CVE-2018-5407

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Affected products

Alt Linux, Centos, Ibm Aix, Intel Processors, Openssl, Red Hat, Suse, Ubuntu

Canonical Ubuntu Linux

= 14.04, 16.04, 18.04, 18.10

CVSS 3.1

4.7 MEDIUM

EPSS

3.4% (88th percentile)

Weakness

CWE-200, CWE-203

NVD status

Modified

Published

2018-11-15