PT-2017-16763

CVE-2017-5926

·

Published

2017-02-27

·

Updated

2017-03-02

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions AMD processors (affected versions not specified)
Description The issue concerns modern AMD processors, where page table walks conducted by the Memory Management Unit (MMU) during virtual to physical address translation can leave a trace in the last level cache. This can be exploited through a side-channel attack on MMU operations, potentially allowing data and code pointers to be leaked from JavaScript and breaking Address Space Layout Randomization (ASLR).
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾