CVE-2018-3615

Published Aug 14, 2018

Last updated 4 years ago

Overview

Description
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Source
secure@intel.com
NVD status
Modified

Risk scores

CVSS 3.0

Type
Primary
Base score
6.4
Impact score
4.7
Exploitability score
1.1
Vector string
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
5.4
Impact score
7.8
Exploitability score
3.4
Vector string
AV:L/AC:M/Au:N/C:C/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-203

Social media

Hype score
Not currently trending

Configurations