Back
CVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of…
- 5.6MediumCVSS base score
- 67.4%Exploitation in 30 daysEPSS · top 0.7% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
Timeline
ID reserved
By intel
- 11 months later
· 11 months later
Published
- 8 years later
· 8 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
| NVDNVD · Modified | 3.1 | Medium5.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 67.4% · top 0.7% of all CVEs (9 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.6.
Affected products
Intel Corporation · Most Modern Operating Systems
- affected All
References
66
- http://nvidia.custhelp.com/app/answers/detail/a_id/4609 (opens in a new tab)x_refsource_CONFIRMx_transferred
- USN-3523-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- USN-3525-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin (opens in a new tab)x_refsource_CONFIRMx_transferred
- GLSA-201810-06 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
- DSA-4082 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- https://support.citrix.com/article/CTX234679 (opens in a new tab)x_refsource_CONFIRMx_transferred
- USN-3540-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- USN-3522-3 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- https://access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)x_refsource_CONFIRMx_transferred
- [debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002 (opens in a new tab)x_refsource_CONFIRMx_transferred
- USN-3597-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- SUSE-SU-2018:0012 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- SUSE-SU-2018:0011 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- http://nvidia.custhelp.com/app/answers/detail/a_id/4611 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html (opens in a new tab)x_refsource_MISCx_transferred
- https://cert.vde.com/en-us/advisories/vde-2018-002 (opens in a new tab)x_refsource_CONFIRMx_transferred
- DSA-4120 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- https://support.f5.com/csp/article/K91229003 (opens in a new tab)x_refsource_CONFIRMx_transferred
- USN-3524-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- DSA-4078 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- https://source.android.com/security/bulletin/2018-04-01 (opens in a new tab)x_refsource_CONFIRMx_transferred
- openSUSE-SU-2018:0022 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- RHSA-2018:0292 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- http://xenbits.xen.org/xsa/advisory-254.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://security.netapp.com/advisory/ntap-20180104-0001/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://www.synology.com/support/security/Synology_SA_18_01 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability (opens in a new tab)x_refsource_CONFIRMx_transferred
- VU#584653 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
- USN-3522-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- VU#180049 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
- USN-3583-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- https://cert.vde.com/en-us/advisories/vde-2018-003 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://support.citrix.com/article/CTX231399 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 102378 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- FreeBSD-SA-18:03 (opens in a new tab)vendor-advisoryx_refsource_FREEBSDx_transferred
- https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- 106128 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ (opens in a new tab)x_refsource_CONFIRMx_transferred
- 1040071 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- USN-3597-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- http://nvidia.custhelp.com/app/answers/detail/a_id/4614 (opens in a new tab)x_refsource_CONFIRMx_transferred
- SUSE-SU-2018:0010 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- 20180104 CPU Side-Channel Information Disclosure Vulnerabilities (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- USN-3523-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- USN-3516-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- USN-3541-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html (opens in a new tab)x_refsource_MISCx_transferred
- https://support.lenovo.com/us/en/solutions/LEN-18282 (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://meltdownattack.com/ (opens in a new tab)x_refsource_MISCx_transferred
- openSUSE-SU-2018:0023 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- http://nvidia.custhelp.com/app/answers/detail/a_id/4613 (opens in a new tab)x_refsource_CONFIRMx_transferred
- USN-3522-4 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html (opens in a new tab)x_refsource_MISCx_transferred
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://www.oracle.com/security-alerts/cpuapr2020.html (opens in a new tab)x_refsource_MISCx_transferred
- https://cdrdv2.intel.com/v1/dl/getContent/685358 (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2017-14831 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2017-5754)Record last updated .