Page History

...

Public	CVE	Alias(es)	CPUs Affected	Speculative Trigger	Impact	Mitigations	References
Jan 3, 2018	CVE-2017-5753	Spectre V1 NetSpectre (remote network attack vector)	Intel ARM	Branch prediction bounds check bypass	Cross- and intra-process (including kernel) memory disclosure	OS Compiler Browser	https://www.kb.cert.org/vuls/id/584653 https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
Jan 3, 2018	CVE-2017-5715	Spectre V2	Intel AMD ARM	Branch target injection	Cross- and intra-process (including kernel) memory disclosure	Microcode	https://www.kb.cert.org/vuls/id/584653 https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html https://www.amd.com/en/corporate/security-updates https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
Jan 3, 2018	CVE-2017-5754	Spectre V3 Meltdown	Intel	Out-of-order execution	Kernel memory disclosure to userspace	OS	https://www.kb.cert.org/vuls/id/584653 https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html
May 21, 2018	CVE-2018-3640	Spectre V3a (RSRE)	Intel ARM	System register read	Disclosure of system register values	Microcode	https://www.kb.cert.org/vuls/id/180049 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
May 21, 2018	CVE-2018-3639	Spectre V4 (SSB)	Intel AMD ARM	Memory reads before prior memory write addresses known	Cross- and intra-process (including kernel) memory disclosure	OS Microcode	https://www.kb.cert.org/vuls/id/180049 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html https://www.amd.com/en/corporate/security-updates https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
Jun 13, 2018	CVE-2018-3665	Lazy FP	Intel	Lazy FPU state restore	Leak of FPU state	OS	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html
July 10, 2018	CVE-2017-5753	Spectre1.1	Intel	Bounds check bypass	Speculative buffer overflow Cross- and intra-process (including kernel) memory disclosure	OS	https://01.org/security/advisories/intel-oss-10002
July 10, 2018	CVE-2018-3693	Spectre1.2	Intel	Bounds check bypass store	Overwrite read-only data and pointers Cross- and intra-process (including kernel) memory disclosure	OS	https://01.org/security/advisories/intel-oss-10002 https://arxiv.org/abs/1807.03757

...

Spectre V1 has also been demonstrated to access protections provided by the System Management Range Register (SMRR) to access protected System Management Mode (SMM) memory.
https://blog.eclypsium.com/2018/05/17/system-management-mode-speculative-execution-attacks/

Spectre V1 has also been demonstrated vulnerable to attacks directly over the network rather than through local code execution such as JavaScript. This remote attack is known as NetSpectre.
https://misc0110.net/web/files/netspectre.pdf

Lazy FP

Lazy FP may particularly expose AES keys:

...

Space shortcuts

Page tree

Versions Compared

Old Version 17

New Version 18

Key

Lazy FP