Main Vulnerability Database Vulnerabilities #VU9883

Information disclosure in Intel CPU - CVE-2017-5715

Published: January 9, 2018 / Updated: September 1, 2020

Vulnerability identifier: #VU9883

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-5715

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists in Intel CPU hardware due to improper implementation of the speculative execution of instructions. A local attacker can utilize branch target injection, execute arbitrary code, perform a side-channel attack and read sensitive memory information.

Affected software

Intel CPU
HP ProLiant ML110 Gen9 Server
HPE ProLiant XL740f Gen9 Server
HP ProLiant BL460c Gen9 Server Blade
HPE Apollo 4200 Gen9 Server
HPE ProLiant XL450 Gen9 Server
HP ProLiant DL380 Gen9 Server
HPE ProLiant DL360 Gen9 Server
HP ProLiant DL160 Gen9 Server
HP ProLiant DL60 Gen9 Server
HPE ProLiant XL170r Gen9 Server
HPE ProLiant XL750f Gen9 Server
HPE Synergy 620 Gen9 Compute Module
HP ProLiant ML150 Gen9 Server
HPE ProLiant ML350 Gen9 Server
HP ProLiant DL120 Gen9 Server
HPE ProLiant DL560 Gen9 Server
HP ProLiant BL660c Gen9 Server
HPE ProLiant ML30 Gen9 Server
HPE ProLiant DL20 Gen9 Server
HPE Synergy 660 Gen9 Compute Module
HPE Synergy 480 Gen9 Compute Module
HPE ProLiant XL190r Gen9 Server
HP ProLiant DL80 Gen9 Server
HPE ProLiant DL180 Gen9 Server
HPE ProLiant XL270d Gen9 Accelerator Tray 2U Configure
HPE ProLiant WS460c Gen9 Workstation
HPE ProLiant XL260a Gen9 Server
HPE ProLiant XL250a Gen9 Server
HPE ProLiant ML110 Gen10 Server
HPE ProLiant DL380 Gen10 Server
HPE ProLiant DL180 Gen10 Server
HPE ProLiant DL160 Gen10 Server
HPE ProLiant DL360 Gen10 Server
HPE ProLiant XL230a Gen9 Server
HPE ProLiant DL580 Gen10 Server
HPE ProLiant DL560 Gen10 Server
HPE ProLiant DL120 Gen10 Server
HPE ProLiant ML350 Gen10 Server
HPE ProLiant XL450 Gen10 Server
HPE Synergy 660 Gen10 Compute Module
HPE ProLiant DL385 Gen10 Server
HPE ProLiant XL170r Gen10 Server
HPE ProLiant BL460c Gen10 Server Blade
HPE ProLiant XL190r Gen10 Server
HPE ProLiant XL230k Gen10 Server
HPE Synergy 480 Gen10 Compute Module
HPE ProLiant XL730f Gen9 Server
HPE Cloudline CL3150 G4 Server
HPE StoreEasy 1550 Storage
HPE StoreEasy 1650 Storage
HPE StoreEasy 3850 Gateway Storage
HPE StoreEasy 1850 Storage
HP ConvergedSystem 700
HPE Converged Architecture 700
HP ProLiant DL580 Gen8 Server
HPE Cloudline CL2100 Gen10 Server
HPE Cloudline CL2200 Gen10 Server
HP ProLiant XL220a Gen8 v2 Server
HPE Cloudline CL5200 G3 Server
HPE Cloudline CL3100 G3 Server
HPE Cloudline CL2100 G3 807S 8 SFF Configure
HPE Cloudline CL2100 G3 407S 4 LFF Configure
HPE Cloudline CL2100 G3 806R 8SFF Configure
HPE Cloudline CL2200 G3 1211R 12 LFF Configure
HP ProLiant DL980 G7 Server
HPE StoreEasy 1450 Storage
HPE Synergy 680 Gen9 Compute Module
HPE ProLiant m510 Server Cartridge
HPE ProLiant m710p Server Cartridge
HPE ProLiant m710x Server Cartridge
HP ProLiant m710 Server Cartridge
HPE ProLiant DL580 Gen9 Server
HPE Synergy Composer
HPE ProLiant Thin Micro TM200 Server
HPE ProLiant ML10 v2 Server
HPE ProLiant m350 Server Cartridge
HPE ProLiant m300 Server Cartridge
HPE ProLiant MicroServer Gen8
HPE ProLiant ML310e Gen8 v2 Server
Superdome Flex Server
HP 3PAR StoreServ File Controller
HPE StoreVirtual 3000 File Controller
RUGGEDCOM APE1808CLA-P CC
RUGGEDCOM APE1808 ADM
RUGGEDCOM APE1808 ADM CC
RUGGEDCOM APE1808 CKP
RUGGEDCOM APE1808 CKP CC
RUGGEDCOM APE1808 CLOUDCONNECT
RUGGEDCOM APE1808 CLOUDCONNECT CC
RUGGEDCOM APE1808 ELAN
RUGGEDCOM APE1808 ELAN CC
RUGGEDCOM APE1808 SAM-L
RUGGEDCOM APE1808 SAM-L CC
RUGGEDCOM APE1808CLA-P
RUGGEDCOM APE1808CLA-S1
RUGGEDCOM APE1808CLA-S1 CC
RUGGEDCOM APE1808CLA-S3
RUGGEDCOM APE1808CLA-S3 CC
RUGGEDCOM APE1808CLA-S5
RUGGEDCOM APE1808CLA-S5 CC
RUGGEDCOM APE1808LNX
RUGGEDCOM APE1808LNX CC
RUGGEDCOM APE1808W10
RUGGEDCOM APE1808W10 CC
SCALANCE S615
PowerScale OneFS

Gentoo Linux
Debian Linux
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
IBM AIX
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux Server - Extended Update Support
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
CentOS
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
IBM i
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - 4 Year Extended Update Support
Red Hat Enterprise Linux Server (for IBM Power LE) - 4 Year Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for x86_64
SUSE Linux
Oracle Solaris
Ubuntu
Slackware Linux
Opensuse
Fedora
kbuild (Alpine package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-alt (Red Hat package)
gcc6 (Alpine package)
gcc (Alpine package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
openSUSE Leap
qemu
webkitgtk4
libvirt
kernel-tools-libs
bpftool
kernel
kernel-debug
kernel-debug-devel
kernel-devel
kernel-headers
kernel-tools
kernel-tools-libs-devel
perf
python-perf
kernel-abi-whitelists
kernel-doc
intel-microcode (Ubuntu package)
kernel-debug-core
kernel-modules-extra
kernel-modules
kernel-debug-modules-extra
kernel-debug-modules
kernel-core
kernel-cross-headers
python3-perf
kernel-abi-stablelists
MRG Realtime
IBM VIOS
Red Hat Virtualization Host
Oracle Communications Diameter Signaling Router (DSR)
Dell EMC PowerStore Family Operating System
VxRack SDDC
SCALANCE MUM856-1 (RoW)
SCALANCE MUM856-1 (EU)
SCALANCE MUM853-1 (EU)
SCALANCE M876-4 (NAM)
SCALANCE M876-4 (EU)
SCALANCE M816-1 ADSL-Router (Annex B)
RUGGEDCOM RM1224 LTE(4G) EU
SCALANCE M804PB
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)
SCALANCE M816-1 ADSL-Router (Annex A)
RUGGEDCOM RM1224 LTE(4G) NAM
SCALANCE M826-2 SHDSL-Router
SCALANCE M874-2
SCALANCE M874-3
SCALANCE M876-3 (EVDO)
SCALANCE M876-3 (ROK)
SCALANCE M876-4
SCALANCE S615 EEC
IBM QRadar Network Packet Capture
Juniper Junos Space

How to mitigate CVE-2017-5715

Install update from vendor's website.

kbuild (Alpine package) - update to 0.1.9998_pre20131130-r1
kernel (Red Hat package) - addressed in versions 2.6.18-348.39.1.el5, 2.6.18-430.el5, 2.6.32-220.76.2.el6, 2.6.32-358.84.2.el6, 2.6.32-358.88.2.el6, 2.6.32-431.85.2.el6, 2.6.32-431.89.2.el6, 2.6.32-504.64.4.el6, 2.6.32-504.68.2.el6, 2.6.32-573.53.1.el6, 2.6.32-573.55.2.el6, 2.6.32-696.23.1.el6, 2.6.32-754.49.1.el6, 3.10.0-327.62.4.el7, 3.10.0-327.66.1.el7, 3.10.0-514.41.1.el7, 3.10.0-693.17.1.el7, 3.10.0-1160.83.1.el7, 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - addressed in versions 3.10.0-693.11.1.rt56.606.el6rt, 3.10.0-693.11.1.rt56.639.el7, 3.10.0-1160.83.1.rt56.1228.el7, 4.18.0-372.9.1.rt7.166.el8
kernel-alt (Red Hat package) - addressed in versions 4.14.0-49.el7a, 4.14.0-49.8.1.el7a
gcc6 (Alpine package) - update to 6.4.0-r7
gcc (Alpine package) - update to 8.2.0-r0
RUGGEDCOM APE1808CLA-P CC - update to 1.0.212N
RUGGEDCOM APE1808 ADM - update to 1.0.212N
RUGGEDCOM APE1808 ADM CC - update to 1.0.212N
RUGGEDCOM APE1808 CKP - update to 1.0.212N
RUGGEDCOM APE1808 CKP CC - update to 1.0.212N
RUGGEDCOM APE1808 CLOUDCONNECT - update to 1.0.212N
RUGGEDCOM APE1808 CLOUDCONNECT CC - update to 1.0.212N
RUGGEDCOM APE1808 ELAN - update to 1.0.212N
RUGGEDCOM APE1808 ELAN CC - update to 1.0.212N
RUGGEDCOM APE1808 SAM-L - update to 1.0.212N
RUGGEDCOM APE1808 SAM-L CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-P - update to 1.0.212N
RUGGEDCOM APE1808CLA-S1 - update to 1.0.212N
RUGGEDCOM APE1808CLA-S1 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S3 - update to 1.0.212N
RUGGEDCOM APE1808CLA-S3 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S5 - update to 1.0.212N
RUGGEDCOM APE1808CLA-S5 CC - update to 1.0.212N
RUGGEDCOM APE1808LNX - update to 1.0.212N
RUGGEDCOM APE1808LNX CC - update to 1.0.212N
RUGGEDCOM APE1808W10 - update to 1.0.212N
RUGGEDCOM APE1808W10 CC - update to 1.0.212N
qemu - update to 2.10.1-4.fc27
webkitgtk4 - addressed in versions 2.18.5-1.fc26, 2.18.5-1.fc27
libvirt - addressed in versions 3.7.0-5.fc27, 3.7.0-6.fc27
kernel-tools-libs - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
bpftool - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
kernel - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
kernel-debug - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
kernel-debug-devel - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
kernel-devel - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
kernel-headers - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
kernel-tools - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
kernel-tools-libs-devel - update to 3.10.0-1160.83.1.0.1
perf - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
python-perf - update to 3.10.0-1160.83.1.0.1
kernel-abi-whitelists - update to 3.10.0-1160.83.1.0.1
kernel-doc - addressed in versions 3.10.0-1160.83.1.0.1, 4.18.0-372.9.1
intel-microcode (Ubuntu package) - addressed in versions 3.20210608.0ubuntu0.18.04.1, 3.20210608.0ubuntu0.20.04.1, 3.20210608.0ubuntu0.20.10.1, 3.20210608.0ubuntu0.21.04.1
Dell EMC PowerStore Family Operating System - update to 4.0.0.0-2284811
kernel-debug-core - update to 4.18.0-372.9.1
kernel-modules-extra - update to 4.18.0-372.9.1
kernel-modules - update to 4.18.0-372.9.1
kernel-debug-modules-extra - update to 4.18.0-372.9.1
kernel-debug-modules - update to 4.18.0-372.9.1
kernel-core - update to 4.18.0-372.9.1
kernel-cross-headers - update to 4.18.0-372.9.1
python3-perf - update to 4.18.0-372.9.1
kernel-abi-stablelists - update to 4.18.0-372.9.1
VxRack SDDC - update to 5.1.2
SCALANCE MUM856-1 (RoW) - update to 7.2
SCALANCE MUM856-1 (EU) - update to 7.2
SCALANCE MUM853-1 (EU) - update to 7.2
SCALANCE M876-4 (NAM) - update to 7.2
SCALANCE M876-4 (EU) - update to 7.2
SCALANCE M816-1 ADSL-Router (Annex B) - update to 7.2
RUGGEDCOM RM1224 LTE(4G) EU - update to 7.2
SCALANCE M804PB - update to 7.2
SCALANCE M812-1 ADSL-Router (Annex A) - update to 7.2
SCALANCE M812-1 ADSL-Router (Annex B) - update to 7.2
SCALANCE M816-1 ADSL-Router (Annex A) - update to 7.2
RUGGEDCOM RM1224 LTE(4G) NAM - update to 7.2
SCALANCE M826-2 SHDSL-Router - update to 7.2
SCALANCE M874-2 - update to 7.2
SCALANCE M874-3 - update to 7.2
SCALANCE M876-3 (EVDO) - update to 7.2
SCALANCE M876-3 (ROK) - update to 7.2
SCALANCE M876-4 - update to 7.2
SCALANCE S615 EEC - update to 7.2
SCALANCE S615 - update to 7.2
IBM QRadar Network Packet Capture - addressed in versions 7.2.8 Patch 1, 7.3.1 Patch 1
PowerScale OneFS - update to 12.0
Juniper Junos Space - update to 23.1R1

Links to Public Exploits and PoC-codes

Exploit #4563 - Meltdown-Spectre (Meltdown & Spectre - catastrophic vulnerabilities - exploited ?️) (September 1, 2020)

External References

https://newsroom.intel.com/news/intel-responds-to-security-research-findings/