CVE-2018-3691

MEDIUM 4.7CVE-2018-3691 · Published 05/06/2018 · updated 17/06/2026

In short

CVE-2018-3691 is a MEDIUM (CVSS 4.7) vulnerability affecting integrated performance primitives cryptography (intel).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.4% of all vulnerabilities.
Fix: update to 2018_u3.1 or later.

Package	Affected versions	Patched versions
integrated performance primitives cryptography intel	`< 2018_u3.1`	`2018_u3.1`

Description

Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00106.html · Vendor Advisory

More vulnerabilities in integrated performance primitives cryptography

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

integrated performance primitives cryptography

intel

< 2018_u3.1

2018_u3.1

More vulnerabilities in integrated performance primitives cryptography

See all →