Details of VAR-201702-0603

ID

VAR-201702-0603

CVE

CVE-2017-5926

TITLE

AMD Vulnerabilities that allow side-channel attacks in processors

Trust: 0.8

sources: JVNDB: JVNDB-2017-001749

DESCRIPTION

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR. Multiple AMD Processor are prone to local security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Little is known about this issue or its effects at this time. We will update this BID as more information emerges. AMD Phenom 9550 4-Core and so on are the processor products of American AMD Company. The following products are affected: AMD Phenom 9550 4-Core; AMD E-350; AMD Athlon II 640 X4; AMD FX-8120 8-Core; AMD FX-8320 8-Core; AMD FX-8350 8-Core

Trust: 1.98

sources: NVD: CVE-2017-5926 // JVNDB: JVNDB-2017-001749 // BID: 96457 // VULHUB: VHN-114129

AFFECTED PRODUCTS

vendor:	intel	model:	core i7 920	scope:	eq	version:	-	Trust: 1.6
vendor:	intel	model:	celeron n2840	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	fx-8350 8-core	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-3632qm	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	e-350	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-4500u	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-2620qm	scope:	eq	version:	-	Trust: 1.0
vendor:	samsung	model:	exynos 5800	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	fx-8320 8-core	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i5 m480	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	core i7-6700k	scope:	eq	version:	-	Trust: 1.0
vendor:	nvidia	model:	tegra k1 cd580m-a1	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	athlon ii 640 x4	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	xeon e5-2658 v2	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	atom c2750	scope:	eq	version:	-	Trust: 1.0
vendor:	nvidia	model:	tegra k1 cd570m-a1	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	fx-8120 8-core	scope:	eq	version:	-	Trust: 1.0
vendor:	amd	model:	phenom 9550 4-core	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	xeon e3-1240 v5	scope:	eq	version:	-	Trust: 1.0
vendor:	allwinner	model:	a64	scope:	eq	version:	-	Trust: 1.0
vendor:	advanced micro devices amd	model:	athlon ii 640 x4	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	e-350	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	fx-8120 8-core	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	fx-8320 8-core	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	fx-8350 8-core	scope:	-	version:	-	Trust: 0.8
vendor:	advanced micro devices amd	model:	phenom 9550 4-core	scope:	-	version:	-	Trust: 0.8
vendor:	allwinner	model:	a64	scope:	-	version:	-	Trust: 0.8
vendor:	nvidia	model:	tegra k1 cd570m-a1	scope:	-	version:	-	Trust: 0.8
vendor:	nvidia	model:	tegra k1 cd580m-a1	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	atom c2750	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	celeron n2840	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i5 m480	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7 920	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-2620qm	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-3632qm	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-4500u	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	core i7-6700k	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	xeon e3-1240 v5	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	xeon e5-2658 v2	scope:	-	version:	-	Trust: 0.8
vendor:	samsung	model:	exynos 5800	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2017-001749 // CNNVD: CNNVD-201702-925 // NVD: CVE-2017-5926

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-5926
value:	HIGH
Trust: 1.0
NVD:	CVE-2017-5926
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201702-925
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-114129
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-5926
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-114129
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-5926
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-114129 // JVNDB: JVNDB-2017-001749 // CNNVD: CNNVD-201702-925 // NVD: CVE-2017-5926

PROBLEMTYPE DATA

problemtype:

CWE-200

Trust: 1.9

sources: VULHUB: VHN-114129 // JVNDB: JVNDB-2017-001749 // NVD: CVE-2017-5926

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201702-925

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201702-925

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-001749

EXTERNAL IDS

db:	NVD	id:	CVE-2017-5926	Trust: 2.8
db:	BID	id:	96457	Trust: 2.2
db:	JVNDB	id:	JVNDB-2017-001749	Trust: 0.8
db:	CNNVD	id:	CNNVD-201702-925	Trust: 0.6
db:	VULHUB	id:	VHN-114129	Trust: 0.1

sources: VULHUB: VHN-114129 // BID: 96457 // JVNDB: JVNDB-2017-001749 // CNNVD: CNNVD-201702-925 // NVD: CVE-2017-5926

REFERENCES

url:	http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf	Trust: 2.5
url:	http://www.securityfocus.com/bid/96457	Trust: 1.9
url:	https://www.vusec.net/projects/anc	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-5926	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2017-5926	Trust: 0.8
url:	https://www.vusec.net/projects/anc/	Trust: 0.8
url:	http://www.intel.com/	Trust: 0.3

sources: VULHUB: VHN-114129 // BID: 96457 // JVNDB: JVNDB-2017-001749 // CNNVD: CNNVD-201702-925 // NVD: CVE-2017-5926

CREDITS

B. Gras, K. Razavi, E. Bosman, H. Bos, C. Giuffrida,

Trust: 0.3

sources: BID: 96457

SOURCES

db:	VULHUB	id:	VHN-114129
db:	BID	id:	96457
db:	JVNDB	id:	JVNDB-2017-001749
db:	CNNVD	id:	CNNVD-201702-925
db:	NVD	id:	CVE-2017-5926

LAST UPDATE DATE

2024-11-23T23:02:31.472000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-114129	date:	2017-03-02T00:00:00
db:	BID	id:	96457	date:	2017-03-07T01:08:00
db:	JVNDB	id:	JVNDB-2017-001749	date:	2017-03-16T00:00:00
db:	CNNVD	id:	CNNVD-201702-925	date:	2017-02-28T00:00:00
db:	NVD	id:	CVE-2017-5926	date:	2024-11-21T03:28:40.857

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-114129	date:	2017-02-27T00:00:00
db:	BID	id:	96457	date:	2017-02-27T00:00:00
db:	JVNDB	id:	JVNDB-2017-001749	date:	2017-03-16T00:00:00
db:	CNNVD	id:	CNNVD-201702-925	date:	2017-02-28T00:00:00
db:	NVD	id:	CVE-2017-5926	date:	2017-02-27T07:59:00.207