CVE-2018-5407

Published: 15 November 2018

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Notes

Author	Note
mdeslaur	this is a hardware issue, but openssl did commit a workaround in 1.1.1, 1.1.0i

Priority

Cvss 3 Severity Score

4.7

Score breakdown

Status

Package	Release	Status
openssl Launchpad, Ubuntu, Debian	bionic	Released (1.1.0g-2ubuntu4.3)
	cosmic	Not vulnerable (1.1.1-1ubuntu2)
	disco	Not vulnerable (1.1.1-1ubuntu2)
	eoan	Not vulnerable (1.1.1-1ubuntu2)
	focal	Not vulnerable (1.1.1-1ubuntu2)
	groovy	Not vulnerable (1.1.1-1ubuntu2)
	hirsute	Not vulnerable (1.1.1-1ubuntu2)
	trusty	Released (1.0.1f-1ubuntu2.27)
	upstream	Released (1.1.0i,1.1.1)
	xenial	Released (1.0.2g-1ubuntu4.14)
	Patches: upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=aab7c770353b1dc4ba045938c8fb446dd1c4531e upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=f06437c751d6f6ec7f4176518e2897f44dd58eb0 upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=33588c930d39d67d1128794dc7c85bae71af24ad upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=f916a735bcdce496cebc7653a8ad2e72b333405a upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=b43ad53119c0ac2ecfa6e4356210ccda57e0d16b upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=2172133d0dc58256bf776da074c0d1944fef15cb upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=cc39f9250957dfe6e9f1b62a4eca1863e8451483 upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=7b3e775a6a78650bbd3e8e19a5aa12981880402b upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=5eee95a54de6854e60886c8e662a902184b12d04 upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=875ba8b21ecc65ad9a6bdc66971e50461660fcbb upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=b18162a7c9bbfb57112459a4d6631fa258fd8c0c
openssl098 Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	trusty	Does not exist (trusty was needs-triage)
	upstream	Needs triage
	xenial	Does not exist
openssl1.0 Launchpad, Ubuntu, Debian	bionic	Released (1.0.2n-1ubuntu5.2)
	cosmic	Released (1.0.2n-1ubuntu6.1)
	disco	Does not exist
	eoan	Does not exist
	focal	Does not exist
	groovy	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist

Severity score breakdown

Parameter	Value
Base score	4.7
Attack vector	Local
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	None
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›