Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.MICROSOFT_WINDOWS_SPEC_EXECUTION.NBIN
HistoryDec 18, 2019 - 12:00 a.m.

Windows Speculative Execution Configuration Check

2019-12-1800:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
1837

CVSS2

5.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:P/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.976

Percentile

100.0%

JSON

The remote host has not properly mitigated a series of known speculative execution vulnerabilities. It, therefore, may be affected by :

  • Branch Target Injection (BTI) (CVE-2017-5715)
  • Bounds Check Bypass (BCB) (CVE-2017-5753)
  • Rogue Data Cache Load (RDCL) (CVE-2017-5754)
  • Rogue System Register Read (RSRE) (CVE-2018-3640)
  • Speculative Store Bypass (SSB) (CVE-2018-3639)
  • L1 Terminal Fault (L1TF) (CVE-2018-3615, CVE-2018-3620, CVE-2018-3646)
  • Microarchitectural Data Sampling Uncacheable Memory (MDSUM) (CVE-2019-11091)
  • Microarchitectural Store Buffer Data Sampling (MSBDS) (CVE-2018-12126)
  • Microarchitectural Load Port Data Sampling (MLPDS) (CVE-2018-12127)
  • Microarchitectural Fill Buffer Data Sampling (MFBDS) (CVE-2018-12130)
  • TSX Asynchronous Abort (TAA) (CVE-2019-11135)
Binary data microsoft_windows_spec_execution.nbin

Related

ibm 6
mskb 1
fortinet 1
mscve 2
nessus 76
debian 8
fedora 3
lenovo 3
threatpost 2
openvas 34
amazon 3
redhat 25
oraclelinux 8
osv 3
suse 5
virtuozzo 2
vmware 2
centos 3
ubuntu 4
cloudfoundry 2
citrix 1
mageia 2
paloalto 1
cert 1
hp 1
ibm
ibm
Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754 (known as Spectre and Meltdown).
2021-09-23 01:45:02
Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to Spectre variants 4 and 3a (CVE-2018-3639 CVE-2018-3640)
2023-12-07 22:31:00
Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091 (known as MDS).
2021-09-22 23:05:38
mskb
mskb
KB4073065: Surface guidance to protect against silicon-based microarchitectural and speculative execution side-channel vulnerabilities
2018-05-21 07:00:00
fortinet
fortinet
Meltdown and Spectre class vulnerabilities
2019-08-26 00:00:00
mscve
mscve
Microsoft Guidance to mitigate Microarchitectural Data Sampling vulnerabilities
2019-05-14 07:00:00
Microsoft Guidance to mitigate L1TF variant
2018-08-14 07:00:00
nessus
nessus
Debian DLA-1506-1 : intel-microcode security update (Foreshadow) (Spectre)
2018-09-17 00:00:00
Security Updates for Windows 10 / Windows Server 2016 (August 2018) (Spectre) (Meltdown) (Foreshadow)
2018-08-24 00:00:00
Debian DSA-4469-1 : libvirt - security update
2019-06-24 00:00:00
debian
debian
[SECURITY] [DLA 1506-1] intel-microcode security update
2018-09-16 21:04:52
[SECURITY] [DSA 4469-1] libvirt security update
2019-06-22 16:55:45
[SECURITY] [DLA 1789-2] intel-microcode security update
2019-06-20 21:50:38
fedora
fedora
[SECURITY] Fedora 28 Update: libvirt-4.1.0-6.fc28
2019-05-21 01:14:10
[SECURITY] Fedora 30 Update: xen-4.11.1-6.fc30
2019-07-01 01:09:24
[SECURITY] Fedora 30 Update: libvirt-5.1.0-5.fc30
2019-05-17 01:08:36
lenovo
lenovo
Speculative Execution Side Channel Variants 4 and 3a - US
2018-09-13 11:41:00
Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities - Lenovo Support US
2019-05-14 16:38:15
Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities - US
2019-05-14 16:38:15
threatpost
threatpost
New Ninth-Gen Intel CPUs Shield Against Some Spectre, Meltdown Variants
2018-10-09 19:37:35
Intel ZombieLoad Side-Channel Attack: 10 Takeaways
2019-05-15 16:48:11
openvas
openvas
Fedora Update for libvirt FEDORA-2019-6e146a714c
2019-05-21 00:00:00
Debian: Security Advisory (DSA-4469-1)
2019-06-24 00:00:00
Ubuntu: Security Advisory (USN-3977-2)
2019-05-23 00:00:00
amazon
amazon
Important: qemu-kvm
2019-08-07 23:12:00
Important: kernel
2019-05-07 22:54:00
Important: kernel
2019-05-07 22:39:00
redhat
redhat
(RHSA-2019:1180) Important: libvirt security update
2019-05-14 17:24:28
(RHSA-2019:1178) Important: qemu-kvm security update
2019-05-14 17:23:31
(RHSA-2019:1177) Important: libvirt security update
2019-05-14 17:23:25
oraclelinux
oraclelinux
libvirt security update
2019-05-14 00:00:00
qemu-kvm security update
2019-05-15 00:00:00
kernel security and bug fix update
2019-05-14 00:00:00
osv
osv
intel-microcode - security update
2019-05-15 00:00:00
intel-microcode - security update
2019-06-20 00:00:00
linux - security update
2019-05-14 00:00:00
suse
suse
Security update for ucode-intel (important)
2019-05-28 00:00:00
Security update for ucode-intel (important)
2019-07-24 00:00:00
Security update for ucode-intel (important)
2019-05-20 00:00:00
virtuozzo
virtuozzo
Important kernel security update: New kernel 2.6.32-042stab138.1; Virtuozzo 6.0 Update 12 Hotfix 40 (6.0.12-3739)
2019-05-16 00:00:00
Important kernel security update: New kernel 2.6.32-042stab138.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2019-05-16 00:00:00
vmware
vmware
VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091)
2019-05-14 00:00:00
VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091)
2019-05-14 00:00:00
centos
centos
kernel, perf, python security update
2019-05-15 15:42:15
qemu security update
2019-05-15 15:40:19
bpftool, kernel, perf, python security update
2019-05-15 20:35:38
ubuntu
ubuntu
libvirt update
2019-05-16 00:00:00
Linux kernel vulnerabilities
2019-05-14 00:00:00
Intel Microcode update
2019-05-14 00:00:00
cloudfoundry
cloudfoundry
USN-3977-1: Intel Microcode update (AKA ZombieLoad Attack) | Cloud Foundry
2019-05-20 00:00:00
USN-3977-2: Intel Microcode update (AKA ZombieLoad Attack) | Cloud Foundry
2019-05-29 00:00:00
citrix
citrix
Citrix Hypervisor Security Update
2019-05-14 04:00:00
mageia
mageia
Updated kernel packages fix security vulnerability
2019-05-16 11:25:22
Updated microcode packages fix security vulnerabilities
2019-05-16 11:25:22
paloalto
paloalto
Information about Recent Intel Side Channel Vulnerabilities
2019-05-29 00:00:00
cert
cert
CPU hardware utilizing speculative execution may be vulnerable to cache side-channel attacks
2018-05-21 00:00:00
hp
hp
HPSBHF03618 rev. 8 - Intel Microarchitectural Data Sampling Security Updates
2019-05-14 00:00:00

CVSS2

5.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:P/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.976

Percentile

100.0%

JSON
Related for MICROSOFT_WINDOWS_SPEC_EXECUTION.NBIN
ibm6mskb1fortinet1mscve2nessus76debian8fedora3lenovo3threatpost2openvas34amazon3redhat25oraclelinux8osv3suse5virtuozzo2vmware2centos3ubuntu4cloudfoundry2citrix1mageia2paloalto1cert1hp1