What’s Vulnerable › Vulnerabilities

CVE-2017-5753

• Severity: medium (CVSS 5.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 93.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-04 · updated 2026-06-17
• Weakness: CWE-203

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Affected products

• Arm Cortex-A12 Firmware: all versions
• Arm Cortex-A15 Firmware: all versions
• Arm Cortex-A17 Firmware: all versions
• Arm Cortex-A57 Firmware: all versions
• Arm Cortex-A72 Firmware: all versions
• Arm Cortex-A73 Firmware: all versions
• Arm Cortex-A75 Firmware: all versions
• Arm Cortex-A76 Firmware: all versions
• Arm Cortex-A77 Firmware: all versions
• Arm Cortex-A78 Firmware: all versions
• Arm Cortex-A78Ae Firmware: all versions
• Arm Cortex-A8 Firmware: all versions
• Arm Cortex-A9 Firmware: all versions
• Arm Cortex-R7 Firmware: all versions
• Arm Cortex-R8 Firmware: all versions
• Arm Cortex-X1 Firmware: all versions
• Arm Neoverse N1 Firmware: all versions
• Arm Neoverse N2 Firmware: all versions
• Canonical Ubuntu Linux: 12.04, 14.04, 16.04, 17.04, 17.10 (and their updates)
• Debian Linux: 8.0, 9.0 (and their updates)
• Intel Atom C: c2308, c2316, c2338, c2350, c2358, c2508 (+26) (and their updates)
• Intel Atom E: e3805, e3815, e3825, e3826, e3827, e3845 (and their updates)
• Intel Atom X3: c3130, c3200rk, c3205rk, c3230rk, c3235rk, c3265rk (+3) (and their updates)
• Intel Atom X5-E3930: all versions
• Intel Atom X5-E3940: all versions
• Intel Atom X7-E3950: all versions
• Intel Atom Z: z2420, z2460, z2480, z2520, z2560, z2580 (+24) (and their updates)
• Intel Celeron J: j1750, j1800, j1850, j1900, j3060, j3160 (+4) (and their updates)
• Intel Celeron N: n2805, n2806, n2807, n2808, n2810, n2815 (+17) (and their updates)
• Intel Core I3: 330e, 330m, 330um, 350m, 370m, 380m (+106) (and their updates)

References

• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/4609
• http://nvidia.custhelp.com/app/answers/detail/a_id/4611
• http://nvidia.custhelp.com/app/answers/detail/a_id/4613
• http://nvidia.custhelp.com/app/answers/detail/a_id/4614
• http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt

Get alerted when CVE-2017-5753 or the next vulnerability affects your stack