UBUNTU-CVE-2017-5715
Dashboard / Vulnerabilities / UBUNTU-CVE-2017-5715
UBUNTU-CVE-2017-5715
Summary:
Details: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
References: https://ubuntu.com/security/CVE-2017-5715, https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown, https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html, https://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.html, https://spectreattack.com/, https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr, http://www.amd.com/en/corporate/speculative-execution, https://developer.arm.com/support/security-update, https://www.qemu.org/2018/01/04/spectre/, https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/, https://webkitgtk.org/security/WSA-2018-0001.html, https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown, https://ubuntu.com/security/notices/USN-3516-1, https://ubuntu.com/security/notices/USN-3530-1, https://ubuntu.com/security/notices/USN-3531-1, https://ubuntu.com/security/notices/USN-3531-2, https://ubuntu.com/security/notices/USN-3542-1, https://ubuntu.com/security/notices/USN-3542-2, https://ubuntu.com/security/notices/USN-3540-2, https://ubuntu.com/security/notices/USN-3540-1, https://ubuntu.com/security/notices/USN-3541-1, https://ubuntu.com/security/notices/USN-3541-2, https://ubuntu.com/security/notices/USN-3549-1, https://ubuntu.com/security/notices/USN-3560-1, https://ubuntu.com/security/notices/USN-3561-1, https://ubuntu.com/security/notices/USN-3580-1, https://ubuntu.com/security/notices/USN-3581-1, https://ubuntu.com/security/notices/USN-3581-2, https://ubuntu.com/security/notices/USN-3582-1, https://ubuntu.com/security/notices/USN-3582-2, https://ubuntu.com/security/notices/USN-3594-1, https://ubuntu.com/security/notices/USN-3597-1, https://ubuntu.com/security/notices/USN-3597-2, https://ubuntu.com/security/notices/USN-3531-3, https://ubuntu.com/security/notices/USN-3620-2, https://ubuntu.com/security/notices/USN-3690-1, https://ubuntu.com/security/notices/USN-3777-3, https://www.cve.org/CVERecord?id=CVE-2017-5715
Affected packages
Package
Name: amd64-microcode
Purl: pkg:deb/ubuntu/[email protected]~ubuntu0.14.04.1?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
