Vulnerability Database

296,480

Total vulnerabilities in the database

CVE-2018-5407

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

  • Published: Nov 15, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-5407
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.7
  • AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 1.9
  • AV:L/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
canonical / ubuntu_linux 16.04 16.04.x
canonical / ubuntu_linux 14.04 14.04.x
canonical / ubuntu_linux 18.04 18.04.x
canonical / ubuntu_linux 18.10 18.10.x
debian / debian_linux 8.0 8.0.x
debian / debian_linux 9.0 9.0.x
nodejs / node.js 10.0.0 10.9.0
nodejs / node.js 8.0.0 8.11.4
nodejs / node.js - 6.14.4
openssl / openssl 1.0.2 1.0.2q
openssl / openssl 1.1.0 1.1.0i
tenable / nessus - 8.1.1
oracle / primavera_p6_enterprise_project_portfolio_management 16.2 16.2.x
oracle / api_gateway 11.1.2.4.0 11.1.2.4.0.x
oracle / primavera_p6_enterprise_project_portfolio_management 15.1 15.1.x
oracle / primavera_p6_enterprise_project_portfolio_management 16.1 16.1.x
oracle / primavera_p6_enterprise_project_portfolio_management 15.2 15.2.x
oracle / peoplesoft_enterprise_peopletools 8.55 8.55.x
oracle / primavera_p6_enterprise_project_portfolio_management 8.4 8.4.x
oracle / peoplesoft_enterprise_peopletools 8.56 8.56.x
oracle / enterprise_manager_ops_center 12.3.3 12.3.3.x
oracle / peoplesoft_enterprise_peopletools 8.57 8.57.x
oracle / primavera_p6_enterprise_project_portfolio_management 17.7 17.12.x
oracle / primavera_p6_enterprise_project_portfolio_management 18.8 18.8.x
oracle / vm_virtualbox - 6.0.0
oracle / enterprise_manager_base_platform 13.2.0.0.0 13.2.0.0.0.x
oracle / enterprise_manager_base_platform 12.1.0.5.0 12.1.0.5.0.x
oracle / tuxedo 12.1.1.0.0 12.1.1.0.0.x
oracle / enterprise_manager_base_platform 13.3.0.0.0 13.3.0.0.0.x
oracle / application_server 0.9.8 0.9.8.x
oracle / application_server 1.0.0 1.0.0.x
oracle / application_server 1.0.1 1.0.1.x
oracle / mysql_enterprise_backup - 3.12.3.x
oracle / mysql_enterprise_backup 3.12.4 4.1.2.x
redhat / enterprise_linux_desktop 7.0 7.0.x
redhat / enterprise_linux_workstation 7.0 7.0.x
redhat / enterprise_linux_server 7.0 7.0.x
redhat / enterprise_linux_server_tus 7.6 7.6.x
redhat / enterprise_linux_server_eus 7.6 7.6.x
redhat / enterprise_linux_server_aus 7.6 7.6.x
redhat / enterprise_linux_server 7.6 7.6.x