CVE-2018-5407

moderate-risk
Published 2018-11-15

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Do I need to act?

-
0.84% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
45785
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.7/10 Medium
LOCAL / HIGH complexity

Affected Products (20)

Api Gateway
Mysql Enterprise Backup

Affected Vendors

Debian Redhat Oracle Openssl Canonical Nodejs Tenable

References (56)

Third Party Advisory http://www.securityfocus.com/bid/105897
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0483
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0651
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0652
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:2125
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3929
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3931
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3932
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3933
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3935
Technical Description https://eprint.iacr.org/2018/1060.pdf
Exploit https://github.com/bbbrumley/portsmash
Mailing List https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html
Third Party Advisory https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
Third Party Advisory https://security.gentoo.org/glsa/201903-10
Third Party Advisory https://security.netapp.com/advisory/ntap-20181126-0001/
https://support.f5.com/csp/article/K49711130?utm_source=f5support&amp%3Butm_medi...
Third Party Advisory https://usn.ubuntu.com/3840-1/
Third Party Advisory https://www.debian.org/security/2018/dsa-4348
Third Party Advisory https://www.debian.org/security/2018/dsa-4355
and 36 more references
39
/ 100
moderate-risk
Severity 12/34 · Low
Exploitability 3/34 · Minimal
Exposure 24/34 · High