Intel Corporation Most Modern Operating Systems

CVE-2018-3693

MEDIUM 5.6

At a glance

Source: NVD
EPSS: EPSS 8.63 % · percentile 95 (2026-10-31)
State: PUBLISHED
Published: 2018-07-10 21:00 UTC
Updated: 2024-08-05 04:50 UTC
Assigner: intel
NVD status: Modified

Search on…

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.

References

Scores

Version	Score	Vector	Scored by
CVSS 3.1	MEDIUM 5.6	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N	NVD · nvd@nist.gov (Primary)
CVSS 2.0	MEDIUM 4.7	AV:L/AC:M/Au:N/C:C/I:N/A:N	NVD · nvd@nist.gov (Primary)

European references

ENISA EUVD · EUVD-2018-15547
GCVE · GCVE-0-2018-3693

CERT-FR advisories

CERTFR-2020-AVI-665 — Multiples vulnérabilités dans Oracle Systems · cert.ssi.gouv.fr
CERTFR-2020-AVI-051 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
CERTFR-2019-AVI-361 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
CERTFR-2019-AVI-242 — Multiples vulnérabilités dans F5 BIG-IP · cert.ssi.gouv.fr
CERTFR-2019-AVI-014 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
CERTFR-2018-AVI-584 — Multiples vulnérabilités dans IBM QRadar SIEM · cert.ssi.gouv.fr
CERTFR-2018-AVI-386 — Multiples vulnérabilités dans le noyau Linux de RedHat · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:h:intel:atom_c:c2308:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2316:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2338:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2350:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2358:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2508:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2516:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2518:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2530:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2538:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2550:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2558:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2718:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2730:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2738:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2750:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c2758:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3308:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3338:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3508:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3538:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3558:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3708:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3750:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3758:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3808:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3830:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3850:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3858:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3950:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3955:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_c:c3958:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_e:e3805:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_e:e3815:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_e:e3825:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_e:e3826:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_e:e3827:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_e:e3845:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_x3:c3130:*:*:*:*:*:*:*
cpe:2.3:h:intel:atom_x3:c3200rk:*:*:*:*:*:*:*
+1052 more

Affected products

Product	Versions
Intel Corporation · Most Modern Operating Systems	affected All

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 Intel Corporation Most Modern Operating Systems