NetSight
IP …
medium4.7Public exploit code

CVE-2018-5407

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'p…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10
DebianDebian Linux
Versions 8.0, 9.0
NodejsNode.Js
before 6.14.4
from 8.0.0 before 8.11.4
from 10.0.0 before 10.9.0
OpensslOpenssl
from 1.0.2 before 1.0.2q
from 1.1.0 before 1.1.0i
TenableNessus
before 8.1.1
OracleApi Gateway
Version 11.1.2.4.0
OracleApplication Server
Versions 0.9.8, 1.0.0, 1.0.1
OracleEnterprise Manager Base Platform
Versions 12.1.0.5.0, 13.2.0.0.0, 13.3.0.0.0
OracleEnterprise Manager Ops Center
Version 12.3.3
OracleMysql Enterprise Backup
through 3.12.3
from 3.12.4 through 4.1.2
OraclePeoplesoft Enterprise Peopletools
Versions 8.55, 8.56, 8.57
OraclePrimavera P6 Enterprise Project Portfolio Management
from 17.7 through 17.12
Versions 8.4, 15.1, 15.2, 16.1, 16.2

Weakness classification

CWE-200CWE-203

References