Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
f5F5F5:K58304450
HistoryMay 30, 2018 - 12:00 a.m.

K58304450 : Multiple Intel Processor vulnerabilities: Spectre-NG

2018-05-3000:00:00
my.f5.com
55

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

7 High

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

0.003 Low

EPSS

Percentile

64.1%

JSON

Security Advisory Description

Eight new vulnerabilities in Intel processors have been mentioned in several sources and are referred to collectively as Spectre-NG. F5 is aware of these vulnerabilities and is investigating as information becomes available. As Intel officially recognizes and announces the vulnerabilities, they will be added to the following table.

To locate relevant articles for these vulnerabilities, refer to the following table. If no article is listed in the** Article** column, an article has not yet been published. F5 Technical Support has no additional information on these issues.

Vulnerability Article
CVE-2018-3639 (also known as Spectre Variant 4) Speculative Store Bypass K29146534: SBB Variant 4 vulnerability CVE-2018-3639
CVE-2018-3640 (also known as Spectre Variant 3a) Rogue System Register Load K51801290: RSRE Variant 3a vulnerability CVE-2018-3640
CVE-2018-3693 (also known as Spectre or Spectre-NG Variant 1.1) Bounds checking bypass - store K54252492: Side-channel processor vulnerability CVE-2018-3693

Note: This is a temporary index. When an article has been published for all of the CVEs in question, this article may no longer be maintained, may be repurposed, or may be archived without advanced notice.

Related

osv 4
openvas 20
cisco 1
nessus 81
debian 3
mscve 2
threatpost 3
qualysblog 1
ibm 11
suse 4
huawei 1
mageia 1
intel 1
hp 1
vmware 2
amazon 4
cloudfoundry 1
ubuntu 4
veracode 2
cve 3
prion 2
redhatcve 2
debiancve 2
f5 2
ubuntucve 1
lenovo 3
cert 1
symantec 1
fedora 3
msrc 1
oraclelinux 3
centos 4
redhat 21
almalinux 1
virtuozzo 1
alpinelinux 1
osv
osv
intel-microcode - security update
2018-09-16 00:00:00
intel-microcode - security update
2018-07-27 00:00:00
intel-microcode - security update
2018-08-16 00:00:00
openvas
openvas
Huawei Data Communication: Side-Channel Vulnerability Variants 3a and 4 (huawei-sa-20180615-01-cpu)
2020-05-26 00:00:00
Debian LTS: Security Advisory for intel-microcode (DLA-1446-1)
2018-07-27 00:00:00
openSUSE: Security Advisory for ucode-intel (openSUSE-SU-2018:1904-1)
2018-07-07 00:00:00
cisco
cisco
CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
2018-05-22 01:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2018:1926-1) (Spectre)
2019-01-02 00:00:00
Debian DLA-1446-1 : intel-microcode security update (Spectre)
2018-07-27 00:00:00
openSUSE Security Update : ucode-intel (openSUSE-2018-700) (Spectre)
2018-07-09 00:00:00
debian
debian
[SECURITY] [DLA 1446-1] intel-microcode security update
2018-07-27 05:08:13
[SECURITY] [DSA 4273-1] intel-microcode security update
2018-08-16 20:43:21
[SECURITY] [DSA 4273-2] intel-microcode security update
2018-09-16 20:43:40
mscve
mscve
Microsoft Guidance for Speculative Store Bypass
2018-05-21 07:00:00
Microsoft Guidance for Rogue System Register Read
2018-05-21 07:00:00
threatpost
threatpost
Intel Responds to Spectre-Like Flaw In CPUs
2018-05-22 14:03:08
Fresh Spectre Variants Come to Light
2018-07-11 17:48:27
Intel’s ‘Virtual Fences’ Spectre Fix Won’t Protect Against Variant 4
2018-05-24 15:18:03
qualysblog
qualysblog
All Hands Memo to Owners of Home / Small Office Routers: Reboot Them!
2018-05-30 14:33:42
ibm
ibm
Security Bulletin: IBM Security QRadar Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)
2019-01-24 12:55:01
Security Bulletin: IBM QRadar SIEM is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)
2019-01-24 12:55:01
Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)
2019-01-24 12:55:01
suse
suse
Security update for ucode-intel (important)
2018-07-06 21:08:25
Security update to ucode-intel (important)
2018-08-17 12:10:34
Security update for qemu (important)
2018-05-23 15:07:21
huawei
huawei
Security Advisory - Side-Channel Vulnerability Variants 3a and 4
2018-06-15 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerability
2018-07-25 11:24:17
intel
intel
Q2 2018 Speculative Execution Side Channel Update
2021-05-11 00:00:00
hp
hp
HPSBHF03584 rev. 8 - Derivative Side-Channel Analysis Method
2018-05-04 00:00:00
vmware
vmware
VMware vSphere, Workstation and Fusion updates enable Hypervisor-Assisted Guest Mitigations for Speculative Store Bypass issue.
2018-05-21 00:00:00
VMware vSphere, Workstation and Fusion updates enable Hypervisor-Assisted Guest Mitigations for Speculative Store Bypass issue.
2018-05-21 00:00:00
amazon
amazon
Important: kernel
2018-06-08 18:08:00
Important: kernel
2018-06-08 18:33:00
Important: java-1.8.0-openjdk
2018-06-08 18:34:00
cloudfoundry
cloudfoundry
USN-3756-1: Intel Microcode vulnerabilities | Cloud Foundry
2018-09-11 00:00:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2018-08-27 00:00:00
QEMU update
2018-06-12 00:00:00
Linux kernel vulnerability
2018-05-22 00:00:00
veracode
veracode
Privilege Escalation
2019-05-16 03:11:25
Information Disclosure
2019-01-15 09:22:18
cve
cve
CVE-2018-3693
2018-07-10 21:29:00
CVE-2018-3640
2018-05-22 12:29:00
CVE-2018-3639
2018-05-22 12:29:00
prion
prion
Buffer overflow
2018-07-10 21:29:00
Design/Logic Flaw
2018-05-22 12:29:00
redhatcve
redhatcve
CVE-2018-3693
2020-04-05 10:54:29
CVE-2018-3640
2018-05-21 21:19:45
debiancve
debiancve
CVE-2018-3693
2018-07-10 21:29:00
CVE-2018-3640
2018-05-22 12:29:00
f5
f5
K54252492 : Side-channel processor vulnerability CVE-2018-3693
2018-08-22 00:00:00
K51801290 : RSRE Variant 3a vulnerability CVE-2018-3640
2018-07-03 00:00:00
ubuntucve
ubuntucve
CVE-2018-3640
2018-05-21 00:00:00
lenovo
lenovo
Speculative Execution Side Channel Variants 4 and 3a - US
2018-09-13 11:41:00
Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US
2018-10-16 12:02:18
Intel Software Guard Extensions (SGX) Vulnerabilities - US
2018-08-22 18:58:00
cert
cert
CPU hardware utilizing speculative execution may be vulnerable to cache side-channel attacks
2018-05-21 00:00:00
symantec
symantec
Multiple CPU Hardware CVE-2018-3639 Information Disclosure Vulnerability
2018-05-21 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: qemu-2.11.1-3.fc28
2018-06-21 15:02:25
[SECURITY] Fedora 29 Update: java-1.8.0-openjdk-1.8.0.232.b09-0.fc29
2019-10-25 18:10:00
[SECURITY] Fedora 28 Update: libvirt-4.1.0-3.fc28
2018-06-21 15:02:29
msrc
msrc
Analysis and mitigation of speculative store bypass (CVE-2018-3639)
2018-05-21 07:00:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2018-05-22 00:00:00
qemu-kvm security update
2018-05-22 00:00:00
java-1.7.0-openjdk security update
2018-05-22 00:00:00
centos
centos
libvirt security update
2018-05-25 16:38:28
libvirt security update
2018-05-22 18:17:15
qemu security update
2018-05-22 18:17:51
redhat
redhat
(RHSA-2018:3399) Important: libvirt security update
2018-10-30 13:44:13
(RHSA-2018:3398) Important: libvirt security update
2018-10-30 12:56:53
(RHSA-2018:1826) Important: kernel security, bug fix, and enhancement update
2018-06-12 13:15:46
almalinux
almalinux
java-1.8.0-openjdk bug fix and enhancement update
2021-01-21 10:00:00
virtuozzo
virtuozzo
Important kernel security update: CVE-2018-3639; new kernel 2.6.32-042stab130.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2018-05-23 00:00:00
alpinelinux
alpinelinux
CVE-2018-3639
2018-05-22 12:29:00

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

7 High

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

0.003 Low

EPSS

Percentile

64.1%

JSON
Related for F5:K58304450
osv4openvas20cisco1nessus81debian3mscve2threatpost3qualysblog1ibm11suse4huawei1mageia1intel1hp1vmware2amazon4cloudfoundry1ubuntu4veracode2cve3prion2redhatcve2debiancve2f52ubuntucve1lenovo3cert1symantec1fedora3msrc1oraclelinux3centos4redhat21almalinux1virtuozzo1alpinelinux1