CVE-2018-9056

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.

CVSS v3.0

5.6 MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CVSS v2.0

4.7 MEDIUMAV:L/AC:M/Au:N/C:C/I:N/A:N

EPSS

0.69% chance of exploitation in the next 30 days, 50th percentile

Published

2018-03-27

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf

References

• CVE Record
• NVD entry

Related

• CVE-2018-9055
• CVE-2018-9058
• CVE-2018-9054
• CVE-2018-9059
• CVE-2018-9053
• CVE-2018-9075