Lucene search

CVE-2018-12126

🗓️ 30 May 2019 16:00:29Reported by intelType

cve🔗 web.nvd.nist.gov👁 536 Views🌐 22 Media mentions

Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	F5 Networks BIG-IP : Microarchitectural Store Buffer Data Sampling (MSBDS) (K52370164)	2 Nov 202300:00	–	nessus
Tenable Nessus	Oracle Linux 6 : qemu-kvm (ELSA-2019-1181) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	15 May 201900:00	–	nessus
Tenable Nessus	Citrix XenServer Microarchitectural Data Sampling Speculative Side-Channel Vulnerabilities (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (CTX2251995)	30 May 201900:00	–	nessus
Tenable Nessus	RHEL 7 : libvirt (RHSA-2019:1186) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	15 May 201900:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (RHSA-2019:1169) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	14 May 201900:00	–	nessus
Tenable Nessus	Fedora 28 : 2:qemu / libvirt (2019-6e146a714c) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	21 May 201900:00	–	nessus
Tenable Nessus	OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0018) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	15 May 201900:00	–	nessus
Tenable Nessus	RHEL 7 : qemu-kvm (RHSA-2019:1185) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	14 May 201900:00	–	nessus
Tenable Nessus	Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2019-4637)	15 May 201900:00	–	nessus
Tenable Nessus	RHEL 6 : qemu-kvm (RHSA-2019:1181) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	14 May 201900:00	–	nessus

Nvd

Node

intel microarchitectural_store_buffer_data_sampling_firmwareMatch-

AND

intel microarchitectural_store_buffer_data_samplingMatch-

Node

fedoraproject fedoraMatch29

[
  {
    "product": "Central ProcCVE-2018-12126essing Units (CPUs)",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2019/06/msg00018.html
debian	www.debian.org/security/2020/dsa-4602
seclists	www.seclists.org/bugtraq/2019/Jun/36
seclists	www.seclists.org/bugtraq/2019/Nov/15
synology	www.synology.com/security/advisory/Synology_SA_19_24
seclists	www.seclists.org/bugtraq/2020/Jan/21
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt
seclists	www.seclists.org/bugtraq/2019/Nov/16
freebsd	www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc
lists	www.lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 May 2019 16:29Current

5.9Medium risk

Vulners AI Score5.9

CVSS24.7

CVSS35.6

EPSS0.001

CWE-200