CVE-2018-5407 Information disclosure in Processors supporting Simultaneous Multi-Threading
Local attackers can exploit timing side-channels in SMT processors to disclose sensitive information via port contention.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-5407?
CVE-2018-5407 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 15 Nov 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
Which versions are affected by CVE-2018-5407?
It affects 20 products.
Linux distribution packages (10)
imgbased Red Hat:enterprise_linux:7::hypervisor | All versions | 0:1.1.7-0.1.el7ev |
ovirt-node-ng Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3.0-0.20181213.0.el7ev |
ovirt-node-ng-nodectl Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3.0-0.20181213.0.el7ev |
python-imgbased Red Hat:enterprise_linux:7::hypervisor | All versions | 0:1.1.7-0.1.el7ev |
python2-ovirt-node-ng-nodectl Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3.0-0.20181213.0.el7ev |
redhat-release-virtualization-host Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3-0.5.el7 |
redhat-virtualization-host Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3-20190409.0.el7_6 |
redhat-virtualization-host-image-update Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3-20190409.0.el7_6 |
redhat-virtualization-host-image-update-placeholder Red Hat:enterprise_linux:7::hypervisor | All versions | 0:4.3-0.5.el7 |
rhvm-appliance Red Hat:enterprise_linux:7::hypervisor | All versions | 2:4.3-20190409.0.el7 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Nodejs Node.js, Openssl Openssl, Oracle Api Gateway, Oracle Application Server and 14 more.
How do I fix CVE-2018-5407?
Apply the vendor's patch.
Is CVE-2018-5407 being exploited?
There is no known exploitation of CVE-2018-5407 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2018-5407, DEBIAN-CVE-2018-5407, GHSA-3rjg-j575-7f6p, RHBA-2019:1053, RHBA-2019:1088, UBUNTU-CVE-2018-5407.