Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on ‘port contention’.

OSVersionArchitecturePackageVersionFilename
Alpine3.3-mainnoarchopenssl< 1.0.2q-r0UNKNOWN
Alpine3.4-mainnoarchopenssl< 1.0.2q-r0UNKNOWN
Alpine3.5-mainnoarchopenssl< 1.0.2q-r0UNKNOWN
Alpine3.6-mainnoarchopenssl< 1.0.2q-r0UNKNOWN
Alpine3.7-mainnoarchopenssl< 1.0.2q-r0UNKNOWN
Alpine3.8-mainnoarchopenssl< 1.0.2q-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.3-main	noarch	openssl	< 1.0.2q-r0	UNKNOWN
Alpine	3.4-main	noarch	openssl	< 1.0.2q-r0	UNKNOWN
Alpine	3.5-main	noarch	openssl	< 1.0.2q-r0	UNKNOWN
Alpine	3.6-main	noarch	openssl	< 1.0.2q-r0	UNKNOWN
Alpine	3.7-main	noarch	openssl	< 1.0.2q-r0	UNKNOWN
Alpine	3.8-main	noarch	openssl	< 1.0.2q-r0	UNKNOWN

freebsd 2

oraclelinux 5

hp 1

cvelist 1

veracode 1

nessus 61

ibm 39

exploitpack 1

ubuntucve 2

osv 4

openvas 35

debiancve 1

zdt 1

cve 1

nvd 1

redhatcve 1

thn 1

f5 1

threatpost 1

openssl 1

redhat 8

tenable 2

prion 1

exploitdb 1

suse 5

slackware 1

amazon 2

gentoo 1

mageia 1

altlinux 1

centos 2

archlinux 2

debian 3

aix 1

cloudfoundry 1

photon 3

ubuntu 1

symantec 1

nodejsblog 1

freebsd

OpenSSL -- timing vulnerability

2018-11-12 00:00:00

node.js -- multiple vulnerabilities

2018-11-27 00:00:00

oraclelinux

openssl security and bug fix update

2019-03-13 00:00:00

openssl security and bug fix update

2019-08-13 00:00:00

openssl security update

2019-08-19 00:00:00

HPSBHF03597 rev. 3 - PortSmash Side-Channel Vulnerability

2018-11-02 00:00:00

cvelist

CVE-2018-5407

2018-11-15 21:00:00

veracode

Timing Attack

2018-11-26 02:50:19

nessus

CentOS 7 : openssl (CESA-2019:0483)

2019-03-20 00:00:00

Scientific Linux Security Update : openssl on SL7.x x86_64 (20190313)

2019-03-14 00:00:00

FreeBSD : OpenSSL -- timing vulnerability (6f170cf2-e6b7-11e8-a9a8-b499baebfeaf)

2018-11-13 00:00:00

ibm

Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to OpenSSL vulnerability CVE-2018-5407

2023-12-07 22:45:04

Security Bulletin: Vulnerability in OpenSSL affects IBM OS Image for Red Hat Linux Systems, AIX and bundling products for IBM PureApplication Systems (CVE-2018-5407)

2019-09-11 05:05:01

Security Bulletin: IBM Security Guardium is affected by an OpenSSL vulnerability

2020-10-06 20:42:04

exploitpack

Intel (Skylake Kaby Lake) - PortSmash CPU SMT Side-Channel

2018-11-02 00:00:00

ubuntucve

CVE-2018-5407

2018-11-15 00:00:00

CVE-2018-0735

2018-10-29 00:00:00

osv

CVE-2018-5407

2018-11-15 21:29:00

openssl - security update

2018-11-21 00:00:00

openssl1.0 - security update

2018-12-19 00:00:00

openvas

Huawei EulerOS: Security Advisory for openssl110f (EulerOS-SA-2018-1434)

2020-01-23 00:00:00

OpenSSL: Microarchitecture timing vulnerability in ECC scalar multiplication (CVE-2018-5407) - Linux

2018-11-22 00:00:00

CentOS Update for openssl CESA-2019:0483 centos7

2019-03-21 00:00:00

debiancve

CVE-2018-5407

2018-11-15 21:29:00

zdt

Intel (Skylake / Kaby Lake) - PortSmash CPU SMT Side-Channel Exploit

2018-11-05 00:00:00

cve

CVE-2018-5407

2018-11-15 21:29:00

nvd

CVE-2018-5407

2018-11-15 21:29:00

redhatcve

CVE-2018-5407

2020-01-13 03:40:32

thn

New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

2018-11-04 09:24:00

K49711130 : OpenSSL and Intel processor SMT side-channel vulnerability (PortSmash) CVE-2018-5407

2018-11-30 00:00:00

threatpost

PortSmash Side Channel Attack Siphons Data From Intel, Other CPUs

2018-11-05 16:56:02

openssl

Vulnerability in OpenSSL CVE-2018-5407

2018-11-02 00:00:00

redhat

(RHSA-2019:0651) Moderate: Red Hat Ansible Tower 3.4.3

2019-03-26 19:14:33

(RHSA-2019:0483) Moderate: openssl security and bug fix update

2019-03-12 08:21:31

(RHSA-2019:0652) Moderate: Red Hat Ansible Tower 3.3.5

2019-03-26 19:14:35

tenable

[R1] Nessus 8.1.1 Fixes Multiple Third-party Vulnerabilities

2018-12-20 17:47:49

[R1] Nessus 8.1.1 Fixes Multiple Third-party Vulnerabilities

2018-12-20 17:47:49

prion

Design/Logic Flaw

2018-11-15 21:29:00

exploitdb

Intel (Skylake / Kaby Lake) - 'PortSmash' CPU SMT Side-Channel

2018-11-02 00:00:00

suse

Security update for openssl-1_0_0 (moderate)

2018-12-08 15:08:25

Security update for openssl (moderate)

2018-11-24 18:18:01

Security update for compat-openssl098 (moderate)

2018-12-13 03:13:21

slackware

[slackware-security] openssl

2018-11-22 06:43:55

amazon

Medium: openssl

2019-04-04 21:45:00

Medium: openssl

2019-04-04 19:13:00

gentoo

OpenSSL: Multiple vulnerabilities

2019-03-14 00:00:00

mageia

Updated openssl packages fix security vulnerabilities

2018-11-27 18:26:11

altlinux

Security fix for the ALT Linux 9 package openssl10 version 1.0.2q-alt1

2018-12-19 00:00:00

centos

openssl security update

2019-03-19 14:32:25

OVMF security update

2019-08-30 03:50:09

archlinux

[ASA-201812-7] lib32-openssl-1.0: private key recovery

2018-12-08 00:00:00

[ASA-201812-8] openssl-1.0: private key recovery

2018-12-08 00:00:00

debian

[SECURITY] [DLA 1586-1] openssl security update

2018-11-21 21:43:46

[SECURITY] [DSA 4355-1] openssl1.0 security update

2018-12-19 22:29:59

[SECURITY] [DSA 4348-1] openssl security update

2018-11-30 22:26:20

aix

There are vulnerabilities in OpenSSL used by AIX.

2018-12-11 09:37:36

cloudfoundry

USN-3840-1: OpenSSL vulnerabilities | Cloud Foundry

2018-12-27 00:00:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0199

2018-12-14 00:00:00

Moderate Photon OS Security Update - PHSA-2018-0199

2018-12-14 00:00:00

Important Photon OS Security Update - PHSA-2018-0113

2018-12-11 00:00:00

ubuntu

OpenSSL vulnerabilities

2018-12-06 00:00:00

symantec

OpenSSL Vulnerabilities Oct 2018 - Jul 2019

2019-09-05 08:00:00

nodejsblog

November 2018 Security Releases

2018-11-28 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.2%

JSON

Related for ALPINE:CVE-2018-5407