CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2018-3639
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Severity
- EPSS
- 60% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-203
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arm:cortex-a
- canonical:ubuntu_linux
- debian:debian_linux
- intel:atom_c
- intel:atom_e
- intel:atom_x5-e3930
- intel:atom_x5-e3940
- intel:atom_x7-e3950
- intel:atom_z
- intel:celeron_j
- intel:celeron_n
- intel:core_i3
- intel:core_i5
- intel:core_i7
- intel:core_m
- intel:pentium
- intel:pentium_j
- intel:pentium_silver
- intel:xeon_e-1105c
- intel:xeon_e3
- intel:xeon_e3_1105c_v2
- intel:xeon_e3_1125c_v2
- intel:xeon_e3_12201
- intel:xeon_e3_12201_v2
- intel:xeon_e3_1220_v2
- intel:xeon_e3_1220_v3
- intel:xeon_e3_1220_v5
- intel:xeon_e3_1220_v6
- intel:xeon_e3_1220l_v3
- intel:xeon_e3_1225
- intel:xeon_e3_1225_v2
- intel:xeon_e3_1225_v3
- intel:xeon_e3_1225_v5
- intel:xeon_e3_1225_v6
- intel:xeon_e3_1226_v3
- intel:xeon_e3_1230
- intel:xeon_e3_1230_v2
- intel:xeon_e3_1230_v3
- intel:xeon_e3_1230_v5
- intel:xeon_e3_1230_v6
- intel:xeon_e3_1230l_v3
- intel:xeon_e3_1231_v3
- intel:xeon_e3_1235
- intel:xeon_e3_1235l_v5
- intel:xeon_e3_1240
- intel:xeon_e3_1240_v2
- intel:xeon_e3_1240_v3
- intel:xeon_e3_1240_v5
- intel:xeon_e3_1240_v6
- intel:xeon_e3_1240l_v3
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html
- http://support.lenovo.com/us/en/solutions/LEN-22133
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html