CVE-2018-5407

Home/CVE/Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks

CVE

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

MEDIUM · CVSS 4.7 EPSS 0.00844

Schedule remediation

Public exploit or PoC is available

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-200Exposure of Sensitive Information to an Unauthorized Actor

CWE-203Observable Discrepancy

▤

Affected Products & Versions

canonical ubuntu linuxall versions
debian linuxall versions
nodejs node.js< 6.14.4
nodejs node.js>= 8.0.0 and < 8.11.4
nodejs node.js>= 10.0.0 and < 10.9.0
openssl>= 1.0.2 and < 1.0.2q
openssl>= 1.1.0 and < 1.1.0i
tenable nessus< 8.1.1
Show all 25 affected productsoracle api gatewayall versions
oracle application serverall versions
oracle enterprise manager base platformall versions
oracle enterprise manager ops centerall versions
oracle mysql enterprise backup<= 3.12.3
oracle mysql enterprise backup>= 3.12.4 and <= 4.1.2
oracle peoplesoft enterprise peopletoolsall versions
oracle primavera p6 enterprise project portfolio management>= 17.7 and <= 17.12
oracle primavera p6 enterprise project portfolio managementall versions
oracle tuxedoall versions
oracle vm virtualbox< 6.0.0
redhat enterprise linux desktopall versions
redhat enterprise linux serverall versions
redhat enterprise linux server ausall versions
redhat enterprise linux server eusall versions
redhat enterprise linux server tusall versions
redhat enterprise linux workstationall versions

⚠

Public Exploits & PoCs

localIntel (Skylake / Kaby Lake) - 'PortSmash' CPU SMT Side-Channel2018-11-02
pocgithub.com · portsmashgithub.com
pocwww.exploit-db.com · 45785www.exploit-db.com

▣

Scoring & Timeline

4.7

MEDIUM · CVSS v3.1 · cret@cert.org

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD15 Nov 2018 · 09:29 PM

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

⚑

Vendor Advisories

msrcCVE-2018-5407
suse-csafopenSUSE-SU-2024:11126-1
rhsaRHSA-2019:3932Important
rhsaRHSA-2019:3933Important
rhsaRHSA-2019:3935Important
Show all 23 vendor advisoriesrhsaRHSA-2019:3931Moderate
rhsaRHSA-2019:3929Moderate
suse-csafSUSE-SU-2019:1553-1
suse-csafSUSE-SU-2018:3864-2
rhsaRHSA-2019:2125Moderate
suse-csafSUSE-SU-2019:0395-1
suse-csafSUSE-SU-2019:0117-1
suse-csafSUSE-SU-2018:4274-1
suse-csafSUSE-SU-2018:4068-1
usnUSN-3840-1
suse-csafSUSE-SU-2018:4001-1
suse-csafSUSE-SU-2018:3989-1
suse-csafSUSE-SU-2018:3964-1
suse-csafSUSE-SU-2018:3864-1
suse-csafSUSE-SU-2018:3866-1
rhsaRHSA-2019:0483Moderate
rhsaRHBA-2019:1088Moderate
rhsaRHBA-2019:1053Moderate

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://www.securityfocus.com/bid/105897Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2019:0651Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0652Third Party Advisory

https://eprint.iacr.org/2018/1060.pdfTechnical DescriptionThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/11/msg00024.htmlMailing ListThird Party Advisory

https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/Third Party Advisory

Show all 19 references

https://security.gentoo.org/glsa/201903-10Third Party Advisory

https://security.netapp.com/advisory/ntap-20181126-0001/Third Party Advisory

https://support.f5.com/csp/article/K49711130?utm_source=f5support&amp

https://usn.ubuntu.com/3840-1/Third Party Advisory

https://www.debian.org/security/2018/dsa-4348Third Party Advisory

https://www.debian.org/security/2018/dsa-4355Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.htmlPatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.htmlPatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatchVendor Advisory

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlPatchThird Party Advisory

https://www.tenable.com/security/tns-2018-16Third Party Advisory

https://www.tenable.com/security/tns-2018-17Third Party Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin