CVE-2018-3691

Medium

4.7/10

Summary

Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.

Attack Complexity: HIGH
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: LOW
Confidentiality Impact: HIGH
Availability Impact: NONE

References

Advisory Timeline

Published Jun 05, 2018

CVE-2018-3691

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS