Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2017-5925

Published: 27/02/2017 Updated: 02/03/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Athlon Ii 640 X4

Vulnerability Summary

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

amd athlon ii 640 x4 -

amd e-350 -

intel core i7-4500u -

intel core i7-3632qm -

amd fx-8350 8-core -

amd fx-8320 8-core -

amd fx-8120 8-core -

intel xeon e5-2658 v2 -

intel atom c2750 -

samsung exynos 5800 -

amd phenom 9550 4-core -

intel xeon e3-1240 v5 -

intel core i7-2620qm -

intel core i5 m480 -

nvidia tegra k1 cd580m-a1 -

nvidia tegra k1 cd570m-a1 -

intel core i7-6700k -

intel celeron n2840 -

intel core i7 920 -

allwinner a64 -

References

CWE-200https://www.vusec.net/projects/anchttp://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdfhttp://www.securityfocus.com/bid/96452https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook