CVE-2018-3639
published 2018-05-22CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are…
PriorityP188medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
ITWEXPLOITVulnCheck KEVRansomwareInitial access
Exploited in the wild
EPSS
60.63%
99.0th percentile
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Affected
435 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos_mojave | — | — |
| apple | macos_mojave_10.14.1_security_update_2018-002_high_sierra_security_update_2018-0 | — | — |
| arm | cortex-a | — | — |
| arm | cortex-a | — | — |
| arm | cortex-a | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | intel-microcode | < intel-microcode 3.20180703.1 (bookworm) | intel-microcode 3.20180703.1 (bookworm) |
| debian | linux | < intel-microcode 3.20180703.1 (bookworm) | intel-microcode 3.20180703.1 (bookworm) |
| debian | xen | < intel-microcode 3.20180703.1 (bookworm) | intel-microcode 3.20180703.1 (bookworm) |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
| intel | atom_c | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →CVE-2018-3639 (Spectre Variant 4 / Speculative Store Bypass) is most likely exploited via JavaScript JIT in web browsers; monitor for unusual JavaScript execution that generates native code performing speculative memory reads. ↗
- →The PoC exploit uses a flush+reload cache side-channel technique (clflush + timing measurement) to leak data; detection can focus on high-frequency use of CLFLUSH instructions or anomalous cache-timing patterns in user-space processes. ↗
- →Affected processors confirmed in PoC include Intel Skylake (i7-6600U), Intel Haswell (Xeon E5-1650 v3), and AMD PRO A8-9600; prioritize microcode/BIOS updates for these microarchitectures. ↗
- →The most likely real-world attack vector for CVE-2018-3639 is via JavaScript in web browsers; browser-based mitigations (timer precision reduction, JIT hardening) deployed for Variant 1 also apply here. ↗
- ·Intel's microcode mitigation for Variant 4 is set to OFF by default; administrators must explicitly enable it, accepting a 2–8% performance impact. ↗
- ·Mitigations deployed for Spectre Variant 1 (January 2018) also provide coverage for Variant 4 (CVE-2018-3639) and are already available; ensure these are not disabled. ↗
- ·Red Hat included the ability to selectively disable Spectre/Meltdown patches; operators should verify these are not disabled on sensitive workloads. ↗
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv8.8HIGH
vulncheck5.5MEDIUM
vendor_ubuntu8.8HIGH
vendor_cisco5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_oracle5.5MEDIUM
vendor_redhat5.5MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle Solaris 11 Kernel information disclosure (VU#180049 / EDB-44695)
vuldb·2026-05-30·CVSS 5.5
CVE-2018-3639 [MEDIUM] Oracle Solaris 11 Kernel information disclosure (VU#180049 / EDB-44695)
A vulnerability described as problematic has been identified in Oracle Solaris 11. This issue affects some unknown processing of the component Kernel. Executing a manipulation can lead to information disclosure.
The identification of this vulnerability is CVE-2018-3639. The attack can only be executed locally. Furthermore, there is an exploit available.
Upgrading the affected component is recommended.
VulDB
Intel CPU Speculative Execution information disclosure (cisco-sa-20180521-cpusidechann / VU#180049)
vuldb·2026-05-30·CVSS 5.5
CVE-2018-3639 [MEDIUM] Intel CPU Speculative Execution information disclosure (cisco-sa-20180521-cpusidechann / VU#180049)
A vulnerability, which was classified as critical, was found in Intel CPU. Affected is an unknown function of the component Speculative Execution. Such manipulation leads to information disclosure.
This vulnerability is documented as CVE-2018-3639. The attack can be executed remotely. Additionally, an exploit exists.
VulDB
Apple macOS up to 10.14.0 EFI information disclosure (HT209193 / VU#180049)
vuldb·2026-05-30·CVSS 5.5
CVE-2018-3639 [MEDIUM] Apple macOS up to 10.14.0 EFI information disclosure (HT209193 / VU#180049)
A vulnerability was found in Apple macOS up to 10.14.0. It has been declared as critical. The affected element is an unknown function of the component EFI. Executing a manipulation can lead to information disclosure.
This vulnerability is handled as CVE-2018-3639. It is possible to launch the attack on the local host. Additionally, an exploit exists.
It is recommended to upgrade the affected component.
VulDB
Oracle Communications LSMS 13.0/13.1/13.2/13.3 Kernel information disclosure (VU#180049 / EDB-44695)
vuldb·2026-05-30·CVSS 5.5
CVE-2018-3639 [MEDIUM] Oracle Communications LSMS 13.0/13.1/13.2/13.3 Kernel information disclosure (VU#180049 / EDB-44695)
A vulnerability categorized as critical has been discovered in Oracle Communications LSMS 13.0/13.1/13.2/13.3. Impacted is an unknown function of the component Kernel. Executing a manipulation can lead to information disclosure.
This vulnerability is tracked as CVE-2018-3639. The attack is restricted to local execution. Moreover, an exploit is present.
It is advisable to upgrade the affected component.
Kernel
bpf: Fix leakage due to insufficient speculative store bypass mitigation
kernel_security·2021-07-13
bpf: Fix leakage due to insufficient speculative store bypass mitigation
bpf: Fix leakage due to insufficient speculative store bypass mitigation
Spectre v4 gadgets make use of memory disambiguation, which is a set of
techniques that execute memory access instructions, that is, loads and
stores, out of program order; Intel's optimization manual, section 2.4.4.5:
A load instruction micro-op may depend on a preceding store. Many
microarchitectures block loads until all preceding store addresses are
known. The memory disambiguator predicts which loads will not depend on
any previous stores. When the disambiguator predicts that a load does
not have such a dependency, the load takes its data from the L1 data
cache. Eventually, the prediction is verified. If an actual conflict is
detected, the load and all succeeding instructions are re-executed.
af86ca4e3088 ("bp
OSV
linux-azure vulnerabilities
osv·2018-10-23·CVSS 5.6
CVE-2018-17182 [MEDIUM] linux-azure vulnerabilities
linux-azure vulnerabilities
USN-3777-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04
%LTS. This update provides the corresponding updates for the
Linux kernel for Azure Cloud systems.
Jann Horn discovered that the vmacache subsystem did not properly handle
sequence number overflows, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or execute arbitrary code. (CVE-2018-17182)
It was discovered that the paravirtualization implementation in the Linux
kernel did not properly handle some indirect calls, reducing the
effectiveness of Spectre v2 mitigations for paravirtual guests. A local
attacker could use this to expose sensitive information. (CVE-2018-15594)
It was discovered that microprocessors utilizing sp
OSV
linux-hwe, linux-gcp vulnerabilities
osv·2018-10-01·CVSS 7.8
[HIGH] linux-hwe, linux-gcp vulnerabilities
linux-hwe, linux-gcp vulnerabilities
USN-3777-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu
16.04 LTS.
Jann Horn discovered that the vmacache subsystem did not properly handle
sequence number overflows, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or execute arbitrary code. (CVE-2018-17182)
It was discovered that the paravirtualization implementation in the Linux
kernel did not properly handle some indirect calls, reducing the
effectiveness of Spectre v2 mitigations for paravirtual guests. A local
attacker could use this to expose sensitive information. (CVE-2018-15594)
OSV
linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities
osv·2018-10-01·CVSS 7.8
CVE-2018-17182 [HIGH] linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities
linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities
Jann Horn discovered that the vmacache subsystem did not properly handle
sequence number overflows, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or execute arbitrary code. (CVE-2018-17182)
It was discovered that the paravirtualization implementation in the Linux
kernel did not properly handle some indirect calls, reducing the
effectiveness of Spectre v2 mitigations for paravirtual guests. A local
attacker could use this to expose sensitive information. (CVE-2018-15594)
It was discovered that microprocessors utilizing speculative execution and
prediction of return addresses via Return Stack Buffer (RSB) may allow
unauthorized memory rea
OSV
intel-microcode vulnerabilities
osv·2018-08-27·CVSS 5.5
CVE-2018-3646 [MEDIUM] intel-microcode vulnerabilities
intel-microcode vulnerabilities
It was discovered that memory present in the L1 data cache of an Intel CPU
core may be exposed to a malicious process that is executing on the CPU
core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local
attacker in a guest virtual machine could use this to expose sensitive
information (memory from other guests or the host OS). (CVE-2018-3646)
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory reads
via a sidechannel attack. This flaw is known as Spectre Variant 4. A local
attacker could use this to expose sensitive information, including kernel
memory. (CVE-2018-3639)
Zdenek Sojka, Rudolf Marek, Alex Zuepke, and Innokentiy Sennovskiy
discovered that m
OSV
libvirt vulnerability and update
osv·2018-06-12·CVSS 7.5
CVE-2018-3639 [HIGH] libvirt vulnerability and update
libvirt vulnerability and update
Ken Johnson and Jann Horn independently discovered that microprocessors
utilizing speculative execution of a memory read may allow unauthorized
memory reads via sidechannel attacks. An attacker in the guest could use
this to expose sensitive guest information, including kernel memory. This
update allows libvirt to expose new CPU features added by microcode updates
to guests. (CVE-2018-3639)
Daniel P. Berrange discovered that libvirt incorrectly handled the QEMU
guest agent. An attacker could possibly use this issue to consume
resources, leading to a denial of service. (CVE-2018-1064)
OSV
linux, linux-aws, linux-kvm, vulnerabilities
osv·2018-05-22·CVSS 5.5
CVE-2018-3639 [MEDIUM] linux, linux-aws, linux-kvm, vulnerabilities
linux, linux-aws, linux-kvm, vulnerabilities
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Tuba Yavuz discovered that a double-free error existed in the USBTV007
driver of the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2017-17975)
It was discovered that a race condition existed in the F2FS implementation
in the Linux kernel. A local attacker could use this to cause a denial of
service (system crash). (CVE-2017-18193)
It was discovered
OSV
CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes
osv·2018-05-22·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
OSV
linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities
osv·2018-05-22·CVSS 4.7
[MEDIUM] linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities
linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities
USN-3653-1 fixed vulnerabilities and added mitigations in the Linux
kernel for Ubuntu 17.10. This update provides the corresponding
updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu
17.10 for Ubuntu 16.04 LTS.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
It was discovered that the netlink subsystem in the Linux kernel did not
properly restrict observations of netlink messages to the appropriate net
namespace. A local attacker could use this to
OSV
linux-lts-xenial, linux-aws vulnerabilities
osv·2018-05-22·CVSS 5.5
[MEDIUM] linux-lts-xenial, linux-aws vulnerabilities
linux-lts-xenial, linux-aws vulnerabilities
USN-3654-1 fixed vulnerabilities and added mitigations in the Linux
kernel for Ubuntu 16.04 LTS. This update provides the corresponding
updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu
16.04 LTS for Ubuntu 14.04 LTS.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Tuba Yavuz discovered that a double-free error existed in the USBTV007
driver of the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitra
OSV
linux vulnerabilities
osv·2018-05-22·CVSS 8.8
CVE-2018-3639 [HIGH] linux vulnerabilities
linux vulnerabilities
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Jan H. Schönherr discovered that the Xen subsystem did not properly handle
block IO merges correctly in some situations. An attacker in a guest vm
could use this to cause a denial of service (host crash) or possibly gain
administrative privileges in the host. (CVE-2017-12134)
It was discovered that the Bluetooth HIP Protocol implementation in the
Linux kernel did not properly validate HID connection setup information. An
attacker could use this to cause a
VulnCheck
Intel atom_c Observable Discrepancy
vulncheck·2018·CVSS 5.5
CVE-2018-3639 [MEDIUM] Intel atom_c Observable Discrepancy
Intel atom_c Observable Discrepancy
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Affected: Intel atom_c
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Known Ransomware Campaign Use: Known
Exploitation References: https://www.csk.gov.in/alerts/STOP_ransomware.html; https://cybersecurityworks.com/pdf/ransomware/Spotlight_Ransomware2021.pdf; https://cybersecurityworks.com/howdymanage/uploads/file/ransomware
Oracle
Oracle Oracle Communications Applications Risk Matrix: Kernel — CVE-2018-3639
vendor_oracle·2020-07-15·CVSS 5.5
CVE-2018-3639 [MEDIUM] Oracle Oracle Communications Applications Risk Matrix: Kernel — CVE-2018-3639
Oracle Oracle Communications Applications Risk Matrix: Kernel vulnerability
CVE: CVE-2018-3639
CVSS: 5.5
Protocol: None
Remote exploit: No
Affected versions: Local
Advisory: cpujul2020 (JUL 2020)
Apple
CVE-2018-3639: macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra
vendor_apple·2018-10-30·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639: macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra
Apple Security Update: About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra
Product: macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra
CVE: CVE-2018-3639
Component: EFI
Impact: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis
Description: An information disclosure issue was addressed with a microcode update. This ensures that older data read from recently-written-to addresses cannot be read via a speculative side-channel.
Ubuntu
Linux kernel (Azure) vulnerabilities
vendor_ubuntu·2018-10-23·CVSS 5.6
CVE-2017-5715 [MEDIUM] Linux kernel (Azure) vulnerabilities
Title: Linux kernel (Azure) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
USN-3777-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04
%LTS. This update provides the corresponding updates for the
Linux kernel for Azure Cloud systems.
Jann Horn discovered that the vmacache subsystem did not properly handle
sequence number overflows, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or execute arbitrary code. (CVE-2018-17182)
It was discovered that the paravirtualization implementation in the Linux
kernel did not properly handle some indirect calls, reducing the
effectiveness of Spectre v2 mitigations for paravirtual guests. A local
attacker could use this to expose sensitive
Ubuntu
Linux kernel (HWE) vulnerabilities
vendor_ubuntu·2018-10-01·CVSS 7.0
CVE-2018-10853 [HIGH] Linux kernel (HWE) vulnerabilities
Title: Linux kernel (HWE) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
USN-3777-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu
16.04 LTS.
Jann Horn discovered that the vmacache subsystem did not properly handle
sequence number overflows, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or execute arbitrary code. (CVE-2018-17182)
It was discovered that the paravirtualization implementation in the Linux
kernel did not properly handle some indirect calls, reducing the
effectiveness of Spectre v2 mitigations for paravirtual guests. A local
at
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2018-10-01·CVSS 7.0
CVE-2018-10853 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Jann Horn discovered that the vmacache subsystem did not properly handle
sequence number overflows, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or execute arbitrary code. (CVE-2018-17182)
It was discovered that the paravirtualization implementation in the Linux
kernel did not properly handle some indirect calls, reducing the
effectiveness of Spectre v2 mitigations for paravirtual guests. A local
attacker could use this to expose sensitive information. (CVE-2018-15594)
It was discovered that microprocessors utilizing speculative execution and
prediction of return addresses via Return Stack Buffer (RSB) may allow
u
Apple
CVE-2018-3639: macOS Mojave 10.14
vendor_apple·2018-09-24·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639: macOS Mojave 10.14
Apple Security Update: About the security content of macOS Mojave 10.14
Product: macOS Mojave
Version: 10.14
CVE: CVE-2018-3639
Component: Microcode
Impact: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis
Description: An information disclosure issue was addressed with a microcode update. This ensures that older data read from recently-written-to addresses cannot be read via a speculative side-channel.
Ubuntu
Intel Microcode vulnerabilities
vendor_ubuntu·2018-08-27·CVSS 5.5
CVE-2018-3639 [MEDIUM] Intel Microcode vulnerabilities
Title: Intel Microcode vulnerabilities
Summary: The system could be made to expose sensitive information.
It was discovered that memory present in the L1 data cache of an Intel CPU
core may be exposed to a malicious process that is executing on the CPU
core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local
attacker in a guest virtual machine could use this to expose sensitive
information (memory from other guests or the host OS). (CVE-2018-3646)
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory reads
via a sidechannel attack. This flaw is known as Spectre Variant 4. A local
attacker could use this to expose sensitive information, including kernel
memory. (CVE-2018-3639)
Zdenek So
Ubuntu
libvirt vulnerability and update
vendor_ubuntu·2018-06-12·CVSS 7.5
CVE-2018-1064 [HIGH] libvirt vulnerability and update
Title: libvirt vulnerability and update
Summary: Side channel execution mitigations were added to libvirt.
Ken Johnson and Jann Horn independently discovered that microprocessors
utilizing speculative execution of a memory read may allow unauthorized
memory reads via sidechannel attacks. An attacker in the guest could use
this to expose sensitive guest information, including kernel memory. This
update allows libvirt to expose new CPU features added by microcode updates
to guests. (CVE-2018-3639)
Daniel P. Berrange discovered that libvirt incorrectly handled the QEMU
guest agent. An attacker could possibly use this issue to consume
resources, leading to a denial of service. (CVE-2018-1064)
Instructions: After a standard system update you need to reboot your computer to make
all the nece
Ubuntu
QEMU update
vendor_ubuntu·2018-06-12
CVE-2018-3639 QEMU update
Title: QEMU update
Summary: Side channel execution mitigations were added to QEMU.
Ken Johnson and Jann Horn independently discovered that microprocessors
utilizing speculative execution of a memory read may allow unauthorized
memory reads via sidechannel attacks. An attacker in the guest could use
this to expose sensitive guest information, including kernel memory. This
update allows QEMU to expose new CPU features added by AMD microcode
updates to guests on amd64 and i386.
Instructions: After a standard system update you need to restart all QEMU virtual
machines to make all the necessary changes.
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities
vendor_ubuntu·2018-05-22·CVSS 8.8
CVE-2017-12134 [HIGH] Linux kernel (Trusty HWE) vulnerabilities
Title: Linux kernel (Trusty HWE) vulnerabilities
Summary: Several security issues were addressed in the Linux kernel.
USN-3655-1 fixed vulnerabilities and added mitigations in the Linux
kernel for Ubuntu 14.04 LTS. This update provides the corresponding
updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu
14.04 LTS for Ubuntu 12.04 ESM.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Jan H. Schönherr discovered that the Xen subsystem did not properly handle
block IO merges correctly in some situations. An att
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2018-05-22·CVSS 4.7
CVE-2017-17449 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were addressed in the Linux kernel.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
It was discovered that the netlink subsystem in the Linux kernel did not
properly restrict observations of netlink messages to the appropriate net
namespace. A local attacker could use this to expose sensitive information
(kernel netlink traffic). (CVE-2017-17449)
Tuba Yavuz discovered that a double-free error existed in the USBTV007
driver of the Linux kernel. A local att
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2018-05-22·CVSS 5.5
CVE-2017-17975 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were addressed in the Linux kernel.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Tuba Yavuz discovered that a double-free error existed in the USBTV007
driver of the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2017-17975)
It was discovered that a race condition existed in the F2FS implementation
in the Linux kernel. A local attacker could use this to cause a denial o
Ubuntu
Linux kernel (HWE) vulnerabilities
vendor_ubuntu·2018-05-22·CVSS 4.7
CVE-2017-17449 [MEDIUM] Linux kernel (HWE) vulnerabilities
Title: Linux kernel (HWE) vulnerabilities
Summary: Several security issues were addressed in the Linux kernel.
USN-3653-1 fixed vulnerabilities and added mitigations in the Linux
kernel for Ubuntu 17.10. This update provides the corresponding
updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu
17.10 for Ubuntu 16.04 LTS.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
It was discovered that the netlink subsystem in the Linux kernel did not
properly restrict observations of netlink messages to the appropriate
Ubuntu
Linux kernel vulnerability
vendor_ubuntu·2018-05-22·CVSS 5.5
CVE-2018-3639 [MEDIUM] Linux kernel vulnerability
Title: Linux kernel vulnerability
Summary: The system could be made to expose sensitive information.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory.
Instructions: Please note that fully mitigating CVE-2018-3639 (Spectre Variant 4)
may require corresponding processor microcode/firmware updates or,
in virtual environments, hypervisor updates. On i386 and amd64
architectures, the SSBD feature is required to enable the kernel
mitigations. BIOS vendors will be making updates available for Intel
processors that implement SSBD and Ubuntu is worki
Cisco
CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
vendor_cisco·2018-05-22·CVSS 5.5
CVE-2018-3639 [MEDIUM] CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
On May 21, 2018, researchers disclosed two vulnerabilities that take advantage of the implementation of speculative execution of instructions on many modern microprocessor architectures to perform side-channel information disclosure attacks. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes.
The first vulnerability, CVE-2018-3639, is known as Spectre Variant 4 or SpectreNG. The second vulnerability, CVE-2018-3640, is known as Spectre Variant 3a. Both of these attacks are variants of the attacks disclosed in January 2018 and leverage cache-timing attacks to infer any disclosed data.
To exploit either of these vulnerabilities, a
Ubuntu
Linux kernel (Xenial HWE) vulnerabilities
vendor_ubuntu·2018-05-22·CVSS 5.5
CVE-2017-17975 [MEDIUM] Linux kernel (Xenial HWE) vulnerabilities
Title: Linux kernel (Xenial HWE) vulnerabilities
Summary: Several security issues were addressed in the Linux kernel.
USN-3654-1 fixed vulnerabilities and added mitigations in the Linux
kernel for Ubuntu 16.04 LTS. This update provides the corresponding
updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu
16.04 LTS for Ubuntu 14.04 LTS.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Tuba Yavuz discovered that a double-free error existed in the USBTV007
driver of the Linux kernel. A local attacker could use t
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2018-05-22·CVSS 8.8
CVE-2017-12134 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were addressed in the Linux kernel.
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Jan H. Schönherr discovered that the Xen subsystem did not properly handle
block IO merges correctly in some situations. An attacker in a guest vm
could use this to cause a denial of service (host crash) or possibly gain
administrative privileges in the host. (CVE-2017-12134)
It was discovered that the Bluetooth HIP Protocol implementation in the
Linux kernel did not prope
Ubuntu
QEMU update
vendor_ubuntu·2018-05-21
CVE-2018-3639 QEMU update
Title: QEMU update
Summary: Side channel execution mitigations were added to QEMU.
Ken Johnson and Jann Horn independently discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory reads via
sidechannel attacks. An attacker in the guest could use this to expose sensitive
guest information, including kernel memory. This update allows QEMU to expose new
CPU features added by microcode updates to guests on amd64 and i386.
Instructions: After a standard system update you need to restart all QEMU virtual
machines to make all the necessary changes.
Red Hat
hw: cpu: speculative store bypass
vendor_redhat·2018-05-21·CVSS 5.5
CVE-2018-3639 [MEDIUM] CWE-226 hw: cpu: speculative store bypass
hw: cpu: speculative store bypass
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into t
Debian
CVE-2018-3639: intel-microcode - Systems with microprocessors utilizing speculative execution and speculative exe...
vendor_debian·2018·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639: intel-microcode - Systems with microprocessors utilizing speculative execution and speculative exe...
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Scope: local
bookworm: resolved (fixed in 3.20180703.1)
bullseye: resolved (fixed in 3.20180703.1)
forky: resolved (fixed in 3.20180703.1)
sid: resolved (fixed in 3.20180703.1)
trixie: resolved (fixed in 3.20180703.1)
Cisco
CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
vendor_cisco
CVE-2018-3640 CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
CVE-2018-3640: CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
On May 21, 2018, researchers disclosed two vulnerabilities that take advantage of the implementation of speculative execution of instructions on many modern microprocessor architectures to perform side-channel information disclosure attacks. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes. The first vulnerability, CVE-2018-3639, is known as Spectre Variant 4 or SpectreNG . The second vulnerability, CVE-2018-3640, is known as Spectre Variant 3a . Both of these attacks are variants of the attacks disclosed in January 2018 and leverage cache-timing attacks to infer any disclosed data. To exploit either of these vu
Cisco
CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
vendor_cisco
CVE-2018-3639 CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
CVE-2018-3639: CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
On May 21, 2018, researchers disclosed two vulnerabilities that take advantage of the implementation of speculative execution of instructions on many modern microprocessor architectures to perform side-channel information disclosure attacks. These vulnerabilities could allow an unprivileged, local attacker, in specific circumstances, to read privileged memory belonging to other processes. The first vulnerability, CVE-2018-3639, is known as Spectre Variant 4 or SpectreNG . The second vulnerability, CVE-2018-3640, is known as Spectre Variant 3a . Both of these attacks are variants of the attacks disclosed in January 2018 and leverage cache-timing attacks to infer any disclosed data. To exploit either of these vu
No detection rules found.
Tenable
5W1H: Speculative Side Channel Vulnerabilities De-mystified
blogs_tenable·2018-11-15·CVSS 5.6
[MEDIUM] 5W1H: Speculative Side Channel Vulnerabilities De-mystified
Blog / Research
Subscribe
# 5W1H: Speculative Side Channel Vulnerabilities De-mystified
Pablo Ramos
November 15, 2018
5 Min Read
The classes of vulnerabilities that brought us Meltdown and Spectre are not going away anytime soon. Here’s what you need to know about Speculative Execution vulnerabilities, with our guidance on steps you can take to reduce your risk.
Spectre and Meltdown generated a lot of confusion and discussion in the security world when they first hit the news. Understanding the risks associated with speculative execution vulnerabilities will help organizations prioritize and communicate effectively about their exposure. In this post, we present what it is known, how it affects companies and ways to stay ahead in the game.
## Start from the beginning…
Speculative Ex
Tenable
5W1H: Speculative Side Channel Vulnerabilities De-mystified
blogs_tenable·2018-11-15
5W1H: Speculative Side Channel Vulnerabilities De-mystified
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Qualys
All Hands Memo to Owners of Home / Small Office Routers: Reboot Them! | Qualys
blogs_qualys·2018-05-30
All Hands Memo to Owners of Home / Small Office Routers: Reboot Them! | Qualys
This last week or so of May has been busy with security news and incidents, as the FBI put out an unprecedented call to do a massive wave of reboots of home and small office routers, while Intel confirmed the existence of yet another Spectre / Meltdown variant. And, yes, we had yet another high-profile instance of an unprotected AWS storage bucket exposing data, as well as more IoT security bad news.
### Unplug and reset that router pronto!
As you may have heard by now, THE FBI WANTS YOU TO REBOOT YOUR ROUTERS!
Sorry, we didn’t mean to use our outside voice and startle you, but the urgent and extraordinary plea from the feds has been ubiquitous in recent days and we wouldn’t want you to be out of the loop.
The reason: It takes a village to dismantle a botnet that has infected 500,000 h
Qualys
All Hands Memo to Owners of Home / Small Office Routers: Reboot Them!
blogs_qualys·2018-05-30
All Hands Memo to Owners of Home / Small Office Routers: Reboot Them!
This last week or so of May has been busy with security news and incidents, as the FBI put out an unprecedented call to do a massive wave of reboots of home and small office routers, while Intel confirmed the existence of yet another Spectre / Meltdown variant. And, yes, we had yet another high-profile instance of an unprotected AWS storage bucket exposing data, as well as more IoT security bad news.
## Unplug and reset that router pronto!
As you may have heard by now, THE FBI WANTS YOU TO REBOOT YOUR ROUTERS!
Sorry, we didn’t mean to use our outside voice and startle you, but the urgent and extraordinary plea from the feds has been ubiquitous in recent days and we wouldn’t want you to be out of the loop.
The reason: It takes a village to dismantle a botnet that has infected 500,000 ho
Tenable
Spectre And Meltdown Still Haunting Intel/AMD
blogs_tenable·2018-05-22
Spectre And Meltdown Still Haunting Intel/AMD
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
Spectre And Meltdown Still Haunting Intel/AMD
blogs_tenable·2018-05-22·CVSS 5.5
[MEDIUM] Spectre And Meltdown Still Haunting Intel/AMD
Blog / Research
Subscribe
# Spectre And Meltdown Still Haunting Intel/AMD
Steve Tilson
May 22, 2018
4 Min Read
The ongoing saga of the Spectre and Meltdown vulnerabilities has just taken a new turn. Discovered by Google Project Zero (GPZ) and Microsoft, the new variants affect everything from desktops, laptops and mobile devices to infrastructure-as-a-service. These flaws are present in nearly all modern microprocessors and could allow an attacker to steal sensitive information by accessing privileged memory as a result of abusing a feature called speculative execution. We’ve been following the ongoing developments of these vulnerabilities from their first disclosure back in January 2018 and have released coverage to help keep our customers secure based on previous developments. The v
arXiv
SafeBet: Secure, Simple, and Fast Speculative Execution
arxiv_fulltext·2023-06-13
SafeBet: Secure, Simple, and Fast Speculative Execution
empty
plain
## Abstract
Spectre attacks exploit microprocessor speculative execution to read and transmit forbidden data outside the attacker's trust domain and sandbox.
Recent hardware schemes allow potentially-unsafe speculative accesses but prevent the secret's transmission by delaying all or many of the access-dependent instructions even in the predominantly-common, no-attack case, which incurs performance loss and hardware complexity.
Instead, we propose which allows only, and in the common case does not delay most, safe accesses. We first consider the simple case
without (i) code control flow transfer across trust domains or (ii) data memory sandbox boundary changes (i.e., some locations dynamically move across sandboxes);
and then extend to the complex cases with these behaviors.
Bugzilla
CVE-2018-3639 libvirt: hw: cpu: speculative store bypass [fedora-all]
bugzilla·2018-06-19·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639 libvirt: hw: cpu: speculative store bypass [fedora-all]
CVE-2018-3639 libvirt: hw: cpu: speculative store bypass [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedo
Bugzilla
CVE-2018-3639 qemu: hw: cpu: speculative store bypass [fedora-all]
bugzilla·2018-06-19·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639 qemu: hw: cpu: speculative store bypass [fedora-all]
CVE-2018-3639 qemu: hw: cpu: speculative store bypass [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora.
Bugzilla
CVE-2018-3639 kernel: hw: cpu: speculative store bypass [fedora-all]
bugzilla·2018-05-21·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639 kernel: hw: cpu: speculative store bypass [fedora-all]
CVE-2018-3639 kernel: hw: cpu: speculative store bypass [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedor
Bugzilla
CVE-2018-3639 hw: cpu: speculative store bypass
bugzilla·2018-04-13·CVSS 5.5
CVE-2018-3639 [MEDIUM] CVE-2018-3639 hw: cpu: speculative store bypass
CVE-2018-3639 hw: cpu: speculative store bypass
An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization).
It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire).
As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks.
Discussion:
Statement:
Red Hat Product Security is aware o
CWE
Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution
mitre_cwe
CWE-1422 Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution
CWE-1422: Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution
A processor event or prediction may allow incorrect or stale data to
be forwarded to transient operations, potentially exposing data over a
covert channel.
Software may use a variety of techniques to preserve the
confidentiality of private data that is accessible within the current
processor context. For example, the memory safety and type safety
properties of some high-level programming languages help to prevent
software written in those languages from exposing private data. As a
second example, software sandboxes may co-locate multiple users'
software within a single process. The processor's Instruction Set
Architecture (ISA) may permit one user's software to access another
user's
CWE
Exposure of Sensitive Information during Transient Execution
mitre_cwe
CWE-1420 Exposure of Sensitive Information during Transient Execution
CWE-1420: Exposure of Sensitive Information during Transient Execution
A processor event or prediction may allow incorrect operations (or correct operations with incorrect data) to execute transiently, potentially exposing data over a covert channel.
When operations execute but do not commit to the processor's
architectural state, this is commonly referred to as transient
execution. This behavior can occur when the processor mis-predicts an
outcome (such as a branch target), or when a processor event (such as
an exception or microcode assist, etc.) is handled after younger
operations have already executed. Operations that execute transiently
may exhibit observable discrepancies (CWE-203) in covert channels
[REF-1400] such as data caches. Observable discrepancies of this kind
can be detec
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.htmlhttp://support.lenovo.com/us/en/solutions/LEN-22133http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.htmlhttp://www.openwall.com/lists/oss-security/2020/06/10/1http://www.openwall.com/lists/oss-security/2020/06/10/2http://www.openwall.com/lists/oss-security/2020/06/10/5http://www.securityfocus.com/bid/104232http://www.securitytracker.com/id/1040949http://www.securitytracker.com/id/1042004http://xenbits.xen.org/xsa/advisory-263.htmlhttps://access.redhat.com/errata/RHSA-2018:1629https://access.redhat.com/errata/RHSA-2018:1630https://access.redhat.com/errata/RHSA-2018:1632https://access.redhat.com/errata/RHSA-2018:1633https://access.redhat.com/errata/RHSA-2018:1635https://access.redhat.com/errata/RHSA-2018:1636https://access.redhat.com/errata/RHSA-2018:1637https://access.redhat.com/errata/RHSA-2018:1638https://access.redhat.com/errata/RHSA-2018:1639https://access.redhat.com/errata/RHSA-2018:1640https://access.redhat.com/errata/RHSA-2018:1641https://access.redhat.com/errata/RHSA-2018:1642https://access.redhat.com/errata/RHSA-2018:1643https://access.redhat.com/errata/RHSA-2018:1644https://access.redhat.com/errata/RHSA-2018:1645https://access.redhat.com/errata/RHSA-2018:1646https://access.redhat.com/errata/RHSA-2018:1647https://access.redhat.com/errata/RHSA-2018:1648https://access.redhat.com/errata/RHSA-2018:1649https://access.redhat.com/errata/RHSA-2018:1650https://access.redhat.com/errata/RHSA-2018:1651https://access.redhat.com/errata/RHSA-2018:1652https://access.redhat.com/errata/RHSA-2018:1653https://access.redhat.com/errata/RHSA-2018:1654https://access.redhat.com/errata/RHSA-2018:1655https://access.redhat.com/errata/RHSA-2018:1656https://access.redhat.com/errata/RHSA-2018:1657https://access.redhat.com/errata/RHSA-2018:1658https://access.redhat.com/errata/RHSA-2018:1659https://access.redhat.com/errata/RHSA-2018:1660https://access.redhat.com/errata/RHSA-2018:1661https://access.redhat.com/errata/RHSA-2018:1662https://access.redhat.com/errata/RHSA-2018:1663https://access.redhat.com/errata/RHSA-2018:1664https://access.redhat.com/errata/RHSA-2018:1665https://access.redhat.com/errata/RHSA-2018:1666https://access.redhat.com/errata/RHSA-2018:1667https://access.redhat.com/errata/RHSA-2018:1668https://access.redhat.com/errata/RHSA-2018:1669https://access.redhat.com/errata/RHSA-2018:1674https://access.redhat.com/errata/RHSA-2018:1675https://access.redhat.com/errata/RHSA-2018:1676https://access.redhat.com/errata/RHSA-2018:1686https://access.redhat.com/errata/RHSA-2018:1688https://access.redhat.com/errata/RHSA-2018:1689https://access.redhat.com/errata/RHSA-2018:1690https://access.redhat.com/errata/RHSA-2018:1696https://access.redhat.com/errata/RHSA-2018:1710https://access.redhat.com/errata/RHSA-2018:1711https://access.redhat.com/errata/RHSA-2018:1737https://access.redhat.com/errata/RHSA-2018:1738https://access.redhat.com/errata/RHSA-2018:1826https://access.redhat.com/errata/RHSA-2018:1854https://access.redhat.com/errata/RHSA-2018:1965https://access.redhat.com/errata/RHSA-2018:1967https://access.redhat.com/errata/RHSA-2018:1997https://access.redhat.com/errata/RHSA-2018:2001https://access.redhat.com/errata/RHSA-2018:2003https://access.redhat.com/errata/RHSA-2018:2006https://access.redhat.com/errata/RHSA-2018:2060https://access.redhat.com/errata/RHSA-2018:2161https://access.redhat.com/errata/RHSA-2018:2162https://access.redhat.com/errata/RHSA-2018:2164https://access.redhat.com/errata/RHSA-2018:2171https://access.redhat.com/errata/RHSA-2018:2172https://access.redhat.com/errata/RHSA-2018:2216https://access.redhat.com/errata/RHSA-2018:2228https://access.redhat.com/errata/RHSA-2018:2246https://access.redhat.com/errata/RHSA-2018:2250https://access.redhat.com/errata/RHSA-2018:2258https://access.redhat.com/errata/RHSA-2018:2289https://access.redhat.com/errata/RHSA-2018:2309https://access.redhat.com/errata/RHSA-2018:2328https://access.redhat.com/errata/RHSA-2018:2363https://access.redhat.com/errata/RHSA-2018:2364https://access.redhat.com/errata/RHSA-2018:2387https://access.redhat.com/errata/RHSA-2018:2394https://access.redhat.com/errata/RHSA-2018:2396https://access.redhat.com/errata/RHSA-2018:2948https://access.redhat.com/errata/RHSA-2018:3396https://access.redhat.com/errata/RHSA-2018:3397https://access.redhat.com/errata/RHSA-2018:3398https://access.redhat.com/errata/RHSA-2018:3399https://access.redhat.com/errata/RHSA-2018:3400https://access.redhat.com/errata/RHSA-2018:3401https://access.redhat.com/errata/RHSA-2018:3402https://access.redhat.com/errata/RHSA-2018:3407https://access.redhat.com/errata/RHSA-2018:3423
+ 194 more references
2018-05-22
Published
Exploited in the wild