{"id":"CVE-2017-5754","published":"2018-01-04T13:00:00Z","modified":"2026-05-28T17:53:08Z","title":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized…","vendor":"Intel Corporation","product":"Most Modern Operating Systems","tier":"core","eol":null,"affectedVersions":[{"vendor":"Intel Corporation","product":"Most Modern Operating Systems","versions":["All"]}],"description":{"text":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in the speculative execution and indirect branch prediction behaviour of microprocessors from Intel Corporation, and it affects most modern operating systems running on those processors. An attacker who already has local user access can perform a side-channel analysis of the data cache, which may allow unauthorized disclosure of information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:37Z"},"cvss":{"score":5.6,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.67407,"percentile":0.99304,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":15,"pulses":[{"name":"ripe.arin.enom.cpanel.cpcalendar.iana.networksolutions.02050.webdisk.webmail.","url":"https://otx.alienvault.com/pulse/69fdc02bea1e4ec923b01688","created":"2026-05-08"},{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64eccb5d39a90a3c391e","created":"2026-03-22"},{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64e1d5e06aa6207f78de","created":"2026-03-22"},{"name":"clone of my pulse. this dmv kit pdfkit.net used the same off logo kit it was one of the few i found in their fcc application   . rpi&macids look for","url":"https://otx.alienvault.com/pulse/69aeda93ec05fb8653adca6d","created":"2026-03-09"},{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"},{"name":"“Broken Seal” DocuSign-themed Delivery with Fileless Process Hollowing (Zeppelin/Bloat-A)","url":"https://otx.alienvault.com/pulse/698e93e1ab02db8c49e8c3ed","created":"2026-02-13"},{"name":"Double Umbrella AS15169/AS21928: This evaluates a critical structural convergence between Google (AS15169) and T-Mobile USA (AS21928) within the global Tier-1 routing backbone","url":"https://otx.alienvault.com/pulse/698d30c03b57c38dff915023","created":"2026-02-12"},{"name":"103.203.175.90 - Document and Domain Research Intersect, PDFKIT.NET DMV","url":"https://otx.alienvault.com/pulse/698c75717175e2cc7ff33df2","created":"2026-02-11"},{"name":"Reputation Shielded C2 Pivot; High-Churn Wix Infrastructure with iCloud Exfil Adjacency","url":"https://otx.alienvault.com/pulse/698c3273517158869e0ba780","created":"2026-02-11"},{"name":"151.101.0.22","url":"https://otx.alienvault.com/pulse/698918baac756a084ef67089","created":"2026-02-08"}],"provenance":"machine"},"cwes":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"}],"references":[{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4609","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3523-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/usn/usn-3525-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM"]},{"url":"https://security.gentoo.org/glsa/201810-06","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"https://www.debian.org/security/2018/dsa-4082","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://support.citrix.com/article/CTX234679","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3540-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3522-3/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/security/vulnerabilities/speculativeexecution","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3597-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4611","tags":["x_refsource_CONFIRM"]},{"url":"https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html","tags":["x_refsource_MISC"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-002","tags":["x_refsource_CONFIRM"]},{"url":"https://www.debian.org/security/2018/dsa-4120","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://support.f5.com/csp/article/K91229003","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/usn/usn-3524-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.debian.org/security/2018/dsa-4078","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://source.android.com/security/bulletin/2018-04-01","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0292","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://xenbits.xen.org/xsa/advisory-254.html","tags":["x_refsource_CONFIRM"]},{"url":"https://security.netapp.com/advisory/ntap-20180104-0001/","tags":["x_refsource_CONFIRM"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_01","tags":["x_refsource_CONFIRM"]},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt","tags":["x_refsource_CONFIRM"]},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","tags":["x_refsource_CONFIRM"]},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","tags":["x_refsource_CONFIRM"]},{"url":"http://www.kb.cert.org/vuls/id/584653","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://usn.ubuntu.com/usn/usn-3522-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.kb.cert.org/vuls/id/180049","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://usn.ubuntu.com/3583-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-003","tags":["x_refsource_CONFIRM"]},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/","tags":["x_refsource_CONFIRM"]},{"url":"https://support.citrix.com/article/CTX231399","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/102378","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc","tags":["vendor-advisory","x_refsource_FREEBSD"]},{"url":"https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/106128","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1040071","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://usn.ubuntu.com/3597-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4614","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel","tags":["vendor-advisory","x_refsource_CISCO"]},{"url":"https://usn.ubuntu.com/usn/usn-3523-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/usn/usn-3516-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3541-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","tags":["x_refsource_MISC"]},{"url":"https://support.lenovo.com/us/en/solutions/LEN-18282","tags":["x_refsource_CONFIRM"]},{"url":"https://meltdownattack.com/","tags":["x_refsource_MISC"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4613","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3522-4/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC"]},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","tags":["x_refsource_CONFIRM"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","tags":["x_refsource_CONFIRM"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC"]},{"url":"https://cdrdv2.intel.com/v1/dl/getContent/685358","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-14831","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14831","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":6,"skipped":0,"earliest":"2018-01-04","earliestUrl":"https://github.com/ionescu007/SpecuCheck","repos":[{"name":"ionescu007/SpecuCheck","url":"https://github.com/ionescu007/SpecuCheck","stars":586,"created":"2018-01-04"},{"name":"raphaelsc/Am-I-affected-by-Meltdown","url":"https://github.com/raphaelsc/Am-I-affected-by-Meltdown","stars":539,"created":"2018-01-04"},{"name":"Viralmaniar/In-Spectre-Meltdown","url":"https://github.com/Viralmaniar/In-Spectre-Meltdown","stars":96,"created":"2018-01-05"},{"name":"speecyy/Am-I-affected-by-Meltdown","url":"https://github.com/speecyy/Am-I-affected-by-Meltdown","stars":1,"created":"2018-01-06"},{"name":"jdmulloy/meltdown-aws-scanner","url":"https://github.com/jdmulloy/meltdown-aws-scanner","stars":1,"created":"2018-01-26"}]},"first":{"date":"2018-01-04","source":"PoC-in-GitHub","url":"https://github.com/ionescu007/SpecuCheck"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2018-01-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-5754","provenance":"source"},{"date":"2018-01-04","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/ionescu007/SpecuCheck","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":31.5,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9930"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"6 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":2.73,"detail":"15 pulses"},{"name":"CVSS severity","points":3.92,"detail":"base score 5.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-intel-corporation-most-modern-operating--cve-2017-5754","children":[{"from":"CVE-2017-5754","to":"CVE-2018-10471","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","from":"CVE.org","in":"CVE-2018-10471"}]}]}}