Main Vulnerability Database Vulnerabilities #VU9882

Information disclosure in Intel CPU - CVE-2017-5754

Published: January 4, 2018 / Updated: September 1, 2020

Vulnerability identifier: #VU9882

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-5754

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists in Intel CPU hardware due to side-channel attacks, which are also referred to as Meltdown attacks. A local attacker can execute arbitrary code, perform a side-channel analysis of the data cache and gain access to sensitive information including memory from the CPU cache.

Affected software

Intel CPU
HPE ProLiant ML350 Gen9 Server
HPE Synergy 660 Gen9 Compute Module
HP ProLiant ML150 Gen9 Server
HP ProLiant ML110 Gen9 Server
HP ProLiant BL460c Gen9 Server Blade
HPE Apollo 4200 Gen9 Server
HPE ProLiant XL450 Gen9 Server
HP ProLiant DL380 Gen9 Server
HPE ProLiant DL360 Gen9 Server
HP ProLiant DL160 Gen9 Server
HP ProLiant DL60 Gen9 Server
HPE ProLiant XL170r Gen9 Server
HPE ProLiant XL750f Gen9 Server
HP ProLiant DL120 Gen9 Server
HPE ProLiant DL560 Gen9 Server
HPE ProLiant ML30 Gen9 Server
HPE ProLiant DL20 Gen9 Server
HPE ProLiant XL230k Gen10 Server
HPE Synergy 480 Gen9 Compute Module
HPE ProLiant XL250a Gen9 Server
HPE ProLiant XL190r Gen9 Server
HP ProLiant DL80 Gen9 Server
HPE ProLiant DL180 Gen9 Server
HPE ProLiant XL270d Gen9 Accelerator Tray 2U Configure
HPE ProLiant WS460c Gen9 Workstation
HPE ProLiant XL260a Gen9 Server
HPE ProLiant DL560 Gen10 Server
HPE ProLiant DL380 Gen10 Server
HPE ProLiant DL180 Gen10 Server
HPE ProLiant DL160 Gen10 Server
HPE ProLiant DL360 Gen10 Server
HPE ProLiant ML110 Gen10 Server
HPE ProLiant DL580 Gen10 Server
HPE ProLiant XL740f Gen9 Server
HPE ProLiant DL120 Gen10 Server
HPE ProLiant ML350 Gen10 Server
HPE ProLiant XL450 Gen10 Server
HPE Synergy 660 Gen10 Compute Module
HPE ProLiant DL385 Gen10 Server
HPE ProLiant XL170r Gen10 Server
HPE ProLiant BL460c Gen10 Server Blade
HPE ProLiant XL190r Gen10 Server
HP ProLiant BL660c Gen9 Server
HPE Synergy 480 Gen10 Compute Module
HPE ProLiant XL730f Gen9 Server
HPE ProLiant XL230a Gen9 Server
HPE Cloudline CL3100 G3 Server
HPE StoreEasy 1650 Storage
HPE StoreEasy 3850 Gateway Storage
HPE StoreEasy 1850 Storage
HP ConvergedSystem 700
HPE Converged Architecture 700
HP ProLiant DL580 Gen8 Server
HPE Cloudline CL2100 Gen10 Server
HPE Cloudline CL2200 Gen10 Server
HPE Cloudline CL3150 G4 Server
HPE Cloudline CL5200 G3 Server
HPE ProLiant DL580 Gen9 Server
HPE Cloudline CL2100 G3 807S 8 SFF Configure
HPE Cloudline CL2100 G3 407S 4 LFF Configure
HPE Cloudline CL2100 G3 806R 8SFF Configure
HPE Cloudline CL2200 G3 1211R 12 LFF Configure
HPE StoreEasy 1450 Storage
HPE Synergy 620 Gen9 Compute Module
HP ProLiant XL220a Gen8 v2 Server
HPE Synergy 680 Gen9 Compute Module
HPE ProLiant m510 Server Cartridge
HPE ProLiant m710p Server Cartridge
HPE ProLiant m710x Server Cartridge
HP ProLiant m710 Server Cartridge
HP ProLiant DL980 G7 Server
HPE Synergy Composer
HPE ProLiant Thin Micro TM200 Server
HPE ProLiant ML10 v2 Server
HPE StoreEasy 1550 Storage
HPE StoreVirtual 3000 File Controller
HP 3PAR StoreServ File Controller
Superdome Flex Server
HPE ProLiant ML310e Gen8 v2 Server
HPE ProLiant m300 Server Cartridge
HPE ProLiant m350 Server Cartridge
HPE ProLiant MicroServer Gen8

Gentoo Linux
Arch Linux
Debian Linux
Amazon Linux AMI
SUSE Linux Enterprise High Availability Extension 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
IBM AIX
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux Server - Extended Update Support
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM System z (Structure A)
IBM i
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server (for IBM Power LE) - 4 Year Extended Update Support
Red Hat Enterprise Linux Server - 4 Year Extended Update Support
SUSE Linux
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Workstation Extension 12
Ubuntu
Slackware Linux
MRG Realtime
IBM VIOS
kernel (Red Hat package)
kernel-rt (Red Hat package)
xen (Alpine package)
kernel-alt (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
openSUSE Leap
kgraft-patch-4_12_14-122_150-default
kernel-default-extra-debuginfo
kernel-default-man
kernel-obs-build-debugsource
kernel-obs-build
kernel-docs
kernel-default-kgraft
kernel-default-kgraft-devel
kernel-default-extra
kernel-default-devel-debuginfo
kernel-source
kernel-macros
kernel-devel
kernel-default
cluster-md-kmp-default-debuginfo
ocfs2-kmp-default
kernel-default-debuginfo
kernel-syms
kernel-default-debugsource
gfs2-kmp-default-debuginfo
kernel-default-base-debuginfo
dlm-kmp-default
ocfs2-kmp-default-debuginfo
kernel-default-base
gfs2-kmp-default
kernel-default-devel
dlm-kmp-default-debuginfo
cluster-md-kmp-default
Red Hat Virtualization Host
Red Hat Virtualization Manager
Dell Secure Connect Gateway
VxRack SDDC
IBM QRadar Network Packet Capture

How to mitigate CVE-2017-5754

Install update from vendor's website.

kernel (Red Hat package) - addressed in versions 2.6.18-348.35.1.el5, 2.6.32-220.76.2.el6, 2.6.32-358.84.2.el6, 2.6.32-358.88.2.el6, 2.6.32-431.85.2.el6, 2.6.32-431.89.2.el6, 2.6.32-504.64.4.el6, 2.6.32-504.68.2.el6, 2.6.32-573.53.1.el6, 2.6.32-573.55.2.el6, 2.6.32-696.23.1.el6, 3.10.0-327.62.4.el7, 3.10.0-514.41.1.el7, 3.10.0-514.48.1.el7, 3.10.0-693.17.1.el7, 3.10.0-862.el7
kernel-rt (Red Hat package) - addressed in versions 3.10.0-693.11.1.rt56.606.el6rt, 3.10.0-693.11.1.rt56.639.el7
xen (Alpine package) - update to 4.7.3-r8
kernel-alt (Red Hat package) - addressed in versions 4.11.0-44.6.1.el7a, 4.14.0-49.el7a, 4.14.0-49.2.2.el7a
Dell Secure Connect Gateway - update to 5.16
kgraft-patch-4_12_14-122_150-default - update to 1-8.3.1
kernel-default-extra-debuginfo - update to 4.12.14-122.150.1
kernel-default-man - update to 4.12.14-122.150.1
kernel-obs-build-debugsource - update to 4.12.14-122.150.1
kernel-obs-build - update to 4.12.14-122.150.1
kernel-docs - update to 4.12.14-122.150.1
kernel-default-kgraft - update to 4.12.14-122.150.1
kernel-default-kgraft-devel - update to 4.12.14-122.150.1
kernel-default-extra - update to 4.12.14-122.150.1
kernel-default-devel-debuginfo - update to 4.12.14-122.150.1
kernel-source - update to 4.12.14-122.150.1
kernel-macros - update to 4.12.14-122.150.1
kernel-devel - update to 4.12.14-122.150.1
kernel-default - update to 4.12.14-122.150.1
cluster-md-kmp-default-debuginfo - update to 4.12.14-122.150.1
ocfs2-kmp-default - update to 4.12.14-122.150.1
kernel-default-debuginfo - update to 4.12.14-122.150.1
kernel-syms - update to 4.12.14-122.150.1
kernel-default-debugsource - update to 4.12.14-122.150.1
gfs2-kmp-default-debuginfo - update to 4.12.14-122.150.1
kernel-default-base-debuginfo - update to 4.12.14-122.150.1
dlm-kmp-default - update to 4.12.14-122.150.1
ocfs2-kmp-default-debuginfo - update to 4.12.14-122.150.1
kernel-default-base - update to 4.12.14-122.150.1
gfs2-kmp-default - update to 4.12.14-122.150.1
kernel-default-devel - update to 4.12.14-122.150.1
dlm-kmp-default-debuginfo - update to 4.12.14-122.150.1
cluster-md-kmp-default - update to 4.12.14-122.150.1
VxRack SDDC - update to 5.1.2
IBM QRadar Network Packet Capture - addressed in versions 7.2.8 Patch 1, 7.3.1 Patch 1

Links to Public Exploits and PoC-codes

External References

https://01.org/security/advisories/intel-oss-10003