VDB
BDU%3A2019-00768
BDU%3A2019-00768
PUBLISHED
CVSS 4.599999904632568 MEDIUM
Уязвимость процессоров Intel и ARM, связанная с использованием спекулятивного выполнения и чтения из памяти до возврата адресов предыдущих операций записи в память, позволяющая нарушителю раскрыть защищаемую информацию
Risk Scores
CVSS 2.0
4.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Oracle Corp., ООО «РусБИТех-Астра», АО «ИВК», Novell Inc., ARM Limited, Juniper Networks Inc., Siemens AG, Intel Corp., Advanced Micro Devices Inc., Beckhoff Automation GmbH & Co. KG | Red Hat Enterprise Linux, Debian GNU/Linux, Solaris, Astra Linux Special Edition (запись в едином реестре российских программ №369), Альт Линукс СПТ (запись в едином реестре российских программ №9), OpenSUSE Leap, ARM Cortex-A75, ARM Cortex-A57, ARM Cortex-A72, ARM Cortex-A73, Junos Space Network Management Platform, SIMATIC ITC1500, SIMATIC ITC1500 PRO, SIMATIC ITC1900, SIMATIC ITC1900 PRO, SIMATIC ITC2200, SIMATIC ITC2200 PRO, Intel Core, ARM Cortex-A76, Intel Xeon, Intel Pentium, Intel Atom, Intel Celeron, AMD, SIMATIC Field PG M5, SIMATIC IPC427E, SIMATIC IPC477E, SIMATIC IPC547E, SIMATIC IPC547G, SIMATIC IPC627D, SIMATIC IPC647D, SIMATIC IPC677D, SIMATIC IPC847D, SIMATIC ITP1000, SIMATIC ET 200SP Open Controller, SIMATIC IPC427C, SIMATIC IPC477C, SINEMA Remote Connect, RUGGEDCOM APE, SIMATIC Field PG M4, SIMATIC IPC427D, SIMATIC IPC477D, SIMATIC IPC477E Pro, SIMATIC IPC627C, SIMATIC IPC647C, SIMATIC IPC677C, SIMATIC IPC827C, SIMATIC IPC847C, SIMATIC S7-1500 CPU S7-1518-4 PN/DP MFP, SIMATIC S7-1500 CPU S7-1518F-4 PN/DP MFP, SIMOTION P320-4E, SIMOTION P320-4S, SINUMERIK 840D sl, SINUMERIK PCU 50.5, SINUMERIK Panels с интегрированной TCU, SINUMERIK TCU 30.3, SIMATIC ET 200 SP Open Controller (F), SIMATIC HMI Basic Panels 2nd Generation, SIMATIC HMI Comfort 15-22 Panels, SIMATIC HMI Comfort 4-12" Panels, SIMATIC HMI Comfort PRO Panels, SIMATIC HMI KTP Mobile Panels, SIMATIC IPC3000 SMART V2, SIMATIC IPC347E, SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK, SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK, SIMATIC S7-1500 Software Controller, Beckhoff ATX Industrial Motherboard, Beckhoff Embedded PC, Beckhoff Basic CPU, Red Hat Virtualization, Red Hat Enterprise MRG, Альт 8 СП Рабочая станция, Red Hat OpenStack Platform, SIMATIC WinAC RTX 2010 incl. F, Red Hat Virtualization Engine, RHEV Manager, Intel Management Engine, Linux |
Timeline
- Feb 26, 2019 CVE Published
- Jan 21, 2026 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
References
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1528 url
- http://www.securitytracker.com/id/1040949 url
- http://xenbits.xen.org/xsa/advisory-263.html url
- https://access.redhat.com/security/vulnerabilities/ssbd url
- https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf url
- https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf url
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3639 url
- https://developer.amd.com/wp-content/resources/124441_AMD64_SpeculativeStoreBypassDisable_Whitepaper_final.pdf url
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability url
- https://exchange.xforce.ibmcloud.com/vulnerabilities/143569 url
- https://exploit-db.com/exploits/44695 url
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10917&cat=SIRT_1&actp=LIST url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.86 url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.11 url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.168 url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.144 url
- https://nvd.nist.gov/vuln/detail/CVE-2018-3639 url
- https://software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf url
- https://software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-Execution-Side-Channel-Mitigations.pdf url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
…and 49 more