Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12127

Опубликовано: 30 мая 2019
Источник: nvd
CVSS3: 5.6
CVSS2: 4.7
EPSS Низкий

Описание

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:intel:microarchitectural_load_port_data_sampling_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:microarchitectural_load_port_data_sampling:-:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

EPSS

Процентиль: 62%
0.00432
Низкий

5.6 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.6
ubuntu
около 6 лет назад

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

CVSS3: 6.5
redhat
около 6 лет назад

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

CVSS3: 5.6
debian
около 6 лет назад

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some ...

CVSS3: 5.6
github
около 3 лет назад

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

CVSS3: 5.6
fstec
больше 6 лет назад

Уязвимость порта загрузки MLPDS микропрограммного обеспечения Intel, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 62%
0.00432
Низкий

5.6 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-200