CVE-2018-5407

Description

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

CVSS breakdown

Affected products

• Canonical / Ubuntu Linux14.04 – 14.04
• Canonical / Ubuntu Linux16.04 – 16.04
• Canonical / Ubuntu Linux18.04 – 18.04
• Canonical / Ubuntu Linux18.10 – 18.10
• Debian / debian_linux9.0 – 9.0
• Debian / debian_linux8.0 – 8.0
• N/A / Processors supporting Simultaneous Multi-ThreadingN/A – N/A
• nodejs / node.js6.14.4
• OpenSSL / OpenSSL1.0.2 – 1.0.2q
• oracle / api_gateway11.1.2.4.0 – 11.1.2.4.0
• oracle / application_server1.0.0 – 1.0.0
• oracle / application_server0.9.8 – 0.9.8
• oracle / application_server1.0.1 – 1.0.1
• oracle / enterprise_manager_base_platform13.2.0.0.0 – 13.2.0.0.0
• oracle / enterprise_manager_base_platform12.1.0.5.0 – 12.1.0.5.0
• oracle / enterprise_manager_base_platform13.3.0.0.0 – 13.3.0.0.0
• oracle / enterprise_manager_ops_center12.3.3 – 12.3.3
• oracle / mysql_enterprise_backup3.12.3
• oracle / peoplesoft_enterprise_peopletools8.55 – 8.55
• oracle / peoplesoft_enterprise_peopletools8.56 – 8.56
• oracle / peoplesoft_enterprise_peopletools8.57 – 8.57
• oracle / primavera_p6_enterprise_project_portfolio_management18.8 – 18.8
• oracle / primavera_p6_enterprise_project_portfolio_management17.7 – 17.12
• oracle / primavera_p6_enterprise_project_portfolio_management8.4 – 8.4
• oracle / primavera_p6_enterprise_project_portfolio_management15.1 – 15.1
• oracle / primavera_p6_enterprise_project_portfolio_management15.2 – 15.2
• oracle / primavera_p6_enterprise_project_portfolio_management16.1 – 16.1
• oracle / primavera_p6_enterprise_project_portfolio_management16.2 – 16.2
• oracle / tuxedo12.1.1.0.0 – 12.1.1.0.0
• oracle / vm_virtualbox6.0.0
• RedHat / enterprise_linux_desktop7.0 – 7.0
• RedHat / enterprise_linux_server7.0 – 7.0
• RedHat / enterprise_linux_server7.6 – 7.6
• RedHat / enterprise_linux_server_aus7.6 – 7.6
• RedHat / enterprise_linux_server_eus7.6 – 7.6
• RedHat / enterprise_linux_server_tus7.6 – 7.6
• RedHat / enterprise_linux_workstation7.0 – 7.0
• tenable / Nessus8.1.1

Exploits & proofs of concept

• exploit-dbIntel (Skylake / Kaby Lake) - 'PortSmash' CPU SMT Side-Channelby Billy Brumley

References

• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:0483
• VENDOR_ADVISORYhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• MISChttps://security.netapp.com/advisory/ntap-20181126-0001/
• VENDOR_ADVISORYhttps://usn.ubuntu.com/3840-1/
• VENDOR_ADVISORYhttps://www.debian.org/security/2018/dsa-4355
• MISChttps://www.tenable.com/security/tns-2018-17
• MISChttps://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
• MISChttps://security.gentoo.org/glsa/201903-10
• MISChttps://www.tenable.com/security/tns-2018-16
• EXPLOIThttps://www.exploit-db.com/exploits/45785/
• MAILING_LISThttps://lists.debian.org/debian-lts-announce/2018/11/msg00024.html
• MISChttps://github.com/bbbrumley/portsmash
• VENDOR_ADVISORYhttps://www.debian.org/security/2018/dsa-4348
• MISChttp://www.securityfocus.com/bid/105897
• MISChttps://eprint.iacr.org/2018/1060.pdf
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:0651
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:0652
• VENDOR_ADVISORYhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
• VENDOR_ADVISORYhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:2125
• MISChttps://support.f5.com/csp/article/K49711130?utm_source=f5support&amp%3Butm_medium=RSS
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3929
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3933
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3931
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3935
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2019:3932
• VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpujan2020.html
• VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpuapr2020.html