{"id":"CVE-2017-5715","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-5715","generatedAt":"2026-10-29T03:45:26.062Z","title":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","description":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","published":"2018-01-04T13:29:00.000Z","lastModified":"2026-06-17T01:21:06.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.1","score":5.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N"},"cwe":["CWE-203"],"affected":["intel/atom c","intel/atom e","intel/atom x3","intel/atom x5-e3930","intel/atom x5-e3940","intel/atom x7-e3950","intel/atom z","intel/celeron j","intel/celeron n","intel/core i3","intel/core i5","intel/core i7","intel/core m","intel/core m3","intel/core m5","intel/core m7","intel/pentium j","intel/pentium n","intel/xeon","intel/xeon bronze 3104","intel/xeon bronze 3106","intel/xeon e-1105c","intel/xeon e3","intel/xeon e3 1105c v2","intel/xeon e3 1125c","intel/xeon e3 1125c v2","intel/xeon e3 1220","intel/xeon e3 1220 v2","intel/xeon e3 1220 v3","intel/xeon e3 1220 v5","intel/xeon e3 1220 v6","intel/xeon e3 12201","intel/xeon e3 12201 v2","intel/xeon e3 1220l v3","intel/xeon e3 1225","intel/xeon e3 1225 v2","intel/xeon e3 1225 v3","intel/xeon e3 1225 v5","intel/xeon e3 1225 v6","intel/xeon e3 1226 v3","intel/xeon e3 1230","intel/xeon e3 1230 v2","intel/xeon e3 1230 v3","intel/xeon e3 1230 v5","intel/xeon e3 1230 v6","intel/xeon e3 1230l v3","intel/xeon e3 1231 v3","intel/xeon e3 1235","intel/xeon e3 1235l v5","intel/xeon e3 1240","intel/xeon e3 1240 v2","intel/xeon e3 1240 v3","intel/xeon e3 1240 v5","intel/xeon e3 1240 v6","intel/xeon e3 1240l v3","intel/xeon e3 1240l v5","intel/xeon e3 1241 v3","intel/xeon e3 1245","intel/xeon e3 1245 v2","intel/xeon e3 1245 v3"],"epss":{"score":0.73249,"percentile":0.99457,"date":"2026-10-28","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2018-01-03","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":43427,"kind":"exploit","title":"Multiple CPUs - 'Spectre' Information Disclosure","url":"https://www.exploit-db.com/exploits/43427","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/43427.c","file":"exploits/multiple/local/43427.c","published":"2018-01-03","added":"2018-01-04","updated":"2018-01-05","author":"Multiple","type":"local","platform":"multiple","port":null,"verified":false,"codes":["CVE-2017-5753","CVE-2017-5715"],"tags":null,"aliases":"Spectre","applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://spectreattack.com/spectre.pdf"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 73.2%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4609","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4611","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4613","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4614","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.kb.cert.org/vuls/id/584653","tags":["Third Party Advisory","US Government Resource"],"source":"secure@intel.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.securityfocus.com/bid/102376","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://www.securitytracker.com/id/1040071","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://xenbits.xen.org/xsa/advisory-254.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:0292","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/security/vulnerabilities/speculativeexecution","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-002","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-003","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html","source":"secure@intel.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002","tags":["Patch","Third Party Advisory","Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://seclists.org/bugtraq/2019/Jun/36","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://seclists.org/bugtraq/2019/Nov/16","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr","tags":["Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.gentoo.org/glsa/201810-06","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20180104-0001/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.paloaltonetworks.com/CVE-2017-5715","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://spectreattack.com/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.citrix.com/article/CTX231399","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.f5.com/csp/article/K91229003","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.lenovo.com/us/en/solutions/LEN-18282","tags":["Third Party Advisory"],"source":"secure@intel.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5715","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}