CVE-2017-5715— Intel和ARM CPU芯片信息泄露漏洞
一分钟漏洞结论
影响对象
Intel Corporation Microprocessors with Speculative Execution
利用判断
存在公开或 AI PoC，应优先验证
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
ARM Cortex-R7等都是英国ARM公司的产品。ARM Cortex-R7是一款中央处理器（CPU）。Cortex-R8是一款中央处理器（CPU）。Intel Xeon CPU E5-1650等都是美国英特尔（Intel）公司的产品。Xeon CPU E5-1650是一款中央处理器（CPU）。 Intel和ARM CPU芯片中存在信息泄露漏洞，该漏洞源于处理器数据边界机制中存在缺陷。本地攻击者可通过滥用‘错误推测执行’利用该漏洞读取内存信息。以下产品和版本受到影响：ARM Cortex-R7；Cor
公开利用映射 1
ExploitDB · 1
EDB-43427#CVE-2017-5715 [local]
可能的 ATT&CK 技术 1 AI
T1059 · Command and Scripting Interpreter
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2017-5715 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Intel和ARM CPU芯片信息泄露漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
ARM Cortex-R7等都是英国ARM公司的产品。ARM Cortex-R7是一款中央处理器（CPU）。Cortex-R8是一款中央处理器（CPU）。Intel Xeon CPU E5-1650等都是美国英特尔（Intel）公司的产品。Xeon CPU E5-1650是一款中央处理器（CPU）。 Intel和ARM CPU芯片中存在信息泄露漏洞，该漏洞源于处理器数据边界机制中存在缺陷。本地攻击者可通过滥用‘错误推测执行’利用该漏洞读取内存信息。以下产品和版本受到影响：ARM Cortex-R7；Cor
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Intel Corporation | Microprocessors with Speculative Execution | All | - |
|
二、漏洞 CVE-2017-5715 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Spectre exploit | https://github.com/opsxcq/exploit-cve-2017-5715 | POC详情 |
| 2 | a list of BIOS/Firmware fixes adressing CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 | https://github.com/mathse/meltdown-spectre-bios-list | POC详情 |
| 3 | Assesses a system for the "speculative execution" vulnerabilities described in CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 | https://github.com/GregAskew/SpeculativeExecutionAssessment | POC详情 |
| 4 | A quick-and-dirty tool to verify that userspace executables are immune to Spectre variant 2 (CVE-2017-5715). | https://github.com/dmo2118/retpoline-audit | POC详情 |
| 5 | None | https://github.com/GalloLuigi/Analisi-CVE-2017-5715 | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2017-5715 的情报信息
请登录查看更多情报信息。
CVE-2017-5715 厂商安全公告 (45)
-
🔗 https://support.lenovo.com/us/en/solutions/LEN-18282 x_refsource_CONFIRM
-
🔗 https://support.f5.com/csp/article/K91229003 x_refsource_CONFIRM
-
🔗 https://security.netapp.com/advisory/ntap-20180104-0001/ x_refsource_CONFIRM
-
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002 x_refsource_CONFIRM
-
🔗 https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/ x_refsource_CONFIRM
-
https://www.vmware.com/security/advisories/VMSA-2018-0007.html x_refsource_CONFIRM
-
🔗 http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html x_refsource_CONFIRM
-
🔗 https://security.paloaltonetworks.com/CVE-2017-5715 x_refsource_CONFIRM
-
🔗 https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html x_refsource_CONFIRM
-
-
🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf x_refsource_CONFIRM
-
🔗 http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html x_refsource_CONFIRM
-
🔗 https://access.redhat.com/security/vulnerabilities/speculativeexecution x_refsource_CONFIRM
-
-
🔗 https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html x_refsource_CONFIRM
-
🔗 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html x_refsource_CONFIRM
-
-
-
-
-
-
-
-
-
-
-
-
-
🔗 USN-3580-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu 查看完整文章 vendor-advisory x_refsource_UBUNTU
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
🔗 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel vendor-advisory x_refsource_CISCO
CVE-2017-5715 公开利用代码 (3)
CVE-2017-5715 邮件列表归档 (21)
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html vendor-advisory x_refsource_SUSE
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html vendor-advisory x_refsource_SUSE
-
-
-
-
-
-
-
-
-
CVE-2017-5715 安全博客文章 (1)
CVE-2017-5715 其他参考 (22)
-
🔗 http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt x_refsource_CONFIRM
-
-
-
🔗 http://xenbits.xen.org/xsa/advisory-254.html x_refsource_CONFIRM
-
🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4611 x_refsource_CONFIRM
-
-
🔗 https://cert.vde.com/en-us/advisories/vde-2018-002 x_refsource_CONFIRM
-
🔗 https://www.synology.com/support/security/Synology_SA_18_01 x_refsource_CONFIRM
-
🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4614 x_refsource_CONFIRM
-
🔗 https://support.citrix.com/article/CTX231399 x_refsource_CONFIRM
-
🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4613 x_refsource_CONFIRM
-
🔗 http://nvidia.custhelp.com/app/answers/detail/a_id/4609 x_refsource_CONFIRM
-
🔗 https://cert.vde.com/en-us/advisories/vde-2018-003 x_refsource_CONFIRM
-
🔗 http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt x_refsource_CONFIRM
-
🔗 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us x_refsource_CONFIRM
-
-
-
🔗 https://spectreattack.com/ x_refsource_MISC
-
-
https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/ x_refsource_CONFIRM
-
🔗 https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc vendor-advisory x_refsource_FREEBSD
-
🔗 https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc vendor-advisory x_refsource_FREEBSD
同批安全公告 · Intel Corporation · 2018-01-04 · 共 3 条
| CVE-2017-5753 | Intel和ARM CPU芯片信息泄露漏洞 | |
| CVE-2017-5754 | Intel和ARM CPU芯片信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2017-5715
暂无评论