{"vulnerability": "cve-2018-3693", "sightings": [{"uuid": "c87480ab-9b38-44e3-8b1f-33c4f3e23556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-3693", "type": "exploited", "source": "https://t.me/SecLabNews/2634", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041a\u0438\u0440\u0438\u0430\u043d\u0441\u043a\u0438\u0439 \u0438 \u041a\u0430\u0440\u043b \u0412\u0430\u043b\u0434\u0441\u043f\u0443\u0440\u0433\u0435\u0440 (Carl Waldspurger) \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Spectre v1 (CVE-2017-5753) - Spectre 1.1 (CVE-2018-3693) \u0438 Spectre 1.2. \u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 Spectre 1.1, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u00ab\u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u00bb (bounds check bypass store, BCBS).    \n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Spectre v1", "creation_timestamp": "2018-07-11T09:56:41.000000Z"}, {"uuid": "2281c178-3d7b-4226-ab00-3e6d246dd86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-3693", "type": "seen", "source": "https://t.me/xakep_ru/4093", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Spectre\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0434\u0432\u0443\u0445 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Sperctre \u0432\u0430\u0440\u0438\u0430\u043d\u0442 1 (CVE-2017-5753). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b  Spectre 1.1 (CVE-2018-3693) \u0438 Spectre 1.2, \u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c 100 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b bug bounty.\n\nhttps://xakep.ru/2018/07/12/spectre-1-1-and-1-2/", "creation_timestamp": "2018-07-12T19:05:10.000000Z"}, {"uuid": "434962b3-7b38-47d8-8d59-b1cedee05d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-3693", "type": "seen", "source": "https://t.me/information_security_channel/18546", "content": "Intel Pays $100,000 Bounty for New Spectre Variants\nhttp://feedproxy.google.com/~r/Securityweek/~3/YwMGIUjAhAA/intel-pays-100000-bounty-new-spectre-variants\n\nResearchers have discovered new variations of the Spectre attack and they received $100,000 from Intel through the company\u2019s bug bounty program.\nThe new flaws are variations of Spectre Variant 1 (CVE-2017-5753) and they are tracked as Spectre 1.1 (CVE-2018-3693) and Spectre 1.2.\nread more (https://www.securityweek.com/intel-pays-100000-bounty-new-spectre-variants)", "creation_timestamp": "2018-07-11T07:58:17.000000Z"}]}