CVE-2018-12127

{"id": "CVE-2018-12127", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.7, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 5.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 1.1}]}, "published": "2019-05-30T16:29:00.903", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html", "source": "secure@intel.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html", "source": "secure@intel.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html", "source": "secure@intel.com"}, {"url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html", "source": "secure@intel.com"}, {"url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt", "source": "secure@intel.com"}, {"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en", "source": "secure@intel.com"}, {"url": "https://access.redhat.com/errata/RHSA-2019:1455", "source": "secure@intel.com"}, {"url": "https://access.redhat.com/errata/RHSA-2019:2553", "source": "secure@intel.com"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf", "source": "secure@intel.com"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf", "source": "secure@intel.com"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10292", "source": "secure@intel.com"}, {"url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html", "source": "secure@intel.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/", "source": "secure@intel.com"}, {"url": "https://seclists.org/bugtraq/2019/Jun/28", "source": "secure@intel.com"}, {"url": "https://seclists.org/bugtraq/2019/Jun/36", "source": "secure@intel.com"}, {"url": "https://seclists.org/bugtraq/2019/Nov/15", "source": "secure@intel.com"}, {"url": "https://seclists.org/bugtraq/2019/Nov/16", "source": "secure@intel.com"}, {"url": "https://seclists.org/bugtraq/2020/Jan/21", "source": "secure@intel.com"}, {"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc", "source": "secure@intel.com"}, {"url": "https://security.gentoo.org/glsa/202003-56", "source": "secure@intel.com"}, {"url": "https://usn.ubuntu.com/3977-3/", "source": "secure@intel.com"}, {"url": "https://www.debian.org/security/2020/dsa-4602", "source": "secure@intel.com"}, {"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc", "source": "secure@intel.com"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}, {"url": "https://www.synology.com/security/advisory/Synology_SA_19_24", "source": "secure@intel.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"}, {"lang": "es", "value": "En Microarchitectural Load Port Data Sampling (MLPDS): los puertos de carga en algunos microprocesadores que usan ejecuci\u00f3n especulativa pueden permitir que un usuario autenticado active potencialmente la divulgaci\u00f3n de informaci\u00f3n por medio de un canal lateral con acceso local. Puede encontrar una lista de los productos impactados aqu\u00ed: https://www.intel.com/content/dam/www/public/us/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"}], "lastModified": "2023-11-07T02:52:02.323", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intel:microarchitectural_load_port_data_sampling_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B69C4A00-DC25-4DF1-8AC7-6ACD9E26379A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:microarchitectural_load_port_data_sampling:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1C41A27E-7EE0-4998-94A1-B53B3C8E1049"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D100F7CE-FC64-4CC6-852A-6136D72DA419"}], "operator": "OR"}]}], "sourceIdentifier": "secure@intel.com"}