vulnwire
5.5med

CVE-2018-36391 exploit

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior me…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.5
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
60.4%
percentile 99%
Public exploits
1
Exploit-DB

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

CISA SSVC assessment

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
5 mo ago

Exploit prediction (EPSS)

60.42% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-44695 AMD / ARM / Intel - Speculative Execution Variant 4 Speculative Store Bypass · dos · 2018-05-22

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CNA3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • Intel Corporation Multiple

Classification

Weakness

References

  • access.redhat.com /errata/RHSA-2018:1689 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2162 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1641 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • usn.ubuntu.com /3680-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • access.redhat.com /errata/RHSA-2018:1997 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1665 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:3407 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2164 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2001 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:3423 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2003 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • usn.ubuntu.com /3654-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • access.redhat.com /errata/RHSA-2018:1645 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1643 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1652 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:3424 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:3402 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • us-cert.gov /ncas/alerts/TA18-141A · third-party-advisory, x_refsource_CERT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1656 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1664 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2258 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1688 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1658 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1657 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2289 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1666 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securitytracker.com /id/1042004 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • access.redhat.com /errata/RHSA-2018:1675 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1660 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1965 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1661 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1633 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1636 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1854 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2006 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2250 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securitytracker.com /id/1040949 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • access.redhat.com /errata/RHSA-2018:3401 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1737 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:1826 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2019-05/msg00058.html · Broken Link
  • lists.opensuse.org /opensuse-security-announce/2019-05/msg00059.html · Broken Link
  • lists.opensuse.org /opensuse-security-announce/2020-09/msg00007.html · Broken Link
  • support.lenovo.com /us/en/solutions/LEN-22133 · Third Party Advisory
  • fujitsu.com /global/support/products/software/security/products-f/cve-2018-3639e.html · Third Party Advisory
  • openwall.com /lists/oss-security/2020/06/10/1 · Mailing List, Third Party Advisory
  • openwall.com /lists/oss-security/2020/06/10/2 · Mailing List, Third Party Advisory
  • openwall.com /lists/oss-security/2020/06/10/5 · Mailing List, Third Party Advisory
  • securityfocus.com /bid/104232 · Third Party Advisory, VDB Entry
  • xenbits.xen.org /xsa/advisory-263.html · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1629 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1630 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1632 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1635 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1637 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1638 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1639 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1640 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1642 · Third Party Advisory
  • access.redhat.com /errata/RHSA-2018:1644 · Third Party Advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.