CVE-2018-3639
intel atom_c: Sicherheitsluecke
Affected
- siemens/itc1500_firmware
lt *..3.1 - siemens/itc1500_pro_firmware
lt *..3.1 - siemens/itc1900_firmware
lt *..3.1 - siemens/itc1900_pro_firmware
lt *..3.1 - siemens/itc2200_firmware
lt *..3.1 - siemens/itc2200_pro_firmware
lt *..3.1 - oracle/local_service_management_system
between 13.0..13.3 - siemens/simatic_et_200_sp_firmware
lt *..2.6 - siemens/simatic_field_pg_m4_firmware
lt *..18.01.09 - siemens/simatic_field_pg_m5_firmware
lt *..22.01.06 - siemens/simatic_ipc3000_smart_firmware
lt *..1.5 - siemens/simatic_ipc347e_firmware
lt *..1.5 - siemens/simatic_ipc427d_firmware
lt *..17.0x.14 - siemens/simatic_ipc427e_firmware
lt *..21.01.09 - siemens/simatic_ipc477d_firmware
lt *..17.0x.14 - siemens/simatic_ipc477e_firmware
lt *..21.01.09 - siemens/simatic_ipc477e_pro_firmware
lt *..21.01.09 - siemens/simatic_ipc547e_firmware
lt *..r1.30.0 - siemens/simatic_ipc547g_firmware
lt *..r1.23.0 - siemens/simatic_ipc627c_firmware
lt *..15.02.15 - siemens/simatic_ipc627d_firmware
lt *..19.02.11 - siemens/simatic_ipc647c_firmware
lt *..15.01.14 - siemens/simatic_ipc647d_firmware
lt *..19.01.14 - siemens/simatic_ipc677d_firmware
lt *..19.02.11 - siemens/simatic_ipc677c_firmware
lt *..15.02.15 - siemens/simatic_ipc827c_firmware
lt *..15.02.15 - siemens/simatic_ipc827d_firmware
lt *..19.02.11 - siemens/simatic_ipc847c_firmware
lt *..15.01.14 - siemens/simatic_ipc847d_firmware
lt *..19.01.14 - siemens/simatic_itp1000_firmware
lt *..23.01.04 - siemens/simatic_s7-1500_firmware
lt *..2.6 - siemens/simotion_p320-4e_firmware
lt *..17.0x.14 - siemens/sinumerik_pcu_50.5_firmware
lt *..15.02.15 - schneider-electric/struxureware_data_center_expert
lt *..7.6.0 - nvidia/jetson_tx1
lt *..r28.3 - nvidia/jetson_tx2
lt *..r28.3
Description
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Affected operating systems
linux
debian / debian_linux8.0
linux
debian / debian_linux9.0
linux
redhat / enterprise_linux_desktop6.0
linux
redhat / enterprise_linux_desktop7.0
linux
redhat / enterprise_linux_eus6.7
linux
redhat / enterprise_linux_eus7.3
linux
redhat / enterprise_linux_eus7.4
linux
redhat / enterprise_linux_eus7.5
linux
redhat / enterprise_linux_eus7.6
linux
redhat / enterprise_linux_eus7.7
linux
redhat / enterprise_linux_server6.0
linux
redhat / enterprise_linux_server7.0
linux
redhat / enterprise_linux_server_aus5.9
linux
redhat / enterprise_linux_server_aus6.4
linux
redhat / enterprise_linux_server_aus6.5
linux
redhat / enterprise_linux_server_aus6.6
linux
redhat / enterprise_linux_server_aus7.2
linux
redhat / enterprise_linux_server_aus7.3
linux
redhat / enterprise_linux_server_aus7.4
linux
redhat / enterprise_linux_server_aus7.7
linux
redhat / enterprise_linux_server_tus6.6
linux
redhat / enterprise_linux_server_tus7.2
linux
redhat / enterprise_linux_server_tus7.3
linux
redhat / enterprise_linux_server_tus7.4
Affected products
The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.
Metrics
Show all metrics
References & sources
- https://access.redhat.com/errata/RHSA-2018:1689vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:2162vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:1641vendor-advisoryx_refsource_REDHAT
- https://usn.ubuntu.com/3680-1/vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/errata/RHSA-2018:1997vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:1665vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:3407vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:2164vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:2001vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:3423vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:2003vendor-advisoryx_refsource_REDHAT
- https://usn.ubuntu.com/3654-1/vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/errata/RHSA-2018:1645vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:1643vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:1652vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:3424vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:3402vendor-advisoryx_refsource_REDHAT
- https://www.us-cert.gov/ncas/alerts/TA18-141Athird-party-advisoryx_refsource_CERT
- https://access.redhat.com/errata/RHSA-2018:1656vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2018:1664vendor-advisoryx_refsource_REDHAT