CVEvulnerability
CVE-2018-3639
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-203
Description
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Affected configurations
• intel atom c c2308
• intel atom c c3308
• intel atom c c3338
• intel atom c c3508
• intel atom c c3538
• intel atom c c3558
• intel atom c c3708
• intel atom c c3750
• intel atom c c3758
• intel atom c c3808
• intel atom c c3830
• intel atom c c3850
• intel atom c c3858
• intel atom c c3950
• intel atom c c3955
• intel atom c c3958
• intel atom e e3805
• intel atom e e3815
• intel atom e e3825
• intel atom e e3826
• intel atom e e3827
• intel atom e e3845
• intel atom x5-e3930
• intel atom x5-e3940
• intel atom x7-e3950
• intel atom z z2420
• intel atom z z2460
• intel atom z z2480
• intel atom z z2520
• intel atom z z2560
• intel atom z z2580
• intel atom z z2760
• intel atom z z3460
• intel atom z z3480
• intel atom z z3530
• intel atom z z3560
• intel atom z z3570
• intel atom z z3580
• intel atom z z3590
• intel atom z z3735d
• intel atom z z3735e
• intel atom z z3735f
• intel atom z z3735g
• intel atom z z3736f
• intel atom z z3736g
• intel atom z z3740
• intel atom z z3740d
• intel atom z z3745
• intel atom z z3745d
• intel atom z z3770
• intel atom z z3770d
• intel atom z z3775
• intel atom z z3775d
• intel atom z z3785
• intel atom z z3795
• intel celeron j j3455
• intel celeron j j4005
• intel celeron j j4105
• intel celeron n n3450
• intel core i3 32nm
… and 566 more
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html Broken Link
- http://support.lenovo.com/us/en/solutions/LEN-22133 Third Party Advisory
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/06/10/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/06/10/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/06/10/5 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/104232 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042004 Third Party Advisory, VDB Entry
- http://xenbits.xen.org/xsa/advisory-263.html Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1629 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1630 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1632 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1633 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1635 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1636 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1637 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1638 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1639 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1640 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1641 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1642 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1643 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1644 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1645 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1646 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1647 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1648 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1649 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1650 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1651 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1652 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1653 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1654 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1655 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1656 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1657 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1658 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1659 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1660 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1661 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1662 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1663 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1664 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1665 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1666 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1667 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1668 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1669 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1674 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1675 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1676 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1686 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1688 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1689 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1690 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1696 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1710 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1711 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1737 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1738 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1826 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1854 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1965 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1967 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1997 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2001 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2003 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2006 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2060 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2161 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2162 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2164 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2171 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2172 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2216 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2228 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2246 Third Party Advisory