CVE-2018-3640

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

Published: 2018-05-22 Last update: 2024-11-21 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2018-3640 is rated Moderate Risk (51.1/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 1.56%). Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2018-3640

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-05-11 1.38% 1.56% +0.18%
2 2026-04-28 1.56% 1.38% -0.18%
3 2026-04-23 — 1.56% —

Full EPSS history (25 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2018-3640

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.6 3.0 MEDIUM
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Click to expand
Attack vector (AV:L)
They already need access on the box, or another person has to do something wrong; it’s not a remote drive-by.
Attack complexity (AC:H)
Even with access, the exploit needs extra luck, timing, or a fussy environment to actually work.
Privileges required (PR:L)
A normal user session is enough; they don’t have to be admin.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:C)
Breaking this can reach past the original component and bite other resources—bigger blast radius.
Confidentiality (C:H)
Serious risk that confidential data gets exposed in a big way.
Integrity (I:N)
Data isn’t meaningfully altered or forged.
Availability (A:N)
Service keeps running; no real outage angle.
 1.1 4.0 [email protected]
4.7 2.0 MEDIUM
AV:L/AC:M/Au:N/C:C/I:N/A:N Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:N)
No availability impact.
 3.4 6.9 [email protected]

Weakness enumeration for CVE-2018-3640

OS Trackers for CVE-2018-3640

vendor priority summary link
debian not yet assigned CVE-2018-3640 not yet assigned priority: Debian including 1 source packages (intel-microcode), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2018-3640
redhat medium — https://access.redhat.com/security/cve/CVE-2018-3640
suse medium CVE-2018-3640 severity moderate: SUSE including 22 source package names (microcode_ctl-1.17-102.57.64.21.1, microcode_ctl-1.17-102.83.27.1, …), 48 product×package rows across 48 product lines (SUSE CaaS Platform 3.0, SUSE Enterprise Storage 4, … (48 product lines)): Fixed 48. https://www.suse.com/security/cve/CVE-2018-3640/
ubuntu medium CVE-2018-3640 medium priority: Ubuntu including 1 source packages (intel-microcode), 5 status rows across 5 suites (artful, bionic, trusty, upstream, xenial): released 3, ignored 1, needed 1. https://ubuntu.com/security/CVE-2018-3640

Affected software / configurations for CVE-2018-3640

Vendor Product Version Raw CPE
intel atom_c c2308 cpe:2.3:h:intel:atom_c:c2308:*:*:*:*:*:*:*
intel atom_c c3308 cpe:2.3:h:intel:atom_c:c3308:*:*:*:*:*:*:*
intel atom_c c3338 cpe:2.3:h:intel:atom_c:c3338:*:*:*:*:*:*:*
intel atom_c c3508 cpe:2.3:h:intel:atom_c:c3508:*:*:*:*:*:*:*
intel atom_c c3538 cpe:2.3:h:intel:atom_c:c3538:*:*:*:*:*:*:*
intel atom_c c3558 cpe:2.3:h:intel:atom_c:c3558:*:*:*:*:*:*:*
intel atom_c c3708 cpe:2.3:h:intel:atom_c:c3708:*:*:*:*:*:*:*
intel atom_c c3750 cpe:2.3:h:intel:atom_c:c3750:*:*:*:*:*:*:*
intel atom_c c3758 cpe:2.3:h:intel:atom_c:c3758:*:*:*:*:*:*:*
intel atom_c c3808 cpe:2.3:h:intel:atom_c:c3808:*:*:*:*:*:*:*
intel atom_c c3830 cpe:2.3:h:intel:atom_c:c3830:*:*:*:*:*:*:*
intel atom_c c3850 cpe:2.3:h:intel:atom_c:c3850:*:*:*:*:*:*:*
intel atom_c c3858 cpe:2.3:h:intel:atom_c:c3858:*:*:*:*:*:*:*
intel atom_c c3950 cpe:2.3:h:intel:atom_c:c3950:*:*:*:*:*:*:*
intel atom_c c3955 cpe:2.3:h:intel:atom_c:c3955:*:*:*:*:*:*:*
intel atom_c c3958 cpe:2.3:h:intel:atom_c:c3958:*:*:*:*:*:*:*
intel atom_e e3805 cpe:2.3:h:intel:atom_e:e3805:*:*:*:*:*:*:*
intel atom_e e3815 cpe:2.3:h:intel:atom_e:e3815:*:*:*:*:*:*:*
intel atom_e e3825 cpe:2.3:h:intel:atom_e:e3825:*:*:*:*:*:*:*
intel atom_e e3826 cpe:2.3:h:intel:atom_e:e3826:*:*:*:*:*:*:*
intel atom_e e3827 cpe:2.3:h:intel:atom_e:e3827:*:*:*:*:*:*:*
intel atom_e e3845 cpe:2.3:h:intel:atom_e:e3845:*:*:*:*:*:*:*
intel atom_z z2420 cpe:2.3:h:intel:atom_z:z2420:*:*:*:*:*:*:*
intel atom_z z2460 cpe:2.3:h:intel:atom_z:z2460:*:*:*:*:*:*:*
intel atom_z z2480 cpe:2.3:h:intel:atom_z:z2480:*:*:*:*:*:*:*
intel atom_z z2520 cpe:2.3:h:intel:atom_z:z2520:*:*:*:*:*:*:*
intel atom_z z2560 cpe:2.3:h:intel:atom_z:z2560:*:*:*:*:*:*:*
intel atom_z z2580 cpe:2.3:h:intel:atom_z:z2580:*:*:*:*:*:*:*
intel atom_z z2760 cpe:2.3:h:intel:atom_z:z2760:*:*:*:*:*:*:*
intel atom_z z3460 cpe:2.3:h:intel:atom_z:z3460:*:*:*:*:*:*:*
intel atom_z z3480 cpe:2.3:h:intel:atom_z:z3480:*:*:*:*:*:*:*
intel atom_z z3530 cpe:2.3:h:intel:atom_z:z3530:*:*:*:*:*:*:*
intel atom_z z3560 cpe:2.3:h:intel:atom_z:z3560:*:*:*:*:*:*:*
intel atom_z z3570 cpe:2.3:h:intel:atom_z:z3570:*:*:*:*:*:*:*
intel atom_z z3580 cpe:2.3:h:intel:atom_z:z3580:*:*:*:*:*:*:*
intel atom_z z3590 cpe:2.3:h:intel:atom_z:z3590:*:*:*:*:*:*:*
intel atom_z z3735d cpe:2.3:h:intel:atom_z:z3735d:*:*:*:*:*:*:*
intel atom_z z3735e cpe:2.3:h:intel:atom_z:z3735e:*:*:*:*:*:*:*
intel atom_z z3735f cpe:2.3:h:intel:atom_z:z3735f:*:*:*:*:*:*:*
intel atom_z z3735g cpe:2.3:h:intel:atom_z:z3735g:*:*:*:*:*:*:*
intel atom_z z3736f cpe:2.3:h:intel:atom_z:z3736f:*:*:*:*:*:*:*
intel atom_z z3736g cpe:2.3:h:intel:atom_z:z3736g:*:*:*:*:*:*:*
intel atom_z z3740 cpe:2.3:h:intel:atom_z:z3740:*:*:*:*:*:*:*
intel atom_z z3740d cpe:2.3:h:intel:atom_z:z3740d:*:*:*:*:*:*:*
intel atom_z z3745 cpe:2.3:h:intel:atom_z:z3745:*:*:*:*:*:*:*
intel atom_z z3745d cpe:2.3:h:intel:atom_z:z3745d:*:*:*:*:*:*:*
intel atom_z z3770 cpe:2.3:h:intel:atom_z:z3770:*:*:*:*:*:*:*
intel atom_z z3770d cpe:2.3:h:intel:atom_z:z3770d:*:*:*:*:*:*:*
intel atom_z z3775 cpe:2.3:h:intel:atom_z:z3775:*:*:*:*:*:*:*
intel atom_z z3775d cpe:2.3:h:intel:atom_z:z3775d:*:*:*:*:*:*:*
intel atom_z z3785 cpe:2.3:h:intel:atom_z:z3785:*:*:*:*:*:*:*
intel atom_z z3795 cpe:2.3:h:intel:atom_z:z3795:*:*:*:*:*:*:*
intel celeron_j j3455 cpe:2.3:h:intel:celeron_j:j3455:*:*:*:*:*:*:*
intel celeron_j j4005 cpe:2.3:h:intel:celeron_j:j4005:*:*:*:*:*:*:*
intel celeron_j j4105 cpe:2.3:h:intel:celeron_j:j4105:*:*:*:*:*:*:*
intel celeron_n n3450 cpe:2.3:h:intel:celeron_n:n3450:*:*:*:*:*:*:*
intel core_i3 32nm cpe:2.3:h:intel:core_i3:32nm:*:*:*:*:*:*:*
intel core_i3 45nm cpe:2.3:h:intel:core_i3:45nm:*:*:*:*:*:*:*
intel core_i5 32nm cpe:2.3:h:intel:core_i5:32nm:*:*:*:*:*:*:*
intel core_i5 45nm cpe:2.3:h:intel:core_i5:45nm:*:*:*:*:*:*:*
intel core_i7 32nm cpe:2.3:h:intel:core_i7:32nm:*:*:*:*:*:*:*
intel core_i7 45nm cpe:2.3:h:intel:core_i7:45nm:*:*:*:*:*:*:*
intel core_m 32nm cpe:2.3:h:intel:core_m:32nm:*:*:*:*:*:*:*
intel core_m 45nm cpe:2.3:h:intel:core_m:45nm:*:*:*:*:*:*:*
intel pentium n4000 cpe:2.3:h:intel:pentium:n4000:*:*:*:*:*:*:*
intel pentium n4100 cpe:2.3:h:intel:pentium:n4100:*:*:*:*:*:*:*
intel pentium n4200 cpe:2.3:h:intel:pentium:n4200:*:*:*:*:*:*:*
intel pentium_j j4205 cpe:2.3:h:intel:pentium_j:j4205:*:*:*:*:*:*:*
intel pentium_silver j5005 cpe:2.3:h:intel:pentium_silver:j5005:*:*:*:*:*:*:*
intel pentium_silver n5000 cpe:2.3:h:intel:pentium_silver:n5000:*:*:*:*:*:*:*
intel xeon_e-1105c — cpe:2.3:h:intel:xeon_e-1105c:-:*:*:*:*:*:*:*
intel xeon_e3 125c_ cpe:2.3:h:intel:xeon_e3:125c_:*:*:*:*:*:*:*
intel xeon_e3 1220_ cpe:2.3:h:intel:xeon_e3:1220_:*:*:*:*:*:*:*
intel xeon_e3 1275_ cpe:2.3:h:intel:xeon_e3:1275_:*:*:*:*:*:*:*
intel xeon_e3 1505m_v6 cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:*
intel xeon_e3 1515m_v5 cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:*
intel xeon_e3 1535m_v5 cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:*
intel xeon_e3 1535m_v6 cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:*
intel xeon_e3 1545m_v5 cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:*
intel xeon_e3 1558l_v5 cpe:2.3:h:intel:xeon_e3:1558l_v5:*:*:*:*:*:*:*

References for CVE-2018-3640

URL Tags
http://support.lenovo.com/us/en/solutions/LEN-22133 Third Party Advisory
http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html Third Party Advisory
http://www.securityfocus.com/bid/104228 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040949 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1042004
https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html
https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180013 Patch Third Party Advisory Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0005
https://security.netapp.com/advisory/ntap-20180521-0001/ Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel Third Party Advisory
https://usn.ubuntu.com/3756-1/
https://www.debian.org/security/2018/dsa-4273
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html Vendor Advisory
https://www.kb.cert.org/vuls/id/180049 Third Party Advisory US Government Resource
https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
https://www.synology.com/support/security/Synology_SA_18_23 Third Party Advisory
https://www.us-cert.gov/ncas/alerts/TA18-141A Third Party Advisory US Government Resource
cvelogic Threat Intelligence