Details of VAR-201702-0602

ID

VAR-201702-0602

CVE

CVE-2017-5925

TITLE

Intel processor side channel attack vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2017-001748

DESCRIPTION

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR. Multiple Intel Processor is prone to local security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Little is known about this issue or its effects at this time. We will update this BID as more information emerges. Intel Core i7 920 and so on are the CPU processors of Intel Corporation of the United States. The following products are affected: Intel Core i7 920; Intel Core i5 M480; Intel Core i7-2620QM; Intel Core i7-3632QM; Intel Core i7-4500U; Intel Atom C2750; Intel Xeon E5-2658 v2; i7-6700K; Intel Xeon E3-1240 v5

Trust: 1.98

sources: NVD: CVE-2017-5925 // JVNDB: JVNDB-2017-001748 // BID: 96452 // VULHUB: VHN-114128

AFFECTED PRODUCTS

vendor:	intel	model:	core i5 m480	scope:	eq	version:	-	Trust: 1.6
vendor:	intel	model:	core i7 920	scope:	eq	version:	-	Trust: 1.6
vendor:	intel	model:	celeron n2840	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	fx-8350 8-core	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-3632qm	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	e-350	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-4500u	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-2620qm	scope:	eq	version:	-	Trust: 1.0
vendor:	samsung	model:	exynos 5800	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	fx-8320 8-core	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-6700k	scope:	eq	version:	-	Trust: 1.0
vendor:	nvidia	model:	tegra k1 cd580m-a1	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	athlon ii 640 x4	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	xeon e5-2658 v2	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	atom c2750	scope:	eq	version:	-	Trust: 1.0
vendor:	nvidia	model:	tegra k1 cd570m-a1	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	fx-8120 8-core	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	phenom 9550 4-core	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	xeon e3-1240 v5	scope:	eq	version:	-	Trust: 1.0
vendor:	allwinner	model:	a64	scope:	eq	version:	-	Trust: 1.0
vendor:	advanced micro devices amd	model:	athlon ii 640 x4	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	e-350	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	fx-8120 8-core	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	fx-8320 8-core	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	fx-8350 8-core	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	phenom 9550 4-core	scope:	-	version:	-	Trust: 0.8
vendor:	allwinner	model:	a64	scope:	-	version:	-	Trust: 0.8
vendor:	nvidia	model:	tegra k1 cd570m-a1	scope:	-	version:	-	Trust: 0.8
vendor:	nvidia	model:	tegra k1 cd580m-a1	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	atom c2750	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	celeron n2840	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i5 m480	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7 920	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-2620qm	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-3632qm	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-4500u	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-6700k	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	xeon e3-1240 v5	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	xeon e5-2658 v2	scope:	-	version:	-	Trust: 0.8
vendor:	samsung	model:	exynos 5800	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2017-001748 // CNNVD: CNNVD-201702-926 // NVD: CVE-2017-5925

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-5925
value:	HIGH
Trust: 1.0
NVD:	CVE-2017-5925
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201702-926
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-114128
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-5925
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-114128
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-5925
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-114128 // JVNDB: JVNDB-2017-001748 // CNNVD: CNNVD-201702-926 // NVD: CVE-2017-5925

PROBLEMTYPE DATA

problemtype:

CWE-200

Trust: 1.9

sources: VULHUB: VHN-114128 // JVNDB: JVNDB-2017-001748 // NVD: CVE-2017-5925

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201702-926

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201702-926

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-001748

EXTERNAL IDS

db:	NVD	id:	CVE-2017-5925	Trust: 2.8
db:	BID	id:	96452	Trust: 2.2
db:	JVNDB	id:	JVNDB-2017-001748	Trust: 0.8
db:	CNNVD	id:	CNNVD-201702-926	Trust: 0.7
db:	VULHUB	id:	VHN-114128	Trust: 0.1

sources: VULHUB: VHN-114128 // BID: 96452 // JVNDB: JVNDB-2017-001748 // CNNVD: CNNVD-201702-926 // NVD: CVE-2017-5925

REFERENCES

url:	http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf	Trust: 2.5
url:	https://www.vusec.net/projects/anc	Trust: 1.7
url:	http://www.securityfocus.com/bid/96452	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-5925	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2017-5925	Trust: 0.8
url:	http://www.securityfocus.com/bid/96452/info	Trust: 0.8
url:	https://www.vusec.net/projects/anc/	Trust: 0.8
url:	http://www.intel.com/	Trust: 0.3

sources: VULHUB: VHN-114128 // BID: 96452 // JVNDB: JVNDB-2017-001748 // CNNVD: CNNVD-201702-926 // NVD: CVE-2017-5925

CREDITS

B. Gras, K. Razavi, E. Bosman, H. Bos, C. Giuffrida,

Trust: 0.3

sources: BID: 96452

SOURCES

db:	VULHUB	id:	VHN-114128
db:	BID	id:	96452
db:	JVNDB	id:	JVNDB-2017-001748
db:	CNNVD	id:	CNNVD-201702-926
db:	NVD	id:	CVE-2017-5925

LAST UPDATE DATE

2024-11-23T22:07:38.839000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-114128	date:	2017-03-02T00:00:00
db:	BID	id:	96452	date:	2017-03-07T01:08:00
db:	JVNDB	id:	JVNDB-2017-001748	date:	2017-03-16T00:00:00
db:	CNNVD	id:	CNNVD-201702-926	date:	2017-02-28T00:00:00
db:	NVD	id:	CVE-2017-5925	date:	2024-11-21T03:28:40.700

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-114128	date:	2017-02-27T00:00:00
db:	BID	id:	96452	date:	2017-02-27T00:00:00
db:	JVNDB	id:	JVNDB-2017-001748	date:	2017-03-16T00:00:00
db:	CNNVD	id:	CNNVD-201702-926	date:	2017-02-28T00:00:00
db:	NVD	id:	CVE-2017-5925	date:	2017-02-27T07:59:00.143