{"id":"CVE-2017-5754","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-5754","generatedAt":"2026-10-28T23:38:29.930Z","title":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.","description":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.","published":"2018-01-04T13:29:00.000Z","lastModified":"2026-06-17T01:21:09.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.1","score":5.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N"},"cwe":["CWE-200"],"affected":["intel/atom c","intel/atom e","intel/atom x3","intel/atom z","intel/celeron j","intel/celeron n","intel/core i3","intel/core i5","intel/core i7","intel/core m","intel/core m3","intel/core m5","intel/core m7","intel/pentium j","intel/pentium n","intel/xeon","intel/xeon bronze 3104","intel/xeon bronze 3106","intel/xeon e-1105c","intel/xeon e3","intel/xeon e3 1105c v2","intel/xeon e3 1125c","intel/xeon e3 1125c v2","intel/xeon e3 1220","intel/xeon e3 1220 v2","intel/xeon e3 1220 v3","intel/xeon e3 1220 v5","intel/xeon e3 1220 v6","intel/xeon e3 12201","intel/xeon e3 12201 v2","intel/xeon e3 1220l v3","intel/xeon e3 1225","intel/xeon e3 1225 v2","intel/xeon e3 1225 v3","intel/xeon e3 1225 v5","intel/xeon e3 1225 v6","intel/xeon e3 1226 v3","intel/xeon e3 1230","intel/xeon e3 1230 v2","intel/xeon e3 1230 v3","intel/xeon e3 1230 v5","intel/xeon e3 1230 v6","intel/xeon e3 1230l v3","intel/xeon e3 1231 v3","intel/xeon e3 1235","intel/xeon e3 1235l v5","intel/xeon e3 1240","intel/xeon e3 1240 v2","intel/xeon e3 1240 v3","intel/xeon e3 1240 v5","intel/xeon e3 1240 v6","intel/xeon e3 1240l v3","intel/xeon e3 1240l v5","intel/xeon e3 1241 v3","intel/xeon e3 1245","intel/xeon e3 1245 v2","intel/xeon e3 1245 v3","intel/xeon e3 1245 v5","intel/xeon e3 1245 v6","intel/xeon e3 1246 v3"],"epss":{"score":0.67407,"percentile":0.99303,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.82608,"percentile":0.99659},{"date":"2026-09-22","score":0.84172,"percentile":0.99682},{"date":"2026-10-25","score":0.67407,"percentile":0.99302}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 67.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html","source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html","source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html","source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html","source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html","source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4609","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4611","source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4613","source":"secure@intel.com"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4614","source":"secure@intel.com"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt","source":"secure@intel.com"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","source":"secure@intel.com"},{"url":"http://www.kb.cert.org/vuls/id/584653","tags":["Third Party Advisory","US Government Resource"],"source":"secure@intel.com"},{"url":"http://www.securityfocus.com/bid/102378","source":"secure@intel.com"},{"url":"http://www.securityfocus.com/bid/106128","source":"secure@intel.com"},{"url":"http://www.securitytracker.com/id/1040071","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://xenbits.xen.org/xsa/advisory-254.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:0292","source":"secure@intel.com"},{"url":"https://access.redhat.com/security/vulnerabilities/speculativeexecution","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://cdrdv2.intel.com/v1/dl/getContent/685358","source":"secure@intel.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","source":"secure@intel.com"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-002","source":"secure@intel.com"},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-003","source":"secure@intel.com"},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","source":"secure@intel.com"},{"url":"https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","source":"secure@intel.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html","source":"secure@intel.com"},{"url":"https://meltdownattack.com/","tags":["Technical Description","Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002","tags":["Patch","Third Party Advisory","Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc","source":"secure@intel.com"},{"url":"https://security.gentoo.org/glsa/201810-06","source":"secure@intel.com"},{"url":"https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20180104-0001/","source":"secure@intel.com"},{"url":"https://source.android.com/security/bulletin/2018-04-01","source":"secure@intel.com"},{"url":"https://support.citrix.com/article/CTX231399","source":"secure@intel.com"},{"url":"https://support.citrix.com/article/CTX234679","source":"secure@intel.com"},{"url":"https://support.f5.com/csp/article/K91229003","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us","source":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us","source":"secure@intel.com"},{"url":"https://support.lenovo.com/us/en/solutions/LEN-18282","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3522-3/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3522-4/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3523-1/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3540-2/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3541-2/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3583-1/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3597-1/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/3597-2/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/usn/usn-3516-1/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/usn/usn-3522-2/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/usn/usn-3523-2/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/usn/usn-3524-2/","source":"secure@intel.com"},{"url":"https://usn.ubuntu.com/usn/usn-3525-1/","source":"secure@intel.com"},{"url":"https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin","source":"secure@intel.com"},{"url":"https://www.debian.org/security/2018/dsa-4078","source":"secure@intel.com"},{"url":"https://www.debian.org/security/2018/dsa-4082","source":"secure@intel.com"},{"url":"https://www.debian.org/security/2018/dsa-4120","source":"secure@intel.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5754","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}