Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2018-3615 Details

Description

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

Metrics

CVSS 3.x Severity and Vector Strings:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf CVE
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf CVE
https://foreshadowattack.eu/ CVETechnical DescriptionThird Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html CVE
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0008 CVEThird Party Advisory

see all 34 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-203Observable Discrepancy[email protected]
CWE-203Observable DiscrepancyCISA-ADP

Affected Products

ProductVersions

Change History

41 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2018-3615
NVD Published Date:
Aug 14, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2018-3615 Details - Not Deferred