CVE-2018-5407
Intel (Skylake / Kaby Lake) - 'PortSmash' CPU SMT Side-Channel
Severity Score
4.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
SMT (Simultaneous Multi-threading) en los procesadores puede habilitar que usuarios locales exploten software vulnerable a ataques de sincronización mediante un ataques de sincronización de canal lateral en la "contención de puertos".
A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-01-12 CVE Reserved
- 2018-11-02 CVE Published
- 2023-07-08 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-203: Observable Discrepancy
CAPEC
References (30)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/105897 | Third Party Advisory | |
| https://eprint.iacr.org/2018/1060.pdf | Technical Description | |
| https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html | Mailing List |
|
| https://nodejs.org/en/blog/vulnerability/november-2018-security-releases | Third Party Advisory | |
| https://security.netapp.com/advisory/ntap-20181126-0001 | Third Party Advisory |
|
| https://support.f5.com/csp/article/K49711130?utm_source=f5support&%3Butm_medium=RSS | X_refsource_confirm | |
| https://www.tenable.com/security/tns-2018-16 | Third Party Advisory | |
| https://www.tenable.com/security/tns-2018-17 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/45785 | 2024-08-05 | |
| https://github.com/bbbrumley/portsmash | 2024-08-05 |
| URL | Date | SRC |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2019:0483 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:0651 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:0652 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:2125 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:3929 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:3931 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:3932 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:3933 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:3935 | 2023-11-07 | |
| https://security.gentoo.org/glsa/201903-10 | 2023-11-07 | |
| https://usn.ubuntu.com/3840-1 | 2023-11-07 | |
| https://www.debian.org/security/2018/dsa-4348 | 2023-11-07 | |
| https://www.debian.org/security/2018/dsa-4355 | 2023-11-07 | |
| https://access.redhat.com/security/cve/CVE-2018-5407 | 2019-11-20 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1645695 | 2019-11-20 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 18.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 18.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.10" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||
| Nodejs Search vendor "Nodejs" | Node.js Search vendor "Nodejs" for product "Node.js" | < 6.14.4 Search vendor "Nodejs" for product "Node.js" and version " < 6.14.4" | - |
Affected
| ||||||
| Nodejs Search vendor "Nodejs" | Node.js Search vendor "Nodejs" for product "Node.js" | >= 8.0.0 < 8.11.4 Search vendor "Nodejs" for product "Node.js" and version " >= 8.0.0 < 8.11.4" | - |
Affected
| ||||||
| Nodejs Search vendor "Nodejs" | Node.js Search vendor "Nodejs" for product "Node.js" | >= 10.0.0 < 10.9.0 Search vendor "Nodejs" for product "Node.js" and version " >= 10.0.0 < 10.9.0" | - |
Affected
| ||||||
| Openssl Search vendor "Openssl" | Openssl Search vendor "Openssl" for product "Openssl" | >= 1.0.2 < 1.0.2q Search vendor "Openssl" for product "Openssl" and version " >= 1.0.2 < 1.0.2q" | - |
Affected
| ||||||
| Openssl Search vendor "Openssl" | Openssl Search vendor "Openssl" for product "Openssl" | >= 1.1.0 < 1.1.0i Search vendor "Openssl" for product "Openssl" and version " >= 1.1.0 < 1.1.0i" | - |
Affected
| ||||||
| Tenable Search vendor "Tenable" | Nessus Search vendor "Tenable" for product "Nessus" | < 8.1.1 Search vendor "Tenable" for product "Nessus" and version " < 8.1.1" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Api Gateway Search vendor "Oracle" for product "Api Gateway" | 11.1.2.4.0 Search vendor "Oracle" for product "Api Gateway" and version "11.1.2.4.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Application Server Search vendor "Oracle" for product "Application Server" | 0.9.8 Search vendor "Oracle" for product "Application Server" and version "0.9.8" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Application Server Search vendor "Oracle" for product "Application Server" | 1.0.0 Search vendor "Oracle" for product "Application Server" and version "1.0.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Application Server Search vendor "Oracle" for product "Application Server" | 1.0.1 Search vendor "Oracle" for product "Application Server" and version "1.0.1" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Enterprise Manager Base Platform Search vendor "Oracle" for product "Enterprise Manager Base Platform" | 12.1.0.5.0 Search vendor "Oracle" for product "Enterprise Manager Base Platform" and version "12.1.0.5.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Enterprise Manager Base Platform Search vendor "Oracle" for product "Enterprise Manager Base Platform" | 13.2.0.0.0 Search vendor "Oracle" for product "Enterprise Manager Base Platform" and version "13.2.0.0.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Enterprise Manager Base Platform Search vendor "Oracle" for product "Enterprise Manager Base Platform" | 13.3.0.0.0 Search vendor "Oracle" for product "Enterprise Manager Base Platform" and version "13.3.0.0.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Enterprise Manager Ops Center Search vendor "Oracle" for product "Enterprise Manager Ops Center" | 12.3.3 Search vendor "Oracle" for product "Enterprise Manager Ops Center" and version "12.3.3" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Enterprise Backup Search vendor "Oracle" for product "Mysql Enterprise Backup" | <= 3.12.3 Search vendor "Oracle" for product "Mysql Enterprise Backup" and version " <= 3.12.3" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Mysql Enterprise Backup Search vendor "Oracle" for product "Mysql Enterprise Backup" | >= 3.12.4 <= 4.1.2 Search vendor "Oracle" for product "Mysql Enterprise Backup" and version " >= 3.12.4 <= 4.1.2" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Peoplesoft Enterprise Peopletools Search vendor "Oracle" for product "Peoplesoft Enterprise Peopletools" | 8.55 Search vendor "Oracle" for product "Peoplesoft Enterprise Peopletools" and version "8.55" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Peoplesoft Enterprise Peopletools Search vendor "Oracle" for product "Peoplesoft Enterprise Peopletools" | 8.56 Search vendor "Oracle" for product "Peoplesoft Enterprise Peopletools" and version "8.56" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Peoplesoft Enterprise Peopletools Search vendor "Oracle" for product "Peoplesoft Enterprise Peopletools" | 8.57 Search vendor "Oracle" for product "Peoplesoft Enterprise Peopletools" and version "8.57" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Primavera P6 Enterprise Project Portfolio Management Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" | >= 17.7 <= 17.12 Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" and version " >= 17.7 <= 17.12" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Primavera P6 Enterprise Project Portfolio Management Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" | 8.4 Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" and version "8.4" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Primavera P6 Enterprise Project Portfolio Management Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" | 15.1 Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" and version "15.1" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Primavera P6 Enterprise Project Portfolio Management Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" | 15.2 Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" and version "15.2" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Primavera P6 Enterprise Project Portfolio Management Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" | 16.1 Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" and version "16.1" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Primavera P6 Enterprise Project Portfolio Management Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" | 16.2 Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" and version "16.2" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Primavera P6 Enterprise Project Portfolio Management Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" | 18.8 Search vendor "Oracle" for product "Primavera P6 Enterprise Project Portfolio Management" and version "18.8" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Tuxedo Search vendor "Oracle" for product "Tuxedo" | 12.1.1.0.0 Search vendor "Oracle" for product "Tuxedo" and version "12.1.1.0.0" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Vm Virtualbox Search vendor "Oracle" for product "Vm Virtualbox" | < 6.0.0 Search vendor "Oracle" for product "Vm Virtualbox" and version " < 6.0.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop" | 7.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "7.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server" | 7.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "7.0" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server" | 7.6 Search vendor "Redhat" for product "Enterprise Linux Server" and version "7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus" | 7.6 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Eus Search vendor "Redhat" for product "Enterprise Linux Server Eus" | 7.6 Search vendor "Redhat" for product "Enterprise Linux Server Eus" and version "7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Server Tus Search vendor "Redhat" for product "Enterprise Linux Server Tus" | 7.6 Search vendor "Redhat" for product "Enterprise Linux Server Tus" and version "7.6" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation" | 7.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "7.0" | - |
Affected
| ||||||