My Blog

Partial Physical Address Leakage Advisory

Intel ID: INTEL-SA-00247
Advisory Category: Hardware
Impact of vulnerability: Information Disclosure
Severity rating: LOW
Original release: 06/11/2019
Last revised: 06/11/2019

Summary:

A potential security vulnerability in some microprocessors may allow partial information disclosure via local access.

Vulnerability Details:

CVEID: CVE-2019-0174

Description: Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access.

CVSS Base Score:  3.8 Low

CVSS Vector:  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected Products:

Microprocessors:
Intel® Core™ X-series Processors, 4th Generation Intel® Core™ i5 Processors,4th Generation Intel® Core™ i3 Processors, Intel® Pentium® Processor G Series, Intel® Pentium® Processor 3000 Series, Intel® Celeron® Processor 2000 Series, Intel® Xeon® Processor E7 v3 Family, Intel® Xeon® Processor E5 v3 Family, Intel® Xeon® Processor E3 v3 Family.

Recommendations:

Partial physical address information potentially disclosed through exploitation of this vulnerability does not contain user secrets, but could potentially be utilized to enhance unrelated attack methods.  For published exploits that Intel is aware of, Intel recommends users follow existing best practices including:

The use of DRAM modules resistant to Rowhammer style attacks.

Security Best Practices For Side Channel Resistance:

https://software.intel.com/security-software-guidance/insights/security-best-practices-side-channel-resistance

Guidelines For Mitigating Timing Side Channels Against Cryptographic Implementations:

https://software.intel.com/security-software-guidance/insights/guidelines-mitigating-timing-side-channels-against-cryptographic-implementations

Acknowledgements:

Intel would like to thank Andrew Kwong, Daniel Genkin from University of Michigan and Daniel Gruss from Graz University of Technology and Yuval Yarom from University of Adelaide and Data61 for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

Revision History

Revision Date Description
1.0 06/11/2019 Initial Release
my-tracker_cptePartial Physical Address Leakage Advisory