ISOMAN

CVE

CVE-2018-5407

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Severity
MEDIUM
CVSS
4.7
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/105897
  2. https://access.redhat.com/errata/RHSA-2019:0483
  3. https://access.redhat.com/errata/RHSA-2019:0651
  4. https://access.redhat.com/errata/RHSA-2019:0652
  5. https://access.redhat.com/errata/RHSA-2019:2125
  6. https://access.redhat.com/errata/RHSA-2019:3929
  7. https://access.redhat.com/errata/RHSA-2019:3931
  8. https://access.redhat.com/errata/RHSA-2019:3932
  9. https://access.redhat.com/errata/RHSA-2019:3933
  10. https://access.redhat.com/errata/RHSA-2019:3935
  11. https://eprint.iacr.org/2018/1060.pdf
  12. https://github.com/bbbrumley/portsmash
  13. https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html
  14. https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
  15. https://security.gentoo.org/glsa/201903-10
  16. https://security.netapp.com/advisory/ntap-20181126-0001/
  17. https://support.f5.com/csp/article/K49711130?utm_source=f5support&amp%3Butm_medium=RSS
  18. https://usn.ubuntu.com/3840-1/
  19. https://www.debian.org/security/2018/dsa-4348
  20. https://www.debian.org/security/2018/dsa-4355