RE: upcoming intel issue

• To: Art Manion <amanion@cert.org>, jericho <jericho@attrition.org>, "Landfield, Kent" <Kent_Landfield@McAfee.com>
• Subject: RE: upcoming intel issue
• From: "Millar, Thomas" <Thomas.Millar@hq.dhs.gov>
• Date: Wed, 3 Jan 2018 23:17:57 +0000
• Accept-language: en-US
• Authentication-results: spf=none (sender IP is 198.49.146.235) smtp.mailfrom=LISTS.MITRE.ORG; imc.mitre.org; dkim=none (message not signed) header.d=none;imc.mitre.org; dmarc=fail action=none header.from=hq.dhs.gov;
• Cc: cve-editorial-board-list <cve-editorial-board-list@LISTS.MITRE.ORG>
• Delivery-date: Thu Jan 4 07:57:18 2018
• In-reply-to: <2d4f623e-8245-8cc1-4730-6cb1bd3a007a@cert.org>
• List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
• List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
• List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
• List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
• References: <CABqVa3-+RnbeTMamFGSXJ8s+7E=Q+PkMDPUYmtdjjey3DZpC0g@mail.gmail.com> <04FBEC57-6834-46C3-B010-8F1105414BF0@mcafee.com> <alpine.LNX.2.00.1801031553470.6952@forced.attrition.org> <9cdfef90-3dc7-960d-b050-9913f2c077a4@cert.org> <2d4f623e-8245-8cc1-4730-6cb1bd3a007a@cert.org>
• Sender: <owner-cve-editorial-board-list@lists.mitre.org>
• Spamdiagnosticmetadata: 5952c28dcc454f0789fb433d26f936ef
• Spamdiagnosticoutput: 1:2
• Thread-index: AQHThM2YISEGQ4UYF0q9aTh1jWzmnKNi9XaAgAAQXACAAAfPgIAAB10A//+zkNA=
• Thread-topic: upcoming intel issue

https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html

-----Original Message-----
From: owner-cve-editorial-board-list@lists.mitre.org 
[mailto:owner-cve-editorial-board-list@lists.mitre.org] On Behalf Of 
Art Manion
Sent: Wednesday, January 3, 2018 17:51
To: jericho <jericho@attrition.org>; Landfield, Kent 
<Kent_Landfield@McAfee.com>
Cc: cve-editorial-board-list <cve-editorial-board-list@LISTS.MITRE.ORG>
Subject: Re: upcoming intel issue

On 1/3/18 5:25 PM, Art Manion wrote:

> So first, what is the vulnerability (or vulnerabilities) -- things 
> that warrant a CVE ID, and second who is responsible for assigning 
> IDs?

https://meltdownattack.com/

CVE-2017-5715 CVE-2017-5753 CVE-2017-5754

Not immediately populated, so not sure what the distinctions are.

  - Art

• Follow-Ups:
  • Re: upcoming intel issue
    • From: Kurt Seifried <kurt@seifried.org>

• References:
  • upcoming intel issue
    • From: Kurt Seifried <kurt@seifried.org>
  • Re: upcoming intel issue
    • From: "Landfield, Kent" <Kent_Landfield@McAfee.com>
  • Re: upcoming intel issue
    • From: jericho <jericho@attrition.org>
  • Re: upcoming intel issue
    • From: Art Manion <amanion@cert.org>
  • Re: upcoming intel issue
    • From: Art Manion <amanion@cert.org>

• Prev by Date: Re: upcoming intel issue
• Next by Date: Re: upcoming intel issue
• Previous by thread: Re: upcoming intel issue
• Next by thread: Re: upcoming intel issue
• Index(es):
  • Date
  • Thread