CVE-2018-12126
hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
En Microarchitectural Store Buffer Data Sampling (MSBDS): los búferes de almacenamiento en algunos microprocesadores que usan ejecución especulativa pueden permitir que un usuario autenticado active potencialmente la divulgación de información por medio de un canal lateral con acceso local. Puede encontrar una lista de los productos impactados aquí: https://www.intel.com/content/dam/www/public/us/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf.
Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA (STore Address) and STD (STore Data) sub-operations. These sub-operations allow the processor to hand-off address generation logic into these sub-operations for optimized writes. Both of these sub-operations write to a shared distributed processor structure called the 'processor store buffer'. As a result, an unprivileged attacker could use this flaw to read private data resident within the CPU's processor store buffer.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-06-11 CVE Reserved
- 2019-05-15 CVE Published
- 2024-05-23 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-385: Covert Timing Channel
CAPEC
References (28)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html | X_refsource_misc |
|
| http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt | X_refsource_confirm | |
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en | X_refsource_confirm | |
| https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf | X_refsource_confirm |
|
| https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf | X_refsource_confirm |
|
| https://kc.mcafee.com/corporate/index?page=content&id=SB10292 | X_refsource_confirm | |
| https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html | Mailing List |
|
| https://seclists.org/bugtraq/2019/Jun/28 | Mailing List |
|
| https://seclists.org/bugtraq/2019/Jun/36 | Mailing List |
|
| https://seclists.org/bugtraq/2019/Nov/15 | Mailing List |
|
| https://seclists.org/bugtraq/2019/Nov/16 | Mailing List |
|
| https://seclists.org/bugtraq/2020/Jan/21 | Mailing List |
|
| https://www.synology.com/security/advisory/Synology_SA_19_24 | X_refsource_confirm |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intel Search vendor "Intel" | Microarchitectural Store Buffer Data Sampling Firmware Search vendor "Intel" for product "Microarchitectural Store Buffer Data Sampling Firmware" | - | - |
Affected
| in | Intel Search vendor "Intel" | Microarchitectural Store Buffer Data Sampling Search vendor "Intel" for product "Microarchitectural Store Buffer Data Sampling" | - | - |
Safe
|
| Fedoraproject Search vendor "Fedoraproject" | Fedora Search vendor "Fedoraproject" for product "Fedora" | 29 Search vendor "Fedoraproject" for product "Fedora" and version "29" | - |
Affected
| ||||||