What’s Vulnerable › Vulnerabilities
CVE-2018-3693
- Severity: medium (CVSS 5.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 8.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-07-10 · updated 2026-06-17
Description
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
Affected products
- Arm Cortex-A: 8, 9, 12, 15, 17, 57 (+4)
- Arm Cortex-R: 7, 8
- Fujitsu M12-1 Firmware: before xcp3090 — fixed in xcp3090
- Fujitsu M12-2 Firmware: before xcp3090 — fixed in xcp3090
- Fujitsu M12-2S Firmware: before xcp3090 — fixed in xcp3090
- Intel Atom C: c2308, c2316, c2338, c2350, c2358, c2508 (+26)
- Intel Atom E: e3805, e3815, e3825, e3826, e3827, e3845
- Intel Atom X3: c3130, c3200rk, c3205rk, c3230rk, c3235rk, c3265rk (+3)
- Intel Atom Z: z2420, z2460, z2480, z2520, z2560, z2580 (+24)
- Intel Celeron J: j1750, j1800, j1850, j1900, j3060, j3160 (+4)
- Intel Celeron N: n2805, n2806, n2807, n2808, n2810, n2815 (+17)
- Intel Core I3: 330e, 330m, 330um, 350m, 370m, 380m (+106)
- Intel Core I5: 430m, 430um, 450m, 460m, 470um, 480m (+163)
- Intel Core I7: 7y75, 610e, 620le, 620lm, 620m, 620ue (+162)
- Intel Core M: 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 (+1)
- Intel Core M3: 6y30, 7y30, 7y32
- Intel Core M5: 6y54, 6y57
- Intel Core M7: 6y75
- Intel Pentium J: j2850, j2900, j3710, j4205
- Intel Pentium N: n3510, n3520, n3530, n3540, n3700, n3710 (+1)
- Intel Xeon: e5502, e5503, e5504, e5506, e5507, e5520 (+63)
- Intel Xeon Bronze 3104: all versions
- Intel Xeon Bronze 3106: all versions
- Intel Xeon E-1105C: all versions
- Intel Xeon E3: 1505m_v6, 1515m_v5, 1535m_v5, 1535m_v6, 1545m_v5, 1558l_v5 (+5)
- Intel Xeon E3 1105C V2: all versions
- Intel Xeon E3 1125C: all versions
- Intel Xeon E3 1125C V2: all versions
- Intel Xeon E3 1220: all versions
- Intel Xeon E3 12201: all versions
How to fix
Upgrade to a fixed version: Fujitsu M12-1 Firmware xcp3090; Fujitsu M12-2 Firmware xcp3090; Fujitsu M12-2S Firmware xcp3090. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2018:2384
- https://access.redhat.com/errata/RHSA-2018:2390
- https://access.redhat.com/errata/RHSA-2018:2395
- https://access.redhat.com/errata/RHSA-2019:1946
- https://access.redhat.com/errata/RHSA-2020:0174
- https://cdrdv2.intel.com/v1/dl/getContent/685359
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://security.netapp.com/advisory/ntap-20180823-0001/
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://access.redhat.com/errata/RHSA-2018:2384
Get alerted when CVE-2018-3693 or the next vulnerability affects your stack