vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-5754

MEDIUM
5.6
CVSS Score
Published: January 4, 2018 at 01:00 PM UTC
Updated: June 17, 2026 at 01:21 AM UTC
209 products affected across 2 vendorsXeon Bronze 3106Xeon Bronze 3104Xeon E3-1501l V6

Using Most Modern Operating Systems by Intel Corporation?

Get instant alerts when new vulnerabilities affect Most Modern Operating Systems - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.6
Exploit prediction
EPSS 67%
SSVC
No known exploit

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Cortex a· Arm
95%
75
Atom C· Intel
95%
c2308c2316c2338c2350c2358c2508c2516c2518c2530c2538c2550c2558c2718c2730c2738c2750c2758c3308c3338c3508c3538c3558c3708c3750c3758c3808c3830c3850c3858c3950c3955c3958
Atom E· Intel
95%
e3805e3815e3825e3826e3827e3845
Atom X3· Intel
95%
c3130c3200rkc3205rkc3230rkc3235rkc3265rkc3295rkc3405c3445
Atom Z· Intel
95%
z2420z2460z2480z2520z2560z2580z2760z3460z3480z3530z3560z3570z3580z3590z3735dz3735ez3735fz3735gz3736fz3736gz3740z3740dz3745z3745dz3770z3770dz3775z3775dz3785z3795
Celeron J· Intel
95%
j1750j1800j1850j1900j3060j3160j3355j3455j4005j4105
Celeron N· Intel
95%
n2805n2806n2807n2808n2810n2815n2820n2830n2840n2910n2920n2930n2940n3000n3010n3050n3060n3150n3160n3350n3450n4000n4100
Core I3· Intel
95%
21002100t210221052115c21202120t212521302310e2310m2312m2328m2330e2330m2340ue2348m2350m2357m2365m2367m2370m2375m2377m3110m3115c3120m3120me3130m32103217u3217ue32203220t32253227u3229y32403240t324532503250t330e330m330um350m370m380m380um390m4000m4005u4010u4010y4012y4020y4025u4030u4030y4100e4100m4100u4102e4110e4110m4112e4120u41304130t41504150t4158u41604160t41704170t43304330t4330te43404340te43504350t43604360t43704370t5005u5010u5015u5020u5157u5305405505606006u6098p61006100e6100h6100t6100te6100u6102e6157u6167u63006300t632081008350k
Core I5· Intel
95%
2300231023202380p2390t24002400s2405s2410m2430m2435m2450m2450p2467m25002500k2500s2500t2510e2515e2520m2537m2540m2550k2557m3210m3230m3317u3320m33303330s3337u3339y33403340m3340s3350p3360m3380m3427u3437u3439y34503450s34703470s3470t3475s35503550s35703570k3570s3570t3610me4200h4200m4200u4200y4202y4210h4210m4210u4210y4220y4250u4258u4260u4278u4288u4300m4300u4300y4302y4308u430m430um4310m4310u4330m4340m4350u4360u4400e4402e4402ec4410e4422e44304430s44404440s44604460s4460t450m45704570r4570s4570t4570te45904590s4590t460m46704670k4670r4670s4670t46904690k4690s4690t470um480m5200u520e520m520um5250u5257u5287u5300u5350h5350u540m540um5575r560m560um5675c5675r580m6200u6260u6267u6287u6300hq6300u6350hq6360u64006400t6402p6440eq6440hq6442eq65065006500t6500te655k6585r66066006600k6600t6616685r670680750750s7608250u8350u84008600k
Core I7· Intel
95%
26002600k2600s2610ue2617m2620m2629m2630qm2635qm2637m2640m2649m2655le2657m2670qm2675qm2677m2700k2710qe2715qe2720qm2760qm2820qm2860qm2920xm2960xm3517u3517ue3520m3537u3540m3555le3610qe3610qm3612qe3612qm3615qe3615qm3630qm3632qm3635qm3667u3687u3689y3720qm3740qm37703770k3770s3770t3820qm3840qm4500u4510u4550u4558u4578u4600m4600u4610m4610y4650u4700ec4700eq4700hq4700mq4702ec4702hq4702mq4710hq4710mq4712hq4712mq4720hq4722hq4750hq4760hq4765t47704770hq4770k4770r4770s4770t4770te47714785t47904790k4790s4790t4800mq4810mq4850hq4860hq4870hq4900mq4910mq4950hq4960hq4980hq5500u5550u5557u5600u5650u5700eq5700hq5750hq5775c5775r5850eq5850hq5950hq610e620le620lm620m620ue620um640lm640m640um660lm660ue660um680um720qm740qm7500u7560u7567u7600u7660u77007700hq7700k7700t7820eq7820hk7820hq7920hq7y75820qm840qm8550u860860s8650u87087008700k870s875k880920920xm930940940xm950960965970975980980x990x

References (66)

Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://nvidia.custhelp.com/app/answers/detail/a_id/4609
x_refsource_CONFIRM
Source: [email protected]
http://nvidia.custhelp.com/app/answers/detail/a_id/4611
x_refsource_CONFIRM
Source: [email protected]
http://nvidia.custhelp.com/app/answers/detail/a_id/4613

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.6MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card