including) |
| Xeon_e5 | Intel | 2660_v4 (including) | 2660_v4 (including) |
| Xeon_e5 | Intel | 2665 (including) | 2665 (including) |
| Xeon_e5 | Intel | 2667 (including) | 2667 (including) |
| Xeon_e5 | Intel | 2667_v2 (including) | 2667_v2 (including) |
| Xeon_e5 | Intel | 2667_v3 (including) | 2667_v3 (including) |
| Xeon_e5 | Intel | 2667_v4 (including) | 2667_v4 (including) |
| Xeon_e5 | Intel | 2670 (including) | 2670 (including) |
| Xeon_e5 | Intel | 2670_v2 (including) | 2670_v2 (including) |
| Xeon_e5 | Intel | 2670_v3 (including) | 2670_v3 (including) |
| Xeon_e5 | Intel | 2680 (including) | 2680 (including) |
| Xeon_e5 | Intel | 2680_v2 (including) | 2680_v2 (including) |
| Xeon_e5 | Intel | 2680_v3 (including) | 2680_v3 (including) |
| Xeon_e5 | Intel | 2680_v4 (including) | 2680_v4 (including) |
| Xeon_e5 | Intel | 2683_v3 (including) | 2683_v3 (including) |
| Xeon_e5 | Intel | 2683_v4 (including) | 2683_v4 (including) |
| Xeon_e5 | Intel | 2687w (including) | 2687w (including) |
| Xeon_e5 | Intel | 2687w_v2 (including) | 2687w_v2 (including) |
| Xeon_e5 | Intel | 2687w_v3 (including) | 2687w_v3 (including) |
| Xeon_e5 | Intel | 2687w_v4 (including) | 2687w_v4 (including) |
| Xeon_e5 | Intel | 2690 (including) | 2690 (including) |
| Xeon_e5 | Intel | 2690_v2 (including) | 2690_v2 (including) |
| Xeon_e5 | Intel | 2690_v3 (including) | 2690_v3 (including) |
| Xeon_e5 | Intel | 2690_v4 (including) | 2690_v4 (including) |
| Xeon_e5 | Intel | 2695_v2 (including) | 2695_v2 (including) |
| Xeon_e5 | Intel | 2695_v3 (including) | 2695_v3 (including) |
| Xeon_e5 | Intel | 2695_v4 (including) | 2695_v4 (including) |
| Xeon_e5 | Intel | 2697_v2 (including) | 2697_v2 (including) |
| Xeon_e5 | Intel | 2697_v3 (including) | 2697_v3 (including) |
| Xeon_e5 | Intel | 2697_v4 (including) | 2697_v4 (including) |
| Xeon_e5 | Intel | 2697a_v4 (including) | 2697a_v4 (including) |
| Xeon_e5 | Intel | 2698_v3 (including) | 2698_v3 (including) |
| Xeon_e5 | Intel | 2698_v4 (including) | 2698_v4 (including) |
| Xeon_e5 | Intel | 2699_v3 (including) | 2699_v3 (including) |
| Xeon_e5 | Intel | 2699_v4 (including) | 2699_v4 (including) |
| Xeon_e5 | Intel | 2699a_v4 (including) | 2699a_v4 (including) |
| Xeon_e5 | Intel | 2699r_v4 (including) | 2699r_v4 (including) |
| Xeon_e5 | Intel | 4603 (including) | 4603 (including) |
| Xeon_e5 | Intel | 4603_v2 (including) | 4603_v2 (including) |
| Xeon_e5 | Intel | 4607 (including) | 4607 (including) |
| Xeon_e5 | Intel | 4607_v2 (including) | 4607_v2 (including) |
| Xeon_e5 | Intel | 4610 (including) | 4610 (including) |
| Xeon_e5 | Intel | 4610_v2 (including) | 4610_v2 (including) |
| Xeon_e5 | Intel | 4610_v3 (including) | 4610_v3 (including) |
| Xeon_e5 | Intel | 4610_v4 (including) | 4610_v4 (including) |
| Xeon_e5 | Intel | 4617 (including) | 4617 (including) |
| Xeon_e5 | Intel | 4620 (including) | 4620 (including) |
| Xeon_e5 | Intel | 4620_v2 (including) | 4620_v2 (including) |
| Xeon_e5 | Intel | 4620_v3 (including) | 4620_v3 (including) |
| Xeon_e5 | Intel | 4620_v4 (including) | 4620_v4 (including) |
| Xeon_e5 | Intel | 4624l_v2 (including) | 4624l_v2 (including) |
| Xeon_e5 | Intel | 4627_v2 (including) | 4627_v2 (including) |
| Xeon_e5 | Intel | 4627_v3 (including) | 4627_v3 (including) |
| Xeon_e5 | Intel | 4627_v4 (including) | 4627_v4 (including) |
| Xeon_e5 | Intel | 4628l_v4 (including) | 4628l_v4 (including) |
| Xeon_e5 | Intel | 4640 (including) | 4640 (including) |
| Xeon_e5 | Intel | 4640_v2 (including) | 4640_v2 (including) |
| Xeon_e5 | Intel | 4640_v3 (including) | 4640_v3 (including) |
| Xeon_e5 | Intel | 4640_v4 (including) | 4640_v4 (including) |
| Xeon_e5 | Intel | 4648_v3 (including) | 4648_v3 (including) |
| Xeon_e5 | Intel | 4650 (including) | 4650 (including) |
| Xeon_e5 | Intel | 4650_v2 (including) | 4650_v2 (including) |
| Xeon_e5 | Intel | 4650_v3 (including) | 4650_v3 (including) |
| Xeon_e5 | Intel | 4650_v4 (including) | 4650_v4 (including) |
| Xeon_e5 | Intel | 4650l (including) | 4650l (including) |
| Xeon_e5 | Intel | 4655_v3 (including) | 4655_v3 (including) |
| Xeon_e5 | Intel | 4655_v4 (including) | 4655_v4 (including) |
| Xeon_e5 | Intel | 4657l_v2 (including) | 4657l_v2 (including) |
| Xeon_e5 | Intel | 4660_v3 (including) | 4660_v3 (including) |
| Xeon_e5 | Intel | 4660_v4 (including) | 4660_v4 (including) |
| Xeon_e5 | Intel | 4667_v3 (including) | 4667_v3 (including) |
| Xeon_e5 | Intel | 4667_v4 (including) | 4667_v4 (including) |
| Xeon_e5 | Intel | 4669_v3 (including) | 4669_v3 (including) |
| Xeon_e5 | Intel | 4669_v4 (including) | 4669_v4 (including) |
| Xeon_e5_1428l | Intel | - (including) | - (including) |
| Xeon_e5_1428l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_1428l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_1620 | Intel | - (including) | - (including) |
| Xeon_e5_1620_v2 | Intel | - (including) | - (including) |
| Xeon_e5_1620_v3 | Intel | - (including) | - (including) |
| Xeon_e5_1620_v4 | Intel | - (including) | - (including) |
| Xeon_e5_1630_v3 | Intel | - (including) | - (including) |
| Xeon_e5_1630_v4 | Intel | - (including) | - (including) |
| Xeon_e5_1650 | Intel | - (including) | - (including) |
| Xeon_e5_1650_v2 | Intel | - (including) | - (including) |
| Xeon_e5_1650_v3 | Intel | - (including) | - (including) |
| Xeon_e5_1650_v4 | Intel | - (including) | - (including) |
| Xeon_e5_1660 | Intel | - (including) | - (including) |
| Xeon_e5_1660_v2 | Intel | - (including) | - (including) |
| Xeon_e5_1660_v3 | Intel | - (including) | - (including) |
| Xeon_e5_1660_v4 | Intel | - (including) | - (including) |
| Xeon_e5_1680_v3 | Intel | - (including) | - (including) |
| Xeon_e5_1680_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2403 | Intel | - (including) | - (including) |
| Xeon_e5_2403_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2407 | Intel | - (including) | - (including) |
| Xeon_e5_2407_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2408l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2418l | Intel | - (including) | - (including) |
| Xeon_e5_2418l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2418l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2420 | Intel | - (including) | - (including) |
| Xeon_e5_2420_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2428l | Intel | - (including) | - (including) |
| Xeon_e5_2428l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2428l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2430 | Intel | - (including) | - (including) |
| Xeon_e5_2430_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2430l | Intel | - (including) | - (including) |
| Xeon_e5_2430l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2438l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2440 | Intel | - (including) | - (including) |
| Xeon_e5_2440_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2448l | Intel | - (including) | - (including) |
| Xeon_e5_2448l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2450 | Intel | - (including) | - (including) |
| Xeon_e5_2450_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2450l | Intel | - (including) | - (including) |
| Xeon_e5_2450l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2470 | Intel | - (including) | - (including) |
| Xeon_e5_2470_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2603 | Intel | - (including) | - (including) |
| Xeon_e5_2603_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2603_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2603_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2608l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2608l_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2609 | Intel | - (including) | - (including) |
| Xeon_e5_2609_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2609_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2609_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2618l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2618l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2618l_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2620 | Intel | - (including) | - (including) |
| Xeon_e5_2620_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2620_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2620_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2623_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2623_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2628l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2628l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2628l_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2630 | Intel | - (including) | - (including) |
| Xeon_e5_2630_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2630_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2630_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2630l | Intel | - (including) | - (including) |
| Xeon_e5_2630l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2630l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2630l_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2637 | Intel | - (including) | - (including) |
| Xeon_e5_2637_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2637_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2637_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2640 | Intel | - (including) | - (including) |
| Xeon_e5_2640_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2640_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2640_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2643 | Intel | - (including) | - (including) |
| Xeon_e5_2643_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2643_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2643_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2648l | Intel | - (including) | - (including) |
| Xeon_e5_2648l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2648l_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2648l_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2650 | Intel | - (including) | - (including) |
| Xeon_e5_2650_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2650_v3 | Intel | - (including) | - (including) |
| Xeon_e5_2650_v4 | Intel | - (including) | - (including) |
| Xeon_e5_2650l | Intel | - (including) | - (including) |
| Xeon_e5_2650l_v2 | Intel | - (including) | - (including) |
| Xeon_e5_2650l_v3 | Intel | - (including) | - (including) |
| Xeon_e7 | Intel | 2803 (including) | 2803 (including) |
| Xeon_e7 | Intel | 2820 (including) | 2820 (including) |
| Xeon_e7 | Intel | 2830 (including) | 2830 (including) |
| Xeon_e7 | Intel | 2850 (including) | 2850 (including) |
| Xeon_e7 | Intel | 2850_v2 (including) | 2850_v2 (including) |
| Xeon_e7 | Intel | 2860 (including) | 2860 (including) |
| Xeon_e7 | Intel | 2870 (including) | 2870 (including) |
| Xeon_e7 | Intel | 2870_v2 (including) | 2870_v2 (including) |
| Xeon_e7 | Intel | 2880_v2 (including) | 2880_v2 (including) |
| Xeon_e7 | Intel | 2890_v2 (including) | 2890_v2 (including) |
| Xeon_e7 | Intel | 4807 (including) | 4807 (including) |
| Xeon_e7 | Intel | 4809_v2 (including) | 4809_v2 (including) |
| Xeon_e7 | Intel | 4809_v3 (including) | 4809_v3 (including) |
| Xeon_e7 | Intel | 4809_v4 (including) | 4809_v4 (including) |
| Xeon_e7 | Intel | 4820 (including) | 4820 (including) |
| Xeon_e7 | Intel | 4820_v2 (including) | 4820_v2 (including) |
| Xeon_e7 | Intel | 4820_v3 (including) | 4820_v3 (including) |
| Xeon_e7 | Intel | 4820_v4 (including) | 4820_v4 (including) |
| Xeon_e7 | Intel | 4830 (including) | 4830 (including) |
| Xeon_e7 | Intel | 4830_v2 (including) | 4830_v2 (including) |
| Xeon_e7 | Intel | 4830_v3 (including) | 4830_v3 (including) |
| Xeon_e7 | Intel | 4830_v4 (including) | 4830_v4 (including) |
| Xeon_e7 | Intel | 4850 (including) | 4850 (including) |
| Xeon_e7 | Intel | 4850_v2 (including) | 4850_v2 (including) |
| Xeon_e7 | Intel | 4850_v3 (including) | 4850_v3 (including) |
| Xeon_e7 | Intel | 4850_v4 (including) | 4850_v4 (including) |
| Xeon_e7 | Intel | 4860 (including) | 4860 (including) |
| Xeon_e7 | Intel | 4860_v2 (including) | 4860_v2 (including) |
| Xeon_e7 | Intel | 4870 (including) | 4870 (including) |
| Xeon_e7 | Intel | 4870_v2 (including) | 4870_v2 (including) |
| Xeon_e7 | Intel | 4880_v2 (including) | 4880_v2 (including) |
| Xeon_e7 | Intel | 4890_v2 (including) | 4890_v2 (including) |
| Xeon_e7 | Intel | 8830 (including) | 8830 (including) |
| Xeon_e7 | Intel | 8837 (including) | 8837 (including) |
| Xeon_e7 | Intel | 8850 (including) | 8850 (including) |
| Xeon_e7 | Intel | 8850_v2 (including) | 8850_v2 (including) |
| Xeon_e7 | Intel | 8857_v2 (including) | 8857_v2 (including) |
| Xeon_e7 | Intel | 8860 (including) | 8860 (including) |
| Xeon_e7 | Intel | 8860_v3 (including) | 8860_v3 (including) |
| Xeon_e7 | Intel | 8860_v4 (including) | 8860_v4 (including) |
| Xeon_e7 | Intel | 8867_v3 (including) | 8867_v3 (including) |
| Xeon_e7 | Intel | 8867_v4 (including) | 8867_v4 (including) |
| Xeon_e7 | Intel | 8867l (including) | 8867l (including) |
| Xeon_e7 | Intel | 8870 (including) | 8870 (including) |
| Xeon_e7 | Intel | 8870_v2 (including) | 8870_v2 (including) |
| Xeon_e7 | Intel | 8870_v3 (including) | 8870_v3 (including) |
| Xeon_e7 | Intel | 8870_v4 (including) | 8870_v4 (including) |
| Xeon_e7 | Intel | 8880_v2 (including) | 8880_v2 (including) |
| Xeon_e7 | Intel | 8880_v3 (including) | 8880_v3 (including) |
| Xeon_e7 | Intel | 8880_v4 (including) | 8880_v4 (including) |
| Xeon_e7 | Intel | 8880l_v2 (including) | 8880l_v2 (including) |
| Xeon_e7 | Intel | 8880l_v3 (including) | 8880l_v3 (including) |
| Xeon_e7 | Intel | 8890_v2 (including) | 8890_v2 (including) |
| Xeon_e7 | Intel | 8890_v3 (including) | 8890_v3 (including) |
| Xeon_e7 | Intel | 8890_v4 (including) | 8890_v4 (including) |
| Xeon_e7 | Intel | 8891_v2 (including) | 8891_v2 (including) |
| Xeon_e7 | Intel | 8891_v3 (including) | 8891_v3 (including) |
| Xeon_e7 | Intel | 8891_v4 (including) | 8891_v4 (including) |
| Xeon_e7 | Intel | 8893_v2 (including) | 8893_v2 (including) |
| Xeon_e7 | Intel | 8893_v3 (including) | 8893_v3 (including) |
| Xeon_e7 | Intel | 8893_v4 (including) | 8893_v4 (including) |
| Xeon_e7 | Intel | 8894_v4 (including) | 8894_v4 (including) |
| Xeon_gold | Intel | 5115 (including) | 5115 (including) |
| Xeon_gold | Intel | 85115 (including) | 85115 (including) |
| Xeon_gold | Intel | 85118 (including) | 85118 (including) |
| Xeon_gold | Intel | 85119t (including) | 85119t (including) |
| Xeon_gold | Intel | 85120 (including) | 85120 (including) |
| Xeon_gold | Intel | 85120t (including) | 85120t (including) |
| Xeon_gold | Intel | 85122 (including) | 85122 (including) |
| Xeon_gold | Intel | 86126 (including) | 86126 (including) |
| Xeon_gold | Intel | 86126f (including) | 86126f (including) |
| Xeon_gold | Intel | 86126t (including) | 86126t (including) |
| Xeon_gold | Intel | 86128 (including) | 86128 (including) |
| Xeon_gold | Intel | 86130 (including) | 86130 (including) |
| Xeon_gold | Intel | 86130f (including) | 86130f (including) |
| Xeon_gold | Intel | 86130t (including) | 86130t (including) |
| Xeon_gold | Intel | 86132 (including) | 86132 (including) |
| Xeon_gold | Intel | 86134 (including) | 86134 (including) |
| Xeon_gold | Intel | 86134m (including) | 86134m (including) |
| Xeon_gold | Intel | 86136 (including) | 86136 (including) |
| Xeon_gold | Intel | 86138 (including) | 86138 (including) |
| Xeon_gold | Intel | 86138f (including) | 86138f (including) |
| Xeon_gold | Intel | 86138t (including) | 86138t (including) |
| Xeon_gold | Intel | 86140 (including) | 86140 (including) |
| Xeon_gold | Intel | 86140m (including) | 86140m (including) |
| Xeon_gold | Intel | 86142 (including) | 86142 (including) |
| Xeon_gold | Intel | 86142f (including) | 86142f (including) |
| Xeon_gold | Intel | 86142m (including) | 86142m (including) |
| Xeon_gold | Intel | 86144 (including) | 86144 (including) |
| Xeon_gold | Intel | 86146 (including) | 86146 (including) |
| Xeon_gold | Intel | 86148 (including) | 86148 (including) |
| Xeon_gold | Intel | 86148f (including) | 86148f (including) |
| Xeon_gold | Intel | 86150 (including) | 86150 (including) |
| Xeon_gold | Intel | 86152 (including) | 86152 (including) |
| Xeon_gold | Intel | 86154 (including) | 86154 (including) |
| Xeon_platinum | Intel | 8153 (including) | 8153 (including) |
| Xeon_platinum | Intel | 8156 (including) | 8156 (including) |
| Xeon_platinum | Intel | 8158 (including) | 8158 (including) |
| Xeon_platinum | Intel | 8160 (including) | 8160 (including) |
| Xeon_platinum | Intel | 8160f (including) | 8160f (including) |
| Xeon_platinum | Intel | 8160m (including) | 8160m (including) |
| Xeon_platinum | Intel | 8160t (including) | 8160t (including) |
| Xeon_platinum | Intel | 8164 (including) | 8164 (including) |
| Xeon_platinum | Intel | 8168 (including) | 8168 (including) |
| Xeon_platinum | Intel | 8170 (including) | 8170 (including) |
| Xeon_platinum | Intel | 8170m (including) | 8170m (including) |
| Xeon_platinum | Intel | 8176 (including) | 8176 (including) |
| Xeon_platinum | Intel | 8176f (including) | 8176f (including) |
| Xeon_platinum | Intel | 8176m (including) | 8176m (including) |
| Xeon_platinum | Intel | 8180 (including) | 8180 (including) |
| Xeon_silver | Intel | 4108 (including) | 4108 (including) |
| Xeon_silver | Intel | 4109t (including) | 4109t (including) |
| Xeon_silver | Intel | 4110 (including) | 4110 (including) |
| Xeon_silver | Intel | 4112 (including) | 4112 (including) |
| Xeon_silver | Intel | 4114 (including) | 4114 (including) |
| Xeon_silver | Intel | 4114t (including) | 4114t (including) |
| Xeon_silver | Intel | 4116 (including) | 4116 (including) |
| Xeon_silver | Intel | 4116t (including) | 4116t (including) |
| Intel-microcode | Ubuntu | artful | * |
| Intel-microcode | Ubuntu | bionic | * |
| Intel-microcode | Ubuntu | esm-infra-legacy/trusty | * |
| Intel-microcode | Ubuntu | esm-infra/bionic | * |
| Intel-microcode | Ubuntu | esm-infra/xenial | * |
| Intel-microcode | Ubuntu | trusty | * |
| Intel-microcode | Ubuntu | trusty/esm | * |
| Intel-microcode | Ubuntu | upstream | * |
| Intel-microcode | Ubuntu | xenial | * |
Potential Mitigations
- Compartmentalize the system to have “safe” areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
- Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
- Ensure that error messages only contain minimal details that are useful to the intended audience and no one else. The messages need to strike the balance between being too cryptic (which can confuse users) or being too detailed (which may reveal more than intended). The messages should not reveal the methods that were used to determine the error. Attackers can use detailed information to refine or optimize their original attack, thereby increasing their chances of success.
- If errors must be captured in some detail, record them in log messages, but consider what could occur if the log messages can be viewed by attackers. Highly sensitive information such as passwords should never be saved to log files.
- Avoid inconsistent messaging that might accidentally tip off an attacker about internal state, such as whether a user account exists or not.
Related Attack Patterns
References
- http://support.lenovo.com/us/en/solutions/LEN-22133
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- http://www.securityfocus.com/bid/104228
- http://www.securitytracker.com/id/1040949
- http://www.securitytracker.com/id/1042004
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
- https://security.netapp.com/advisory/ntap-20180521-0001/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03850en_us
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel
- https://usn.ubuntu.com/3756-1/
- https://www.debian.org/security/2018/dsa-4273
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.kb.cert.org/vuls/id/180049
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
- https://www.synology.com/support/security/Synology_SA_18_23
- https://www.us-cert.gov/ncas/alerts/TA18-141A
- http://support.lenovo.com/us/en/solutions/LEN-22133
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- http://www.securityfocus.com/bid/104228
- http://www.securitytracker.com/id/1040949
- http://www.securitytracker.com/id/1042004
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
- https://security.netapp.com/advisory/ntap-20180521-0001/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03850en_us
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel
- https://usn.ubuntu.com/3756-1/
- https://www.debian.org/security/2018/dsa-4273
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.kb.cert.org/vuls/id/180049
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
- https://www.synology.com/support/security/Synology_SA_18_23
- https://www.us-cert.gov/ncas/alerts/TA18-141A