Information disclosure in FreeBSD



Published: 2018-08-15
Risk Low
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2018-3620
CVE-2018-3646
CWE-ID CWE-200
Exploitation vector Local network
Public exploit N/A
Vulnerable software
Subscribe
FreeBSD
Operating systems & Components / Operating system

Vendor FreeBSD Foundation

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Side-channel attack

EUVDB-ID: #VU14411

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2018-3620

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to an error in systems with microprocessors utilizing speculative execution and address translations . A local attacker can trigger terminal page fault, conduct side-channel attack and gain access to potentially sensitive information residing in the L1 data cache.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FreeBSD: 5.3 - 11.1


CPE2.3 External links

http://www.freebsd.org/security/advisories/FreeBSD-SA-18:09.l1tf.asc

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Side-channel attack

EUVDB-ID: #VU14412

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2018-3646

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows an adjacent attacker to obtain potentially sensitive information.

The vulnerability exists due to an error in systems with microprocessors utilizing speculative execution and address translations. An adjacent attacker with guest OS privilege can trigger terminal page fault, conduct side-channel attack and gain access to potentially sensitive information residing in the L1 data cache.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FreeBSD: 5.3 - 11.1


CPE2.3 External links

http://www.freebsd.org/security/advisories/FreeBSD-SA-18:09.l1tf.asc

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###