CVE-2018-5407
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
- CVSS 3.1
- 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-25)
- CWEs
- CWE-203, CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- nodejs:node.js
- openssl:openssl
- oracle:api_gateway
- oracle:application_server
- oracle:enterprise_manager_base_platform
- oracle:enterprise_manager_ops_center
- oracle:mysql_enterprise_backup
- oracle:peoplesoft_enterprise_peopletools
- oracle:primavera_p6_enterprise_project_portfolio_management
- oracle:tuxedo
- oracle:vm_virtualbox
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_eus
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_workstation
- tenable:nessus