CVE-2017-5753— Intel和ARM CPU芯片信息泄露漏洞
公开利用映射 1
ExploitDB · 1 EDB-43427#CVE-2017-5753 [local]
影响版本矩阵 1
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Intel Corporation | Most Modern Operating Systems | All | affected |
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2017-5753 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
Intel和ARM CPU芯片信息泄露漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
ARM Cortex-R7等都是英国ARM公司的产品。ARM Cortex-R7是一款中央处理器（CPU）。Cortex-R8是一款中央处理器（CPU）。Intel Xeon CPU E5-1650等都是美国英特尔（Intel）公司的产品。Xeon CPU E5-1650是一款中央处理器（CPU）。 Intel和ARM CPU芯片中存在信息泄露漏洞，该漏洞源于处理器数据边界机制中存在缺陷。本地攻击者可通过滥用‘错误推测执行’利用该漏洞读取内存信息。以下产品和版本受到影响：ARM Cortex-R7；Cor
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Intel Corporation | Most Modern Operating Systems | All | - |
二、漏洞 CVE-2017-5753 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715) | https://github.com/Eugnis/spectre-attack | POC详情 |
| 2 | Spectre (CVE-2017-5753) (CVE-2017-5715). Not By Me. Collected from Book. | https://github.com/EdwardOwusuAdjei/Spectre-PoC | POC详情 |
| 3 | 2018年1月2日 (CVE-2017-5753 和 CVE-2017-5715) "幽灵" Spectre 漏洞利用 | https://github.com/poilynx/spectre-attack-example | POC详情 |
| 4 | Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715) | https://github.com/pedrolucasoliva/spectre-attack-demo | POC详情 |
| 5 | The demo of the speculative execution attack Spectre (CVE-2017-5753, CVE-2017-5715). | https://github.com/ixtal23/spectreScope | POC详情 |
| 6 | OSX 10.13.2, CVE-2017-5753, Spectre, PoC, C, ASM for OSX, MAC, Intel Arch, Proof of Concept, Hopper.App Output | https://github.com/albertleecn/cve-2017-5753 | POC详情 |
| 7 | None | https://github.com/sachinthaBS/Spectre-Vulnerability-CVE-2017-5753- | POC详情 |
| 8 | 2018年1月2日 (CVE-2017-5753 和 CVE-2017-5715) "幽灵" Spectre 漏洞利用 | https://github.com/00052/spectre-attack-example | POC详情 |
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2017-5753 的情报信息
请登录查看更多情报信息。
CVE-2017-5753 厂商安全公告 (31)
- 🔗 https://www.vmware.com/us/security/advisories/VMSA-2018-0002.htmlx_refsource_CONFIRM
- https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/x_refsource_CONFIRM
- 🔗 https://security.netapp.com/advisory/ntap-20180104-0001/x_refsource_CONFIRM
- 🔗 https://access.redhat.com/security/vulnerabilities/speculativeexecutionx_refsource_CONFIRM
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlx_refsource_CONFIRM
- 🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfx_refsource_CONFIRM
- 🔗 https://support.lenovo.com/us/en/solutions/LEN-18282x_refsource_CONFIRM
- 🔗 https://support.f5.com/csp/article/K91229003x_refsource_CONFIRM
- https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdfx_refsource_CONFIRM
- 🔗 USN-3580-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu 查看完整文章 vendor-advisoryx_refsource_UBUNTU
- 🔗 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannelvendor-advisoryx_refsource_CISCO
CVE-2017-5753 公开利用代码 (2)
CVE-2017-5753 邮件列表归档 (10)
- 🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.htmlvendor-advisoryx_refsource_SUSE
- 🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlvendor-advisoryx_refsource_SUSE
- 🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlvendor-advisoryx_refsource_SUSE
- 🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlvendor-advisoryx_refsource_SUSE
- 🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.htmlvendor-advisoryx_refsource_SUSE
CVE-2017-5753 安全博客文章 (1)
CVE-2017-5753 其他参考 (20)
- https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/x_refsource_CONFIRM
- 🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4614x_refsource_CONFIRM
- https://support.citrix.com/article/CTX231399x_refsource_CONFIRM
- 🔗 https://www.synology.com/support/security/Synology_SA_18_01x_refsource_CONFIRM
- 🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4611x_refsource_CONFIRM
- 🔗 http://xenbits.xen.org/xsa/advisory-254.htmlx_refsource_CONFIRM
- 🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4609x_refsource_CONFIRM
- https://spectreattack.com/x_refsource_MISC
- 🔗 https://cdrdv2.intel.com/v1/dl/getContent/685359x_refsource_CONFIRM
- https://cert.vde.com/en-us/advisories/vde-2018-003x_refsource_CONFIRM
- 🔗 http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txtx_refsource_CONFIRM
- 🔗 https://cert.vde.com/en-us/advisories/vde-2018-002x_refsource_CONFIRM
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txtx_refsource_CONFIRM
- 🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4613x_refsource_CONFIRM
同批安全公告 · Intel Corporation · 2018-01-04 · 共 3 条
| CVE-2017-5715 | Intel和ARM CPU芯片信息泄露漏洞 | |
| CVE-2017-5754 | Intel和ARM CPU芯片信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2017-5753
暂无评论