CVE-2018-3639
- State
- Published
- Severity
- 5.5 Medium
- Published
- May 22, 2018
- Updated
- May 29, 2026
- Reserved
- Dec 28, 2017
Description
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-203 Observable Discrepancy
Affected Products
| Product | Versions |
|---|---|
MultipleIntel Corporation |
|
References
- RHSA-2018:1689vendor-advisory
- RHSA-2018:2162vendor-advisory
- RHSA-2018:1641vendor-advisory
- USN-3680-1vendor-advisory
- RHSA-2018:1997vendor-advisory
- RHSA-2018:1665vendor-advisory
- RHSA-2018:3407vendor-advisory
- RHSA-2018:2164vendor-advisory
- RHSA-2018:2001vendor-advisory
- RHSA-2018:3423vendor-advisory
- RHSA-2018:2003vendor-advisory
- USN-3654-1vendor-advisory
- RHSA-2018:1645vendor-advisory
- RHSA-2018:1643vendor-advisory
- RHSA-2018:1652vendor-advisory
- RHSA-2018:3424vendor-advisory
- RHSA-2018:3402vendor-advisory
- TA18-141Athird-party-advisory
- RHSA-2018:1656vendor-advisory
- RHSA-2018:1664vendor-advisory
- RHSA-2018:2258vendor-advisory
- RHSA-2018:1688vendor-advisory
- RHSA-2018:1658vendor-advisory
- RHSA-2018:1657vendor-advisory
- RHSA-2018:2289vendor-advisory
- RHSA-2018:1666vendor-advisory
- 1042004vdb-entry
- RHSA-2018:1675vendor-advisory
- RHSA-2018:1660vendor-advisory
- RHSA-2018:1965vendor-advisory
- RHSA-2018:1661vendor-advisory
- RHSA-2018:1633vendor-advisory
- RHSA-2018:1636vendor-advisory
- RHSA-2018:1854vendor-advisory
- RHSA-2018:2006vendor-advisory
- RHSA-2018:2250vendor-advisory
- 1040949vdb-entry
- RHSA-2018:3401vendor-advisory
- RHSA-2018:1737vendor-advisory
- RHSA-2018:1826vendor-advisory
- USN-3651-1vendor-advisory
- DSA-4210vendor-advisory
- 44695exploit
- RHSA-2018:1651vendor-advisory
- RHSA-2018:1638vendor-advisory
- RHSA-2018:1696vendor-advisory
- RHSA-2018:2246vendor-advisory
- RHSA-2018:1644vendor-advisory
- RHSA-2018:1646vendor-advisory
- [debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new packagemailing-list
- RHSA-2018:1639vendor-advisory
- RHSA-2018:1668vendor-advisory
- RHSA-2018:1637vendor-advisory
- RHSA-2018:2948vendor-advisory
- VU#180049third-party-advisory
- RHSA-2018:1686vendor-advisory
- RHSA-2018:2172vendor-advisory
- RHSA-2018:1663vendor-advisory
- USN-3652-1vendor-advisory
- RHSA-2018:1629vendor-advisory
- RHSA-2018:1655vendor-advisory
- RHSA-2018:1640vendor-advisory
- RHSA-2018:1669vendor-advisory
- RHSA-2018:1676vendor-advisory
- 20180522 CPU Side-Channel Information Disclosure Vulnerabilities: May 2018vendor-advisory
- RHSA-2018:3425vendor-advisory
- RHSA-2018:2363vendor-advisory
- RHSA-2018:1632vendor-advisory
- RHSA-2018:1650vendor-advisory
- RHSA-2018:2396vendor-advisory
- RHSA-2018:2364vendor-advisory
- USN-3653-2vendor-advisory
- RHSA-2018:2216vendor-advisory
- USN-3655-1vendor-advisory
- RHSA-2018:1649vendor-advisory
- RHSA-2018:2309vendor-advisory
- 104232vdb-entry
- RHSA-2018:1653vendor-advisory
- RHSA-2018:2171vendor-advisory
- RHSA-2018:1635vendor-advisory
- [debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security updatemailing-list
- RHSA-2018:2394vendor-advisory
- RHSA-2018:1710vendor-advisory
- RHSA-2018:1659vendor-advisory
- RHSA-2018:1711vendor-advisory
- DSA-4273vendor-advisory
- RHSA-2018:1738vendor-advisory
- RHSA-2018:1674vendor-advisory
- RHSA-2018:3396vendor-advisory
- RHSA-2018:1667vendor-advisory
- USN-3654-2vendor-advisory
- RHSA-2018:1662vendor-advisory
- RHSA-2018:1630vendor-advisory
- RHSA-2018:1647vendor-advisory
- RHSA-2018:1967vendor-advisory
- USN-3655-2vendor-advisory
- RHSA-2018:3399vendor-advisory
- RHSA-2018:2060vendor-advisory
- RHSA-2018:1690vendor-advisory
- USN-3653-1vendor-advisory
- RHSA-2018:2161vendor-advisory
- [debian-lts-announce] 20180727 [SECURITY] [DLA 1446-1] intel-microcode security updatemailing-list
- RHSA-2018:2328vendor-advisory
- RHSA-2018:1648vendor-advisory
- RHSA-2018:2387vendor-advisory
- RHSA-2019:0148vendor-advisory
- RHSA-2018:1654vendor-advisory
- USN-3679-1vendor-advisory
- USN-3777-3vendor-advisory
- RHSA-2018:1642vendor-advisory
- RHSA-2018:3397vendor-advisory
- [debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security updatemailing-list
- USN-3756-1vendor-advisory
- RHSA-2018:3398vendor-advisory
- RHSA-2018:3400vendor-advisory
- RHSA-2018:2228vendor-advisory
- [debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security updatemailing-list
- [debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression updatemailing-list
- RHSA-2019:1046vendor-advisory
- openSUSE-SU-2019:1439vendor-advisory
- openSUSE-SU-2019:1438vendor-advisory
- 20190624 [SECURITY] [DSA 4469-1] libvirt security updatemailing-list
- [oss-security] 20200610 kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768mailing-list
- [oss-security] 20200610 Re: kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768mailing-list
- [oss-security] 20200610 Re: kernel: Multiple SSBD related flaws CVE-2020-10766 , CVE-2020-10767, CVE-2020-10768mailing-list
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
- https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf
- http://support.lenovo.com/us/en/solutions/LEN-22133
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0004
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012
- https://support.citrix.com/article/CTX235225
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
- https://www.synology.com/support/security/Synology_SA_18_23
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- http://xenbits.xen.org/xsa/advisory-263.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf
- https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1528
- https://security.netapp.com/advisory/ntap-20180521-0001/
- https://nvidia.custhelp.com/app/answers/detail/a_id/4787
- https://support.oracle.com/knowledge/Sun%20Microsystems/2481872_1.html
- openSUSE-SU-2020:1325vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.