CVE-2017-5753: arm cortex-a12_firmware Observable Discrepancy

Modified

AliasesALPINE-CVE-2017-5753SUSE-SU-2021:2861-1SUSE-SU-2021:2862-1+8 more

Published 04-01-2018Last modified 28-05-2026

Vulnerability summary

CVE-2017-5753 is a medium (CVSS 5.6) Observable Discrepancy vulnerability in arm cortex-a12_firmware. EPSS estimates a 93.84% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Routine

Not severe (CVSS 5.6, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.6/10

010

Medium · v3.1 (CVE.org)

EPSS score

93.84%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 102 · Related 74

DLA-1422-1 DLA-1423-1 DLA-1731-1 DSA-4187-1 DSA-4188-1 MGASA-2018-0071+94 more

Showing 100 of 102.

Timeline

04-01-2018
PublishedVulnerability first disclosed.
28-05-2026
Last modifiedVulnerability information updated.

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS metrics

8 scores · 6 sources · 3 versions

v3.15.6v3.05.5v2.04.7

EPSS trend

Probability

93.84%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 93.84% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databaselocalmultipleUnverified
Multiple CPUs - 'Spectre' Information Disclosure
Maturity: poc

Weaknesses

CWE · root cause

CWE-203Observable DiscrepancyThe product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Intel154 products

atom_cc2308 | c2316 | c2338 | c2350 | c2358 | c2508 | c2516 | c2518 | c2530 | c2538 | c2550 | c2558 | c2718 | c2730 | c2738 | c2750 | c2758 | c3308 | c3338 | c3508 | c3538 | c3558 | c3708 | c3750 | c3758 | c3808 | c3830 | c3850 | c3858 | c3950 | c3955 | c3958
atom_ee3805 | e3815 | e3825 | e3826 | e3827 | e3845
atom_x3c3130 | c3200rk | c3205rk | c3230rk | c3235rk | c3265rk | c3295rk | c3405 | c3445
atom_x5-e3930_firmwarena
atom_x5-e3940_firmwarena

Show all 154

Ubuntu21 products

firefox< 57.0.4+build1-0ubuntu0.14.04.1 | < 57.0.4+build1-0ubuntu0.16.04.1 | < 59.0.1+build1-0ubuntu1
linux< 3.13.0-157.207 | < 4.4.0-112.135
linux-aws< 4.4.0-1011.11 | < 4.4.0-1049.58
linux-azure< 4.15.0-1013.13~16.04.2
linux-azure-fdeAll versions (No fix recorded)

Show all 21

Arm18 products

Show all 18

Debian3 products

linux< 4.15.11-1
nvidia-graphics-drivers< 384.111-1
debian_linuxEOL8.0 | 9.0

Alpine2 products

intel-ucode< 20190514a-r0
xen< 4.7.3-r4 | < 4.8.2-r4 | < 4.9.1-r3

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 17.04 | 17.10

Intel corporation1 product

most modern operating systemsAll

7 vendors · 200 products · Showing 200 of 376

References

110 links

nvidia.custhelp.com/app/answers/detail/a_id/4609X Refsource CONFIRMThird Party Advisory
lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlMailing ListX Refsource MLISTThird Party Advisory
www.debian.org/security/2018/dsa-4187Vendor AdvisoryX Refsource DEBIANThird Party Advisory
usn.ubuntu.com/3542-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
security.gentoo.org/glsa/201810-06Vendor AdvisoryX Refsource GENTOOThird Party Advisory
usn.ubuntu.com/3540-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/security/vulnerabilities/speculativeexecutionX Refsource CONFIRMThird Party AdvisoryARTICLE
portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002X Refsource CONFIRMPatchThird Party AdvisoryVendor Advisory
usn.ubuntu.com/3597-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlMailing ListX Refsource MLISTThird Party Advisory

Show all 100 references

lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
nvidia.custhelp.com/app/answers/detail/a_id/4611X Refsource CONFIRMThird Party AdvisoryREPORT
security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlX Refsource MISCThird Party AdvisoryREPORT
cert.vde.com/en-us/advisories/vde-2018-002X Refsource CONFIRMThird Party Advisory
usn.ubuntu.com/3580-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
support.f5.com/csp/article/K91229003X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.debian.org/security/2018/dsa-4188Vendor AdvisoryX Refsource DEBIANThird Party Advisory
access.redhat.com/errata/RHSA-2018:0292Vendor AdvisoryX Refsource REDHATThird Party Advisory
xenbits.xen.org/xsa/advisory-254.htmlX Refsource CONFIRMThird Party Advisory
security.netapp.com/advisory/ntap-20180104-0001/X Refsource CONFIRMThird Party Advisory
www.synology.com/support/security/Synology_SA_18_01X Refsource CONFIRMThird Party Advisory
packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txtX Refsource CONFIRMThird Party Advisory
lists.debian.org/debian-lts-announce/2018/07/msg00020.htmlMailing ListX Refsource MLISTThird Party Advisory
developer.arm.com/support/arm-security-updates/speculative-processor-vulnerabilityX Refsource CONFIRMThird Party Advisory
www.kb.cert.org/vuls/id/584653Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.kb.cert.org/vuls/id/180049Third Party AdvisoryX Refsource CERT VNUS Government Resource
cert.vde.com/en-us/advisories/vde-2018-003X Refsource CONFIRMThird Party Advisory
help.ecostruxureit.com/display/…X Refsource CONFIRMThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlX Refsource CONFIRMPatchThird Party Advisory
support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_usX Refsource CONFIRMThird Party Advisory
www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001X Refsource CONFIRMThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-505225.pdfX Refsource CONFIRMThird Party Advisory
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_usX Refsource CONFIRMThird Party Advisory
usn.ubuntu.com/3549-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/X Refsource CONFIRMThird Party Advisory
support.citrix.com/article/CTX231399X Refsource CONFIRMThird Party Advisory
spectreattack.comX Refsource MISCTechnical DescriptionThird Party AdvisoryARTICLEREPORT
aws.amazon.com/de/security/security-bulletins/AWS-2018-013/X Refsource CONFIRMThird Party Advisory
blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/X Refsource CONFIRMThird Party Advisory
www.securitytracker.com/id/1040071VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/bid/102371VDB EntryX Refsource BIDThird Party Advisory
usn.ubuntu.com/3597-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
nvidia.custhelp.com/app/answers/detail/a_id/4614X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
usn.ubuntu.com/3540-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannelVendor AdvisoryX Refsource CISCOThird Party Advisory
usn.ubuntu.com/usn/usn-3516-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.vmware.com/us/security/advisories/VMSA-2018-0002.htmlX Refsource CONFIRMThird Party Advisory
www.exploit-db.com/exploits/43427/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
usn.ubuntu.com/3541-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
usn.ubuntu.com/3541-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
usn.ubuntu.com/3542-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.htmlX Refsource MISCThird Party AdvisoryARTICLE
support.lenovo.com/us/en/solutions/LEN-18282X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
nvidia.custhelp.com/app/answers/detail/a_id/4613X Refsource CONFIRMThird Party Advisory
lists.debian.org/debian-lts-announce/2019/03/msg00034.htmlMailing ListX Refsource MLISTThird Party Advisory
lists.debian.org/debian-lts-announce/2019/04/msg00004.htmlMailing ListX Refsource MLISTThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlX Refsource MISCPatchThird Party Advisory
seclists.org/bugtraq/2019/Jun/36Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txtX Refsource CONFIRMThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfX Refsource CONFIRMThird Party Advisory
cdrdv2.intel.com/v1/dl/getContent/685359X Refsource CONFIRMVendor Advisory
security.alpinelinux.org/vuln/CVE-2017-5753Advisory
www.suse.com/support/update/announcement/2021/suse-su-20212861-1/Advisory
bugzilla.suse.com/1189477REPORT
www.suse.com/security/cve/CVE-2017-5753WEB
www.suse.com/support/update/announcement/2021/suse-su-20212862-1/Advisory
access.redhat.com/errata/RHSA-2018:0182Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/security/cve/CVE-2017-5753REPORT
access.redhat.com/security/cve/CVE-2017-5715ARTICLE
access.redhat.com/security/cve/CVE-2017-5754ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1519778REPORT
bugzilla.redhat.com/show_bug.cgi?id=1519780REPORT
bugzilla.redhat.com/show_bug.cgi?id=1519781REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0182.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2017-5753AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-5753Advisory
meltdownattack.comARTICLE
access.redhat.com/errata/RHSA-2018:0496Advisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0496.jsonAdvisory
access.redhat.com/errata/RHSA-2018:0512Advisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0512.jsonAdvisory
ubuntu.com/security/CVE-2017-5753REPORT
wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdownREPORT
googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.htmlREPORT
security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-frREPORT
www.amd.com/en/corporate/speculative-executionREPORT
developer.arm.com/support/security-updateREPORT
webkitgtk.org/security/WSA-2018-0001.htmlREPORT
ubuntu.com/security/notices/USN-3516-1Advisory
ubuntu.com/security/notices/USN-3521-1Advisory
ubuntu.com/security/notices/USN-3530-1Advisory
ubuntu.com/security/notices/USN-3542-1Advisory
ubuntu.com/security/notices/USN-3542-2Advisory
ubuntu.com/security/notices/USN-3540-2Advisory

Showing 100 of 110.