Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

Related vulnerabilities

BDU:2018-00003 (CVE-2017-5715)

Vulnerability from fstec – Published: 2018-01-09 – Updated: 2024-05-30 – View on bdu.fstec.ru Fixed

Title

Уязвимость процессоров Intel, ARM и AMD, связанная с особенностями функционирования модуля прогнозирования ветвлений, позволяющая нарушителю получить доступ к защищенной памяти из программы

Summary

Уязвимость процессоров Intel, ARM и AMD связана с особенностями функционирования модуля прогнозирования ветвлений. Эксплуатация уязвимости позволяет нарушителю получить доступ к защищенной памяти из программы, не обладающей соответствующими привилегиями, путём использования механизма прогнозирования косвенных переходов

Severity

3.8 (Low) CVSS 2.0


                      
                        AV:L/AC:H/Au:S/C:C/I:N/A:N

5.6 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Timing and state manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-200 - Раскрытие информации
CWE-203 - Раскрытие информации в результате расхождений
CWE-264 - Разрешения, привилегии и средства управления доступом

Aliases

CVE-2017-5715, EDB-ID43427

References

104 references

URL
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
http://nvidia.custhelp.com/app/answers/detail/a_id/4609
http://nvidia.custhelp.com/app/answers/detail/a_id/4611
http://nvidia.custhelp.com/app/answers/detail/a_id/4613
http://nvidia.custhelp.com/app/answers/detail/a_id/4614
http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proo…
http://www.amd.com/en/corporate/speculative-execution
http://www.kb.cert.org/vuls/id/584653
http://www.securityfocus.com/bid/102376
http://www.securitytracker.com/id/1040071
http://xenbits.xen.org/xsa/advisory-254.html
https://access.redhat.com/security/vulnerabilities/speculativeexecution
https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/
https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timi…
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715
https://developer.arm.com/support/security-update
https://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with…
https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-s…
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.168
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87
https://lkml.org/lkml/2018/1/4/955
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html
https://security.netapp.com/advisory/ntap-20180104-0001/
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&language…
https://spectreattack.com/
https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023
https://support.citrix.com/article/CTX231399
https://support.f5.com/csp/article/K91229003
https://support.lenovo.com/us/en/solutions/LEN-18282
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-…
https://ubuntu.com/security/notices/USN-3516-1
https://ubuntu.com/security/notices/USN-3530-1
https://ubuntu.com/security/notices/USN-3531-1
https://ubuntu.com/security/notices/USN-3531-2
https://ubuntu.com/security/notices/USN-3531-3
https://ubuntu.com/security/notices/USN-3540-1
https://ubuntu.com/security/notices/USN-3540-2
https://ubuntu.com/security/notices/USN-3541-1
https://ubuntu.com/security/notices/USN-3541-2
https://ubuntu.com/security/notices/USN-3542-1
https://ubuntu.com/security/notices/USN-3542-2
https://ubuntu.com/security/notices/USN-3549-1
https://ubuntu.com/security/notices/USN-3560-1
https://ubuntu.com/security/notices/USN-3561-1
https://ubuntu.com/security/notices/USN-3580-1
https://ubuntu.com/security/notices/USN-3581-1
https://ubuntu.com/security/notices/USN-3581-2
https://ubuntu.com/security/notices/USN-3582-1
https://ubuntu.com/security/notices/USN-3582-2
https://ubuntu.com/security/notices/USN-3594-1
https://ubuntu.com/security/notices/USN-3597-1
https://ubuntu.com/security/notices/USN-3597-2
https://ubuntu.com/security/notices/USN-3620-2
https://ubuntu.com/security/notices/USN-3690-1
https://ubuntu.com/security/notices/USN-3777-3
https://usn.ubuntu.com/usn/usn-3516-1
https://usn.ubuntu.com/usn/usn-3530-1
https://usn.ubuntu.com/usn/usn-3531-1
https://usn.ubuntu.com/usn/usn-3531-2
https://usn.ubuntu.com/usn/usn-3531-3
https://usn.ubuntu.com/usn/usn-3540-1
https://usn.ubuntu.com/usn/usn-3540-2
https://usn.ubuntu.com/usn/usn-3541-1
https://usn.ubuntu.com/usn/usn-3541-2
https://usn.ubuntu.com/usn/usn-3542-1
https://usn.ubuntu.com/usn/usn-3542-2
https://usn.ubuntu.com/usn/usn-3549-1
https://usn.ubuntu.com/usn/usn-3560-1
https://usn.ubuntu.com/usn/usn-3561-1
https://usn.ubuntu.com/usn/usn-3580-1
https://usn.ubuntu.com/usn/usn-3581-1
https://usn.ubuntu.com/usn/usn-3581-2
https://usn.ubuntu.com/usn/usn-3582-1
https://usn.ubuntu.com/usn/usn-3582-2
https://usn.ubuntu.com/usn/usn-3594-1
https://usn.ubuntu.com/usn/usn-3597-1
https://usn.ubuntu.com/usn/usn-3597-2
https://usn.ubuntu.com/usn/usn-3620-2
https://usn.ubuntu.com/usn/usn-3690-1
https://usn.ubuntu.com/usn/usn-3777-3
https://webkit.org/blog/8048/what-spectre-and-meltdown-mean-for-webkit/
https://webkitgtk.org/security/WSA-2018-0001.html
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown
https://www.cve.org/CVERecord?id=CVE-2017-5715
https://www.exploit-db.com/exploits/43427/
https://www.qemu.org/2018/01/04/spectre/
https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/
https://www.synology.com/support/security/Synology_SA_18_01
https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html

Impacted products

95 products from 12 vendors

Vendors

Canonical Ltd., ООО «РусБИТех-Астра», Сообщество свободного программного обеспечения, Novell Inc., Intel Corp., ARM Limited, Advanced Micro Devices Inc., Siemens AG, Beckhoff Automation GmbH & Co. KG, Apple Inc., Yokogawa Electric Corporation, АО «НТЦ ИТ РОСА»

Products

Ubuntu, Astra Linux Special Edition (запись в едином реестре российских программ №369), Debian GNU/Linux, OpenSUSE Leap, Intel Atom, Intel Xeon, Intel Pentium, Intel Core, Intel Celeron, ARM Cortex-A75, ARM Cortex-R7, ARM Cortex-R8, ARM Cortex-A9, ARM Cortex-A17, ARM Cortex-A57, ARM Cortex-A72, ARM Cortex-A73, AMD, SIMATIC IPC547E, SIMATIC IPC827D, RUGGEDCOM APE, RUGGEDCOM RX1400 VPE, SIMATIC ET 200SP Open Controller, SIMATIC Field PG M4, SIMATIC Field PG M5, SIMATIC HMI Basic Panels 2nd Generation, SIMATIC HMI Comfort 15-22 Panels, SIMATIC HMI Comfort 4-12" Panels, SIMATIC HMI Comfort PRO Panels, SIMATIC HMI KTP Mobile Panels, SIMATIC IPC227E, SIMATIC IPC277E, SIMATIC IPC3000 SMART V2, SIMATIC IPC327E, SIMATIC IPC347E, SIMATIC IPC377E, SIMATIC IPC427C, SIMATIC IPC427D, SIMATIC IPC427E, SIMATIC IPC477C, SIMATIC IPC477D, SIMATIC IPC477E, SIMATIC IPC477E Pro, SIMATIC IPC547G, SIMATIC IPC627C, SIMATIC IPC627D, SIMATIC IPC647D, SIMATIC IPC677C, SIMATIC IPC677D, SIMATIC IPC827C, SIMATIC IPC847C, SIMATIC IPC847D, SIMATIC ITP1000, SIMATIC S7-1500 Software Controller, SIMATIC S7-1518-4 PN/DP ODK, SIMATIC S7-1518F-4 PN/DP ODK, SIMOTION P320-4E, SIMOTION P320-4S, SINEMA Remote Connect, SINUMERIK 840D sl, SINUMERIK Panels интегрированные с TCU, SINUMERIK TCU, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, SUSE Linux Enterprise Workstation Extension, SUSE OpenStack Cloud, Beckhoff ATX Industrial Motherboard, Beckhoff Embedded PC, Beckhoff Basic CPU, SINUMERIK PCU 50.5, Suse Linux Enterprise Server, SUSE Linux Enterprise Module for Basesystem, SUSE Linux Enterprise Module for Desktop Applications, SUSE Linux Enterprise Module for Development Tools, SUSE Linux Enterprise Build System Kit, SUSE CaaS Platform, SUSE Linux Enterprise High Availability, SUSE Linux Enterprise Live Patching, SUSE Linux Enterprise Module for Legacy Software, SUSE Linux Enterprise Module for Live Patching, SUSE Linux Enterprise Module for Public Cloud, SUSE Linux Enterprise Point of Sale, SUSE Linux Enterprise Real Time Extension, SUSE Linux Enterprise Module for Server Applications, MacOS, OpenStack Cloud Magnum Orchestration, OS X El Capitan, iOS, SIMATIC WinAC RTX 2010 incl. F, CENTUM VP, РОСА Кобальт (запись в едином реестре российских программ №1999), RELS, Linux

Versions

14.04 LTS (Ubuntu), 1.5 «Смоленск» (Astra Linux Special Edition), 17.04 (Ubuntu), 16.04 LTS (Ubuntu), 9 (Debian GNU/Linux), 42.2 (OpenSUSE Leap), 42.3 (OpenSUSE Leap), - (Intel Atom), - (Intel Xeon), - (Intel Pentium), - (Intel Core), - (Intel Celeron), - (ARM Cortex-A75), - (ARM Cortex-R7), - (ARM Cortex-R8), - (ARM Cortex-A9), - (ARM Cortex-A17), - (ARM Cortex-A57), - (ARM Cortex-A72), - (ARM Cortex-A73), - (AMD), 17.10 (Ubuntu), 18.04 LTS (Ubuntu), 1.6 «Смоленск» (Astra Linux Special Edition), до R1.30.0 (SIMATIC IPC547E), до 19.02.11 (SIMATIC IPC827D), до 9.4 (RUGGEDCOM APE), до 9.4 (RUGGEDCOM RX1400 VPE), до 2.6 (SIMATIC ET 200SP Open Controller), до 18.01.08 (SIMATIC Field PG M4), до 22.01.05 (SIMATIC Field PG M5), от 14 до 14 SP1 Upd 6 (SIMATIC HMI Basic Panels 2nd Generation), от 15 до 15 Upd 2 (SIMATIC HMI Basic Panels 2nd Generation), от 14 до 14 SP1 Upd 6 (SIMATIC HMI Comfort 15-22 Panels), от 15 до 15 Upd 2 (SIMATIC HMI Comfort 15-22 Panels), от 14 до 14 SP1 Upd 6 (SIMATIC HMI Comfort 4-12" Panels), от 15 до 15 Upd 2 (SIMATIC HMI Comfort 4-12" Panels), от 14 до 14 SP1 Upd 6 (SIMATIC HMI Comfort PRO Panels), от 15 до 15 Upd 2 (SIMATIC HMI Comfort PRO Panels), от 14 до 14 SP1 Upd 6 (SIMATIC HMI KTP Mobile Panels), от 15 до 15 Upd 2 (SIMATIC HMI KTP Mobile Panels), до 20.01.11 (SIMATIC IPC227E), до 20.01.11 (SIMATIC IPC277E), до SMS-002 1.4 (SIMATIC IPC3000 SMART V2), до 1.6.3C (SIMATIC IPC327E), до SMS-002 1.4 (SIMATIC IPC347E), до 1.6.3C (SIMATIC IPC377E), - (SIMATIC IPC427C), до 17.0x.12 (SIMATIC IPC427D), до 21.01.08 (SIMATIC IPC427E), - (SIMATIC IPC477C), до 17.0x.12 (SIMATIC IPC477D), до 21.01.08 (SIMATIC IPC477E), до 21.01.08 (SIMATIC IPC477E Pro), до R1.21.0 (SIMATIC IPC547G), до 15.02.14 (SIMATIC IPC627C), до 19.02.10 (SIMATIC IPC627D), до 19.01.11 (SIMATIC IPC647D), до 15.02.14 (SIMATIC IPC677C), до 19.02.10 (SIMATIC IPC677D), до 15.02.14 (SIMATIC IPC827C), до 15.01.13 (SIMATIC IPC847C), до 19.01.11 (SIMATIC IPC847D), до 23.01.03 (SIMATIC ITP1000), до 2.5 (SIMATIC S7-1500 Software Controller), до 2.5.2 (SIMATIC S7-1518-4 PN/DP ODK), до 2.5.2 (SIMATIC S7-1518F-4 PN/DP ODK), до 17.0x.13 (SIMOTION P320-4E), до 17.0x.13 (SIMOTION P320-4S), - (SINEMA Remote Connect), от 50.5 (SINUMERIK 840D sl), до 2016 года (SINUMERIK Panels интегрированные с TCU), от 30.3 (SINUMERIK TCU), 12 SP3 (Suse Linux Enterprise Desktop), 12 SP4 (Suse Linux Enterprise Desktop), 4 (SUSE Enterprise Storage), 12 SP2 (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-BCL (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-ESPOS (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Software Development Kit), 12 SP4 (SUSE Linux Enterprise Software Development Kit), 12 SP3 (SUSE Linux Enterprise Workstation Extension), 12 SP4 (SUSE Linux Enterprise Workstation Extension), 7 (SUSE OpenStack Cloud), CBxx56 (Beckhoff ATX Industrial Motherboard), CBxx55 (Beckhoff ATX Industrial Motherboard), CBxx63 (Beckhoff ATX Industrial Motherboard), CBxx61 (Beckhoff ATX Industrial Motherboard), CBxx60 (Beckhoff ATX Industrial Motherboard), CBxx64 (Beckhoff ATX Industrial Motherboard), CX51x0 (Beckhoff Embedded PC), CX20x0 (Beckhoff Basic CPU), - (SINUMERIK PCU 50.5), 12 SP3 (Suse Linux Enterprise Server), 12 SP4 (Suse Linux Enterprise Server), 11 SP4 (Suse Linux Enterprise Server), 11 SP4 (SUSE Linux Enterprise Software Development Kit), 12.04 ESM (Ubuntu), 15 (SUSE Linux Enterprise Module for Basesystem), 15 SP1 (SUSE Linux Enterprise Module for Basesystem), 15.0 (OpenSUSE Leap), 15 (SUSE Linux Enterprise Module for Desktop Applications), 15 (SUSE Linux Enterprise Module for Development Tools), 15 SP1 (SUSE Linux Enterprise Module for Development Tools), 15 SP1 (SUSE Linux Enterprise Module for Desktop Applications), 12 SP3 (SUSE Linux Enterprise Build System Kit), 12 SP2-BCL (Suse Linux Enterprise Server), 12 SP2-ESPOS (Suse Linux Enterprise Server), - (SUSE CaaS Platform), 12 SP2 (SUSE Linux Enterprise High Availability), 12 SP3 (SUSE Linux Enterprise High Availability), 12 SP4 (SUSE Linux Enterprise High Availability), 15 (SUSE Linux Enterprise High Availability), 15 SP1 (SUSE Linux Enterprise High Availability), 12 SP3 (SUSE Linux Enterprise Live Patching), 15 SP1 (SUSE Linux Enterprise Module for Legacy Software), 15 (SUSE Linux Enterprise Module for Legacy Software), 15 (SUSE Linux Enterprise Module for Live Patching), 12 (SUSE Linux Enterprise Module for Public Cloud), 11 SP3 (SUSE Linux Enterprise Point of Sale), 11 SP4 (SUSE Linux Enterprise Real Time Extension), 12 SP3 (SUSE Linux Enterprise Real Time Extension), 12-LTSS (Suse Linux Enterprise Server), 11 SP3-LTSS (SUSE Linux Enterprise Server for SAP Applications), 11 SP4 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12-LTSS (SUSE Linux Enterprise Server for SAP Applications), 15 (SUSE Linux Enterprise Workstation Extension), 15 SP1 (SUSE Linux Enterprise Workstation Extension), 12 SP1-LTSS (Suse Linux Enterprise Server), 12 SP2-LTSS (Suse Linux Enterprise Server), 15 SP1 (SUSE Linux Enterprise Module for Live Patching), 15 SP1 (SUSE Linux Enterprise Module for Server Applications), 15 (SUSE Linux Enterprise Module for Server Applications), 8 (Debian GNU/Linux), 10.12.6 (MacOS), 11 SP3-LTSS (Suse Linux Enterprise Server), 6 (SUSE OpenStack Cloud), 7 (OpenStack Cloud Magnum Orchestration), 12 SP2-CLIEN (SUSE Linux Enterprise Point of Sale), 7 (Debian GNU/Linux), 12 SP2 (SUSE Linux Enterprise Build System Kit), 12 SP2 (Suse Linux Enterprise Desktop), 12 (SUSE Linux Enterprise High Availability), 12 SP1 (SUSE Linux Enterprise High Availability), 12 (SUSE Linux Enterprise Live Patching), 12 SP2 (SUSE Linux Enterprise Real Time Extension), 12 SP2 (Suse Linux Enterprise Server), 12 SP2 (SUSE Linux Enterprise Software Development Kit), 12 SP2 (SUSE Linux Enterprise Workstation Extension), до 10.11.6 (OS X El Capitan), 10.13.2 (MacOS), до 11.2.2 (iOS), до SP3 (SIMATIC WinAC RTX 2010 incl. F), до R6.08.00 (CENTUM VP), - (РОСА Кобальт), 6.x (RELS), от 4.0 до 4.4.167 включительно (Linux), от 4.15.0 до 4.15.7 включительно (Linux), от 4.5 до 4.9.86 включительно (Linux), от 4.10 до 4.14.24 включительно (Linux)

Product types

Operating system, Appliance software, Firmware, Network appliance software, Industrial control system software, Средство АСУ ТП, ПО программно-аппаратного средства АСУ ТП, Application software

Platforms

Canonical Ltd. Ubuntu 14.04 LTS, ООО «РусБИТех-Астра» Astra Linux Special Edition 1.5 «Смоленск» (запись в едином реестре российских программ №369), Canonical Ltd. Ubuntu 17.04, Canonical Ltd. Ubuntu 16.04 LTS, Сообщество свободного программного обеспечения Debian GNU/Linux 9, Novell Inc. OpenSUSE Leap 42.2, Novell Inc. OpenSUSE Leap 42.3, Canonical Ltd. Ubuntu 17.10, Canonical Ltd. Ubuntu 18.04 LTS, ООО «РусБИТех-Астра» Astra Linux Special Edition 1.6 «Смоленск» (запись в едином реестре российских программ №369), Novell Inc. Suse Linux Enterprise Desktop 12 SP3, Novell Inc. Suse Linux Enterprise Desktop 12 SP4, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-BCL, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP3, Novell Inc. Suse Linux Enterprise Server 12 SP3, Novell Inc. Suse Linux Enterprise Server 12 SP4, Novell Inc. Suse Linux Enterprise Server 11 SP4, Canonical Ltd. Ubuntu 12.04 ESM, Novell Inc. OpenSUSE Leap 15.0, Novell Inc. Suse Linux Enterprise Server 12 SP2-BCL, Novell Inc. Suse Linux Enterprise Server 12 SP2-ESPOS, Novell Inc. Suse Linux Enterprise Server 12-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP3-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP4, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1-LTSS, Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12-LTSS, Novell Inc. Suse Linux Enterprise Server 12 SP1-LTSS, Novell Inc. Suse Linux Enterprise Server 12 SP2-LTSS, Сообщество свободного программного обеспечения Debian GNU/Linux 8, Apple Inc. MacOS 10.12.6, Novell Inc. Suse Linux Enterprise Server 11 SP3-LTSS, Сообщество свободного программного обеспечения Debian GNU/Linux 7, Novell Inc. Suse Linux Enterprise Desktop 12 SP2, Novell Inc. Suse Linux Enterprise Server 12 SP2, Apple Inc. OS X El Capitan до 10.11.6, Apple Inc. MacOS 10.13.2, Apple Inc. iOS до 11.2.2, АО «НТЦ ИТ РОСА» РОСА Кобальт - (запись в едином реестре российских программ №1999), АО «НТЦ ИТ РОСА» RELS 6.x

Mitigations

Возможны следующие меры по устранению уязвимости: - вариант 1: на аппаратном уровне; - вариант 2: на системном уровне; - вариант 3: на прикладном уровне. Первый вариант предполагает замену процессора, однако данный вариант трудно реализуем на практике. Наиболее актуален второй вариант, предполагающий установку обновления, выпущенного разработчиками системного программного обеспечения. Третий вариант применим к браузерам и возможен лишь для противодействия векторам атак, связанных с использованием JavaScript. Подробные рекомендации по устранению представлены на сайтах разработчиков программного обеспечения: http://nvidia.custhelp.com/app/answers/detail/a_id/4609 http://nvidia.custhelp.com/app/answers/detail/a_id/4611 http://nvidia.custhelp.com/app/answers/detail/a_id/4613 http://nvidia.custhelp.com/app/answers/detail/a_id/4614 http://xenbits.xen.org/xsa/advisory-254.html https://access.redhat.com/security/vulnerabilities/speculativeexecution https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/ https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ https://webkit.org/blog/8048/what-spectre-and-meltdown-mean-for-webkit/ https://developer.arm.com/support/security-update https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002 https://security.netapp.com/advisory/ntap-20180104-0001/ https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr https://support.citrix.com/article/CTX231399 https://support.f5.com/csp/article/K91229003 https://support.lenovo.com/us/en/solutions/LEN-18282 https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/ https://www.synology.com/support/security/Synology_SA_18_01 https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html https://support.apple.com/en-us/HT208394 https://support.apple.com/en-us/HT208397 https://support.apple.com/en-us/HT208401 https://support.apple.com/en-us/HT208403 https://source.android.com/security/bulletin/2018-01-01 http://www.huawei.com/en/psirt/security-notices/huawei-sn-20180104-01-intel-en Для ОС ОН «Стрелец»: Обновление программного обеспечения libvirt до версии 3.0.0-4+deb9u5 Для Linux: https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.168 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87

Credits

Данная уязвимость связана с атакой, получившей название «Spectre»

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd., \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Novell Inc., Intel Corp., ARM Limited, Advanced Micro Devices Inc., Siemens AG, Beckhoff Automation GmbH \u0026 Co. KG, Apple Inc., Yokogawa Electric Corporation, \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "14.04 LTS (Ubuntu), 1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), 17.04 (Ubuntu), 16.04 LTS (Ubuntu), 9 (Debian GNU/Linux), 42.2 (OpenSUSE Leap), 42.3 (OpenSUSE Leap), - (Intel Atom), - (Intel Xeon), - (Intel Pentium), - (Intel Core), - (Intel Celeron), - (ARM Cortex-A75), - (ARM Cortex-R7), - (ARM Cortex-R8), - (ARM Cortex-A9), - (ARM Cortex-A17), - (ARM Cortex-A57), - (ARM Cortex-A72), - (ARM Cortex-A73), - (AMD), 17.10 (Ubuntu), 18.04 LTS (Ubuntu), 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), \u0434\u043e R1.30.0 (SIMATIC IPC547E), \u0434\u043e 19.02.11 (SIMATIC IPC827D), \u0434\u043e 9.4 (RUGGEDCOM APE), \u0434\u043e 9.4 (RUGGEDCOM RX1400 VPE), \u0434\u043e 2.6 (SIMATIC ET 200SP Open Controller), \u0434\u043e 18.01.08 (SIMATIC Field PG M4), \u0434\u043e 22.01.05 (SIMATIC Field PG M5), \u043e\u0442 14 \u0434\u043e 14 SP1 Upd 6 (SIMATIC HMI Basic Panels 2nd Generation), \u043e\u0442 15 \u0434\u043e 15 Upd 2 (SIMATIC HMI Basic Panels 2nd Generation), \u043e\u0442 14 \u0434\u043e 14 SP1 Upd 6 (SIMATIC HMI Comfort 15-22 Panels), \u043e\u0442 15 \u0434\u043e 15 Upd 2 (SIMATIC HMI Comfort 15-22 Panels), \u043e\u0442 14 \u0434\u043e 14 SP1 Upd 6 (SIMATIC HMI Comfort 4-12\" Panels), \u043e\u0442 15 \u0434\u043e 15 Upd 2 (SIMATIC HMI Comfort 4-12\" Panels), \u043e\u0442 14 \u0434\u043e 14 SP1 Upd 6 (SIMATIC HMI Comfort PRO Panels), \u043e\u0442 15 \u0434\u043e 15 Upd 2 (SIMATIC HMI Comfort PRO Panels), \u043e\u0442 14 \u0434\u043e 14 SP1 Upd 6 (SIMATIC HMI KTP Mobile Panels), \u043e\u0442 15 \u0434\u043e 15 Upd 2 (SIMATIC HMI KTP Mobile Panels), \u0434\u043e 20.01.11 (SIMATIC IPC227E), \u0434\u043e 20.01.11 (SIMATIC IPC277E), \u0434\u043e SMS-002 1.4 (SIMATIC IPC3000 SMART V2), \u0434\u043e 1.6.3C (SIMATIC IPC327E), \u0434\u043e SMS-002 1.4 (SIMATIC IPC347E), \u0434\u043e 1.6.3C (SIMATIC IPC377E), - (SIMATIC IPC427C), \u0434\u043e 17.0x.12 (SIMATIC IPC427D), \u0434\u043e 21.01.08 (SIMATIC IPC427E), - (SIMATIC IPC477C), \u0434\u043e 17.0x.12 (SIMATIC IPC477D), \u0434\u043e 21.01.08 (SIMATIC IPC477E), \u0434\u043e 21.01.08 (SIMATIC IPC477E Pro), \u0434\u043e R1.21.0 (SIMATIC IPC547G), \u0434\u043e 15.02.14 (SIMATIC IPC627C), \u0434\u043e 19.02.10 (SIMATIC IPC627D), \u0434\u043e 19.01.11 (SIMATIC IPC647D), \u0434\u043e 15.02.14 (SIMATIC IPC677C), \u0434\u043e 19.02.10 (SIMATIC IPC677D), \u0434\u043e 15.02.14 (SIMATIC IPC827C), \u0434\u043e 15.01.13 (SIMATIC IPC847C), \u0434\u043e 19.01.11 (SIMATIC IPC847D), \u0434\u043e 23.01.03 (SIMATIC ITP1000), \u0434\u043e 2.5 (SIMATIC S7-1500 Software Controller), \u0434\u043e 2.5.2 (SIMATIC S7-1518-4 PN/DP ODK), \u0434\u043e 2.5.2 (SIMATIC S7-1518F-4 PN/DP ODK), \u0434\u043e 17.0x.13 (SIMOTION P320-4E), \u0434\u043e 17.0x.13 (SIMOTION P320-4S), - (SINEMA Remote Connect), \u043e\u0442 50.5 (SINUMERIK 840D sl), \u0434\u043e 2016 \u0433\u043e\u0434\u0430 (SINUMERIK Panels \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 TCU), \u043e\u0442 30.3 (SINUMERIK TCU), 12 SP3 (Suse Linux Enterprise Desktop), 12 SP4 (Suse Linux Enterprise Desktop), 4 (SUSE Enterprise Storage), 12 SP2 (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-BCL (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-ESPOS (SUSE Linux Enterprise Server for SAP Applications), 12 SP2-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Software Development Kit), 12 SP4 (SUSE Linux Enterprise Software Development Kit), 12 SP3 (SUSE Linux Enterprise Workstation Extension), 12 SP4 (SUSE Linux Enterprise Workstation Extension), 7 (SUSE OpenStack Cloud), CBxx56 (Beckhoff ATX Industrial Motherboard), CBxx55 (Beckhoff ATX Industrial Motherboard), CBxx63 (Beckhoff ATX Industrial Motherboard), CBxx61 (Beckhoff ATX Industrial Motherboard), CBxx60 (Beckhoff ATX Industrial Motherboard), CBxx64 (Beckhoff ATX Industrial Motherboard), CX51x0 (Beckhoff Embedded PC), CX20x0 (Beckhoff Basic CPU), - (SINUMERIK PCU 50.5), 12 SP3 (Suse Linux Enterprise Server), 12 SP4 (Suse Linux Enterprise Server), 11 SP4 (Suse Linux Enterprise Server), 11 SP4 (SUSE Linux Enterprise Software Development Kit), 12.04 ESM (Ubuntu), 15 (SUSE Linux Enterprise Module for Basesystem), 15 SP1 (SUSE Linux Enterprise Module for Basesystem), 15.0 (OpenSUSE Leap), 15 (SUSE Linux Enterprise Module for Desktop Applications), 15 (SUSE Linux Enterprise Module for Development Tools), 15 SP1 (SUSE Linux Enterprise Module for Development Tools), 15 SP1 (SUSE Linux Enterprise Module for Desktop Applications), 12 SP3 (SUSE Linux Enterprise Build System Kit), 12 SP2-BCL (Suse Linux Enterprise Server), 12 SP2-ESPOS (Suse Linux Enterprise Server), - (SUSE CaaS Platform), 12 SP2 (SUSE Linux Enterprise High Availability), 12 SP3 (SUSE Linux Enterprise High Availability), 12 SP4 (SUSE Linux Enterprise High Availability), 15 (SUSE Linux Enterprise High Availability), 15 SP1 (SUSE Linux Enterprise High Availability), 12 SP3 (SUSE Linux Enterprise Live Patching), 15 SP1 (SUSE Linux Enterprise Module for Legacy Software), 15 (SUSE Linux Enterprise Module for Legacy Software), 15 (SUSE Linux Enterprise Module for Live Patching), 12 (SUSE Linux Enterprise Module for Public Cloud), 11 SP3 (SUSE Linux Enterprise Point of Sale), 11 SP4 (SUSE Linux Enterprise Real Time Extension), 12 SP3 (SUSE Linux Enterprise Real Time Extension), 12-LTSS (Suse Linux Enterprise Server), 11 SP3-LTSS (SUSE Linux Enterprise Server for SAP Applications), 11 SP4 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1-LTSS (SUSE Linux Enterprise Server for SAP Applications), 12-LTSS (SUSE Linux Enterprise Server for SAP Applications), 15 (SUSE Linux Enterprise Workstation Extension), 15 SP1 (SUSE Linux Enterprise Workstation Extension), 12 SP1-LTSS (Suse Linux Enterprise Server), 12 SP2-LTSS (Suse Linux Enterprise Server), 15 SP1 (SUSE Linux Enterprise Module for Live Patching), 15 SP1 (SUSE Linux Enterprise Module for Server Applications), 15 (SUSE Linux Enterprise Module for Server Applications), 8 (Debian GNU/Linux), 10.12.6 (MacOS), 11 SP3-LTSS (Suse Linux Enterprise Server), 6 (SUSE OpenStack Cloud), 7 (OpenStack Cloud Magnum Orchestration), 12 SP2-CLIEN (SUSE Linux Enterprise Point of Sale), 7 (Debian GNU/Linux), 12 SP2 (SUSE Linux Enterprise Build System Kit), 12 SP2 (Suse Linux Enterprise Desktop), 12 (SUSE Linux Enterprise High Availability), 12 SP1 (SUSE Linux Enterprise High Availability), 12 (SUSE Linux Enterprise Live Patching), 12 SP2 (SUSE Linux Enterprise Real Time Extension), 12 SP2 (Suse Linux Enterprise Server), 12 SP2 (SUSE Linux Enterprise Software Development Kit), 12 SP2 (SUSE Linux Enterprise Workstation Extension), \u0434\u043e 10.11.6 (OS X El Capitan), 10.13.2 (MacOS), \u0434\u043e 11.2.2 (iOS), \u0434\u043e SP3 (SIMATIC WinAC RTX 2010 incl. F), \u0434\u043e R6.08.00 (CENTUM VP), - (\u0420\u041e\u0421\u0410 \u041a\u043e\u0431\u0430\u043b\u044c\u0442), 6.x (RELS), \u043e\u0442 4.0 \u0434\u043e 4.4.167 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.15.0 \u0434\u043e 4.15.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.5 \u0434\u043e 4.9.86 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.10 \u0434\u043e 4.14.24 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n-\n\u0432\u0430\u0440\u0438\u0430\u043d\u0442 1: \u043d\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435;\n-\n\u0432\u0430\u0440\u0438\u0430\u043d\u0442 2: \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435;\n-\n\u0432\u0430\u0440\u0438\u0430\u043d\u0442 3: \u043d\u0430 \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435.\n\u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0437\u0430\u043c\u0435\u043d\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0442\u0440\u0443\u0434\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \n\u0422\u0440\u0435\u0442\u0438\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u043b\u0438\u0448\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u0435\u043a\u0442\u043e\u0440\u0430\u043c \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c JavaScript.\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f:\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4609\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4611\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4613\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4614\nhttp://xenbits.xen.org/xsa/advisory-254.html\nhttps://access.redhat.com/security/vulnerabilities/speculativeexecution\nhttps://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/\nhttps://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/\nhttps://webkit.org/blog/8048/what-spectre-and-meltdown-mean-for-webkit/\nhttps://developer.arm.com/support/security-update\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002\nhttps://security.netapp.com/advisory/ntap-20180104-0001/\nhttps://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr\nhttps://support.citrix.com/article/CTX231399\nhttps://support.f5.com/csp/article/K91229003\nhttps://support.lenovo.com/us/en/solutions/LEN-18282\nhttps://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/\nhttps://www.synology.com/support/security/Synology_SA_18_01\nhttps://www.vmware.com/us/security/advisories/VMSA-2018-0002.html\nhttps://support.apple.com/en-us/HT208394\nhttps://support.apple.com/en-us/HT208397\nhttps://support.apple.com/en-us/HT208401\nhttps://support.apple.com/en-us/HT208403\nhttps://source.android.com/security/bulletin/2018-01-01\nhttp://www.huawei.com/en/psirt/security-notices/huawei-sn-20180104-01-intel-en\n\n\n\n\u0414\u043b\u044f \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f libvirt \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.0.0-4+deb9u5\n\n\u0414\u043b\u044f Linux:\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.168\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.01.2018",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "30.05.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "09.01.2018",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2018-00003",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2017-5715, EDB-ID43427",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Debian GNU/Linux, OpenSUSE Leap, Intel Atom, Intel Xeon, Intel Pentium, Intel Core, Intel Celeron, ARM Cortex-A75, ARM Cortex-R7, ARM Cortex-R8, ARM Cortex-A9, ARM Cortex-A17, ARM Cortex-A57, ARM Cortex-A72, ARM Cortex-A73, AMD, SIMATIC IPC547E, SIMATIC IPC827D, RUGGEDCOM APE, RUGGEDCOM RX1400 VPE, SIMATIC ET 200SP Open Controller, SIMATIC Field PG M4, SIMATIC Field PG M5, SIMATIC HMI Basic Panels 2nd Generation, SIMATIC HMI Comfort 15-22 Panels, SIMATIC HMI Comfort 4-12\" Panels, SIMATIC HMI Comfort PRO Panels, SIMATIC HMI KTP Mobile Panels, SIMATIC IPC227E, SIMATIC IPC277E, SIMATIC IPC3000 SMART V2, SIMATIC IPC327E, SIMATIC IPC347E, SIMATIC IPC377E, SIMATIC IPC427C, SIMATIC IPC427D, SIMATIC IPC427E, SIMATIC IPC477C, SIMATIC IPC477D, SIMATIC IPC477E, SIMATIC IPC477E Pro, SIMATIC IPC547G, SIMATIC IPC627C, SIMATIC IPC627D, SIMATIC IPC647D, SIMATIC IPC677C, SIMATIC IPC677D, SIMATIC IPC827C, SIMATIC IPC847C, SIMATIC IPC847D, SIMATIC ITP1000, SIMATIC S7-1500 Software Controller, SIMATIC S7-1518-4 PN/DP ODK, SIMATIC S7-1518F-4 PN/DP ODK, SIMOTION P320-4E, SIMOTION P320-4S, SINEMA Remote Connect, SINUMERIK 840D sl, SINUMERIK Panels \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 TCU, SINUMERIK TCU, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, SUSE Linux Enterprise Workstation Extension, SUSE OpenStack Cloud, Beckhoff ATX Industrial Motherboard, Beckhoff Embedded PC, Beckhoff Basic CPU, SINUMERIK PCU 50.5, Suse Linux Enterprise Server, SUSE Linux Enterprise Module for Basesystem, SUSE Linux Enterprise Module for Desktop Applications, SUSE Linux Enterprise Module for Development Tools, SUSE Linux Enterprise Build System Kit, SUSE CaaS Platform, SUSE Linux Enterprise High Availability, SUSE Linux Enterprise Live Patching, SUSE Linux Enterprise Module for Legacy Software, SUSE Linux Enterprise Module for Live Patching, SUSE Linux Enterprise Module for Public Cloud, SUSE Linux Enterprise Point of Sale, SUSE Linux Enterprise Real Time Extension, SUSE Linux Enterprise Module for Server Applications, MacOS, OpenStack Cloud Magnum Orchestration, OS X El Capitan, iOS, SIMATIC WinAC RTX 2010 incl. F, CENTUM VP, \u0420\u041e\u0421\u0410 \u041a\u043e\u0431\u0430\u043b\u044c\u0442 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161999), RELS, Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Canonical Ltd. Ubuntu 14.04 LTS , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.5 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Canonical Ltd. Ubuntu 17.04 , Canonical Ltd. Ubuntu 16.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , Novell Inc. OpenSUSE Leap 42.2 , Novell Inc. OpenSUSE Leap 42.3 , Canonical Ltd. Ubuntu 17.10 , Canonical Ltd. Ubuntu 18.04 LTS , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Novell Inc. Suse Linux Enterprise Desktop 12 SP3 , Novell Inc. Suse Linux Enterprise Desktop 12 SP4 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-BCL , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP3 , Novell Inc. Suse Linux Enterprise Server 12 SP3 , Novell Inc. Suse Linux Enterprise Server 12 SP4 , Novell Inc. Suse Linux Enterprise Server 11 SP4 , Canonical Ltd. Ubuntu 12.04 ESM , Novell Inc. OpenSUSE Leap 15.0 , Novell Inc. Suse Linux Enterprise Server 12 SP2-BCL , Novell Inc. Suse Linux Enterprise Server 12 SP2-ESPOS , Novell Inc. Suse Linux Enterprise Server 12-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP3-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP4 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP1-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP2-LTSS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , Apple Inc. MacOS 10.12.6 , Novell Inc. Suse Linux Enterprise Server 11 SP3-LTSS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 7 , Novell Inc. Suse Linux Enterprise Desktop 12 SP2 , Novell Inc. Suse Linux Enterprise Server 12 SP2 , Apple Inc. OS X El Capitan \u0434\u043e 10.11.6 , Apple Inc. MacOS 10.13.2 , Apple Inc. iOS \u0434\u043e 11.2.2 , \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb \u0420\u041e\u0421\u0410 \u041a\u043e\u0431\u0430\u043b\u044c\u0442 -  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161999), \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb RELS 6.x ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, ARM \u0438 AMD, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u044f \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CWE-200), \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0439 (CWE-203), \u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, ARM \u0438 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u044f \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u0435 \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0435\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u0443\u0442\u0451\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u00abSpectre\u00bb",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html\nhttp://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4609\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4611\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4613\nhttp://nvidia.custhelp.com/app/answers/detail/a_id/4614\nhttp://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html\nhttp://www.amd.com/en/corporate/speculative-execution\nhttp://www.kb.cert.org/vuls/id/584653\nhttp://www.securityfocus.com/bid/102376\nhttp://www.securitytracker.com/id/1040071\nhttp://xenbits.xen.org/xsa/advisory-254.html\nhttps://access.redhat.com/security/vulnerabilities/speculativeexecution\nhttps://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/\nhttps://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715\nhttps://developer.arm.com/support/security-update\nhttps://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.html\nhttps://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.168\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87\nhttps://lkml.org/lkml/2018/1/4/955\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002\nhttps://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html\nhttps://security.netapp.com/advisory/ntap-20180104-0001/\nhttps://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr\nhttps://spectreattack.com/\nhttps://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023\nhttps://support.citrix.com/article/CTX231399\nhttps://support.f5.com/csp/article/K91229003\nhttps://support.lenovo.com/us/en/solutions/LEN-18282\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel\nhttps://ubuntu.com/security/notices/USN-3516-1\nhttps://ubuntu.com/security/notices/USN-3530-1\nhttps://ubuntu.com/security/notices/USN-3531-1\nhttps://ubuntu.com/security/notices/USN-3531-2\nhttps://ubuntu.com/security/notices/USN-3531-3\nhttps://ubuntu.com/security/notices/USN-3540-1\nhttps://ubuntu.com/security/notices/USN-3540-2\nhttps://ubuntu.com/security/notices/USN-3541-1\nhttps://ubuntu.com/security/notices/USN-3541-2\nhttps://ubuntu.com/security/notices/USN-3542-1\nhttps://ubuntu.com/security/notices/USN-3542-2\nhttps://ubuntu.com/security/notices/USN-3549-1\nhttps://ubuntu.com/security/notices/USN-3560-1\nhttps://ubuntu.com/security/notices/USN-3561-1\nhttps://ubuntu.com/security/notices/USN-3580-1\nhttps://ubuntu.com/security/notices/USN-3581-1\nhttps://ubuntu.com/security/notices/USN-3581-2\nhttps://ubuntu.com/security/notices/USN-3582-1\nhttps://ubuntu.com/security/notices/USN-3582-2\nhttps://ubuntu.com/security/notices/USN-3594-1\nhttps://ubuntu.com/security/notices/USN-3597-1\nhttps://ubuntu.com/security/notices/USN-3597-2\nhttps://ubuntu.com/security/notices/USN-3620-2\nhttps://ubuntu.com/security/notices/USN-3690-1\nhttps://ubuntu.com/security/notices/USN-3777-3\nhttps://usn.ubuntu.com/usn/usn-3516-1\nhttps://usn.ubuntu.com/usn/usn-3530-1\nhttps://usn.ubuntu.com/usn/usn-3531-1\nhttps://usn.ubuntu.com/usn/usn-3531-2\nhttps://usn.ubuntu.com/usn/usn-3531-3\nhttps://usn.ubuntu.com/usn/usn-3540-1\nhttps://usn.ubuntu.com/usn/usn-3540-2\nhttps://usn.ubuntu.com/usn/usn-3541-1\nhttps://usn.ubuntu.com/usn/usn-3541-2\nhttps://usn.ubuntu.com/usn/usn-3542-1\nhttps://usn.ubuntu.com/usn/usn-3542-2\nhttps://usn.ubuntu.com/usn/usn-3549-1\nhttps://usn.ubuntu.com/usn/usn-3560-1\nhttps://usn.ubuntu.com/usn/usn-3561-1\nhttps://usn.ubuntu.com/usn/usn-3580-1\nhttps://usn.ubuntu.com/usn/usn-3581-1\nhttps://usn.ubuntu.com/usn/usn-3581-2\nhttps://usn.ubuntu.com/usn/usn-3582-1\nhttps://usn.ubuntu.com/usn/usn-3582-2\nhttps://usn.ubuntu.com/usn/usn-3594-1\nhttps://usn.ubuntu.com/usn/usn-3597-1\nhttps://usn.ubuntu.com/usn/usn-3597-2\nhttps://usn.ubuntu.com/usn/usn-3620-2\nhttps://usn.ubuntu.com/usn/usn-3690-1\nhttps://usn.ubuntu.com/usn/usn-3777-3\nhttps://webkit.org/blog/8048/what-spectre-and-meltdown-mean-for-webkit/\nhttps://webkitgtk.org/security/WSA-2018-0001.html\nhttps://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown\nhttps://www.cve.org/CVERecord?id=CVE-2017-5715\nhttps://www.exploit-db.com/exploits/43427/\nhttps://www.qemu.org/2018/01/04/spectre/\nhttps://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/\nhttps://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/\nhttps://www.synology.com/support/security/Synology_SA_18_01\nhttps://www.vmware.com/us/security/advisories/VMSA-2018-0002.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-200, CWE-203, CWE-264",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,6)"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

BDU:2018-00003 (CVE-2017-5715)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.