CVE-2018-3693

intel-microcode: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure...

CVE-2018-3693 is fixed in intel-microcode on 1 platform by intel-microcode 3.20180312.0~ubuntu18.04.1 (version 3.20180312.0~ubuntu18.04.1), released July 10, 2018. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
n/a
High
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0863
95th percentile

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.

Where it's fixed

ProductFixed inFixReleased
Linux
intel-microcode · Ubuntu 18.04.6 LTS (bionic) 3.20180312.0~ubuntu18.04.1 intel-microcode 3.20180312.0~ubuntu18.04.1 Jul 10, 2018