Skip to main content
← All vulnerabilities
CVE-2018-3639

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior mem

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB, 4 proofs of concept on GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Timeline

  1. CVE published
  2. Public exploit on Exploit-DB

    EDB-44695

  3. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  4. Record last updated
  5. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • Intel Corporation Multiple

    Multiple

References 30

access.redhat.com

usn.ubuntu.com

us-cert.gov

Exploit-DB

GitHub · Shuiliusheng/CVE-2018-3639-specter-v4-

GitHub · malindarathnayake/Intel-CVE-2018-3639-Mitigation_RegistryUpdate

GitHub · mmxsrup/CVE-2018-3639

GitHub · tyhicks/ssbd-tools