CVE-2017-5925

Published: Feb 27, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.

Affected (20)

Products: Allwinner: A64 · Amd: Athlon Ii 640 X4, E 350, Fx 8120 8 Core, Fx 8320 8 Core, Fx 8350 8 Core, Phenom 9550 4 Core · Intel: Atom C2750, Celeron N2840, Core I5 M480, Core I7 2620qm, Core I7 3632qm, Core I7 4500u, Core I7 6700k, Core I7 920, Xeon E3 1240 V5, Xeon E5 2658 V2 · +2 more

Show all products

1 product

6 products

10 products

2 products

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Allwinner A64	All versions
Amd Athlon Ii 640 X4	All versions
Amd E 350	All versions
Amd Fx 8120 8 Core	All versions
Amd Fx 8320 8 Core	All versions
Amd Fx 8350 8 Core	All versions
Amd Phenom 9550 4 Core	All versions
Intel Atom C2750	All versions
Intel Celeron N2840	All versions
Intel Core I5 M480	All versions
Intel Core I7 2620qm	All versions
Intel Core I7 3632qm	All versions
Intel Core I7 4500u	All versions
Intel Core I7 6700k	All versions
Intel Core I7 920	All versions
Intel Xeon E3 1240 V5	All versions
Intel Xeon E5 2658 V2	All versions
Nvidia Tegra K1 Cd570m A1	All versions
Nvidia Tegra K1 Cd580m A1	All versions
Samsung Exynos 5800	All versions