Orta CVSS 4.7 PoC var

CVE-2018-5407: Ubuntu Linux: hassas bilgi ifşası

Yayın: 16 Kasım 2018 00:29 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Özet bilgiler

Ürün: Canonical Ubuntu Linux
CVSS v3.1: 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: %3,42 (yüzdelik 89)
CWE: CWE-200
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	18.10	18.10	—
debian-debian-linux	8.0	8.0	—
debian-debian-linux	9.0	9.0	—
nodejs-node.js	—	—	6.14.4
nodejs-node.js	8.0.0	—	8.11.4
nodejs-node.js	10.0.0	—	10.9.0
openssl-openssl	1.0.2	—	1.0.2q
openssl-openssl	1.1.0	—	1.1.0i
tenable-nessus	—	—	8.1.1
oracle-api-gateway	11.1.2.4.0	11.1.2.4.0	—
oracle-application-server	0.9.8	0.9.8	—
oracle-application-server	1.0.0	1.0.0	—
oracle-application-server	1.0.1	1.0.1	—
oracle-enterprise-manager-base-platform	12.1.0.5.0	12.1.0.5.0	—
oracle-enterprise-manager-base-platform	13.2.0.0.0	13.2.0.0.0	—
oracle-enterprise-manager-base-platform	13.3.0.0.0	13.3.0.0.0	—
oracle-enterprise-manager-ops-center	12.3.3	12.3.3	—
oracle-mysql-enterprise-backup	—	3.12.3	—
oracle-mysql-enterprise-backup	3.12.4	4.1.2	—
oracle-peoplesoft-enterprise-peopletools	8.55	8.55	—
oracle-peoplesoft-enterprise-peopletools	8.56	8.56	—
oracle-peoplesoft-enterprise-peopletools	8.57	8.57	—
oracle-primavera-p6-enterprise-project-portfolio-management	17.7	17.12	—
oracle-primavera-p6-enterprise-project-portfolio-management	8.4	8.4	—
oracle-primavera-p6-enterprise-project-portfolio-management	15.1	15.1	—
oracle-primavera-p6-enterprise-project-portfolio-management	15.2	15.2	—
oracle-primavera-p6-enterprise-project-portfolio-management	16.1	16.1	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları