{"id":"CVE-2017-5753","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-5753","generatedAt":"2026-10-28T23:56:28.326Z","title":"Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","description":"Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","published":"2018-01-04T13:29:00.000Z","lastModified":"2026-06-17T01:21:09.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.1","score":5.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N"},"cwe":["CWE-203"],"affected":["intel/atom c","intel/atom e","intel/atom x3","intel/atom x5-e3930","intel/atom x5-e3940","intel/atom x7-e3950","intel/atom z","intel/celeron j","intel/celeron n","intel/core i3","intel/core i5","intel/core i7","intel/core m","intel/core m3","intel/core m5","intel/core m7","intel/pentium j","intel/pentium n","intel/xeon","intel/xeon bronze 3104","intel/xeon bronze 3106","intel/xeon e-1105c","intel/xeon e3","intel/xeon e3 1105c v2","intel/xeon e3 1125c","intel/xeon e3 1125c v2","intel/xeon e3 1220","intel/xeon e3 1220 v2","intel/xeon e3 1220 v3","intel/xeon e3 1220 v5","intel/xeon e3 1220 v6","intel/xeon e3 12201","intel/xeon e3 12201 v2","intel/xeon e3 1220l v3","intel/xeon e3 1225","intel/xeon e3 1225 v2","intel/xeon e3 1225 v3","intel/xeon e3 1225 v5","intel/xeon e3 1225 v6","intel/xeon e3 1226 v3","intel/xeon e3 1230","intel/xeon e3 1230 v2","intel/xeon e3 1230 v3","intel/xeon e3 1230 v5","intel/xeon e3 1230 v6","intel/xeon e3 1230l v3","intel/xeon e3 1231 v3","intel/xeon e3 1235","intel/xeon e3 1235l v5","intel/xeon e3 1240","intel/xeon e3 1240 v2","intel/xeon e3 1240 v3","intel/xeon e3 1240 v5","intel/xeon e3 1240 v6","intel/xeon e3 1240l v3","intel/xeon e3 1240l v5","intel/xeon e3 1241 v3","intel/xeon e3 1245","intel/xeon e3 1245 v2","intel/xeon e3 1245 v3"],"epss":{"score":0.93838,"percentile":0.99843,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2018-01-03","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":43427,"kind":"exploit","title":"Multiple CPUs - 'Spectre' Information Disclosure","url":"https://www.exploit-db.com/exploits/43427","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/43427.c","file":"exploits/multiple/local/43427.c","published":"2018-01-03","added":"2018-01-04","updated":"2018-01-05","author":"Multiple","type":"local","platform":"multiple","port":null,"verified":false,"codes":["CVE-2017-5753","CVE-2017-5715"],"tags":null,"aliases":"Spectre","applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://spectreattack.com/spectre.pdf"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 93.8%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4609","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4611","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4613","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4614","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.kb.cert.org/vuls/id/584653","tags":["Third Party Advisory","US Government Resource"],"source":"secure@intel.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","tags":["Patch","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.securityfocus.com/bid/102371","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://www.securitytracker.com/id/1040071","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://xenbits.xen.org/xsa/advisory-254.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:0292","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/security/vulnerabilities/speculativeexecution","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cdrdv2.intel.com/v1/dl/getContent/685359","tags":["Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-002","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-003","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002","tags":["Patch","Third Party Advisory","Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://seclists.org/bugtraq/2019/Jun/36","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.gentoo.org/glsa/201810-06","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20180104-0001/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://spectreattack.com/","tags":["Technical Description","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.citrix.com/article/CTX231399","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.f5.com/csp/article/K91229003","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.lenovo.com/us/en/solutions/LEN-18282","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3540-1/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3540-2/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3541-1/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3541-2/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3542-1/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3542-2/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3549-1/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3580-1/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3597-1/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3597-2/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/usn/usn-3516-1/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://www.debian.org/security/2018/dsa-4187","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://www.debian.org/security/2018/dsa-4188","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://www.exploit-db.com/exploits/43427/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secure@intel.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5753","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}