What’s Vulnerable › Vulnerabilities

CVE-2017-5754

• Severity: medium (CVSS 5.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 67.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-04 · updated 2026-06-17
• Weakness: CWE-200

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Affected products

• Arm Cortex-A: 75
• Intel Atom C: c2308, c2316, c2338, c2350, c2358, c2508 (+26)
• Intel Atom E: e3805, e3815, e3825, e3826, e3827, e3845
• Intel Atom X3: c3130, c3200rk, c3205rk, c3230rk, c3235rk, c3265rk (+3)
• Intel Atom Z: z2420, z2460, z2480, z2520, z2560, z2580 (+24)
• Intel Celeron J: j1750, j1800, j1850, j1900, j3060, j3160 (+4)
• Intel Celeron N: n2805, n2806, n2807, n2808, n2810, n2815 (+17)
• Intel Core I3: 330e, 330m, 330um, 350m, 370m, 380m (+106)
• Intel Core I5: 430m, 430um, 450m, 460m, 470um, 480m (+163)
• Intel Core I7: 7y75, 610e, 620le, 620lm, 620m, 620ue (+162)
• Intel Core M: 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 (+1)
• Intel Core M3: 6y30, 7y30, 7y32
• Intel Core M5: 6y54, 6y57
• Intel Core M7: 6y75
• Intel Pentium J: j2850, j2900, j3710, j4205
• Intel Pentium N: n3510, n3520, n3530, n3540, n3700, n3710 (+1)
• Intel Xeon: e5502, e5503, e5504, e5506, e5507, e5520 (+63)
• Intel Xeon Bronze 3104: all versions
• Intel Xeon Bronze 3106: all versions
• Intel Xeon E-1105C: all versions
• Intel Xeon E3: 1505m_v6, 1515m_v5, 1535m_v5, 1535m_v6, 1545m_v5, 1558l_v5 (+5)
• Intel Xeon E3 1105C V2: all versions
• Intel Xeon E3 1125C: all versions
• Intel Xeon E3 1125C V2: all versions
• Intel Xeon E3 1220: all versions
• Intel Xeon E3 12201: all versions
• Intel Xeon E3 12201 V2: all versions
• Intel Xeon E3 1220 V2: all versions
• Intel Xeon E3 1220 V3: all versions
• Intel Xeon E3 1220 V5: all versions

References

• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
• http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
• http://nvidia.custhelp.com/app/answers/detail/a_id/4609
• http://nvidia.custhelp.com/app/answers/detail/a_id/4611
• http://nvidia.custhelp.com/app/answers/detail/a_id/4613
• http://nvidia.custhelp.com/app/answers/detail/a_id/4614
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt
• http://www.kb.cert.org/vuls/id/584653

Get alerted when CVE-2017-5754 or the next vulnerability affects your stack