CVE-2017-5926 in CPUinfo

Summary

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

Reservation

02/07/2017

Disclosure

02/27/2017

Entries

VDB-97305

CPE

ready

CVSS

6.1

EPSS

0.00383

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-5926
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-5926
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-5926/

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!