Lucene search
Huawei TechnologiesHUAWEI-SA-20180615-01-CPUHistoryJun 15, 2018 - 12:00 a.m.
Security Advisory - Side-Channel Vulnerability Variants 3a and 4
2018-06-1500:00:00
Huawei Technologies
www.huawei.com
93
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.003
Percentile
65.7%
Intel publicly disclosed new variants of the side-channel central processing unit (CPU) hardware vulnerabilities known as Spectre and Meltdown. These variants known as 3A （CVE-2018-3640）and 4 （CVE-2018-3639), local attackers may exploit these vulnerabilities to cause information leak on the affected system. (Vulnerability ID: HWPSIRT-2018-05139 and HWPSIRT-2018-05140)
Huawei has released software updates to fix these vulnerabilities in the following products.
This advisory will be updated as additional information becomes available, Please stay tuned. This advisory is available at the following link: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180615-01-cpu-en.
Affected configurations
Node
huawei1288h_v5_firmwareRange<V100R005C00SPC117
ORhuawei2288h_v5Range<V100R005C00SPC117
ORhuawei2488_v5Range<V100R005C00SPC500
ORhuawei2488h_v5Range<V100R005C00SPC203
ORhuawei5288_v3Range<V100R003C00SPC706
ORhuaweiar3600Matchv200r006c10
ORhuaweibh620_v2_firmwareRange<V100R002C00SPC302
ORhuaweibh621_v2_firmwareRange<V100R002C00SPC301
ORhuaweibh622_v2_firmwareRange<V100R002C00SPC309
ORhuaweibh640_v2_firmwareRange<V100R002C00SPC307
ORhuaweich121_firmwareMatchv100r001c00spc305
ORhuaweifusionserver_ch121_v3Range<V100R001C00SPC261
ORhuaweich121_v5_firmwareRange<V100R001C00SPC131
ORhuaweich121h_v3Range<V100R001C00SPC121
ORhuaweich121l_v3_firmwareRange<V100R001C00SPC161
ORhuaweich121l_v5Range<V100R001C00SPC131
ORhuaweich140Matchv100r001c00
ORhuaweich140_v3_firmwareRange<V100R001C00SPC181
ORhuaweich140l_v3_firmwareRange<V100R001C00SPC161
ORhuaweich220_firmwareMatchv100r001c00
ORhuaweifusionserver_ch220_v3Range<V100R001C00SPC261
ORhuaweich221Matchv100r001c00
ORhuaweich222_firmwareMatchv100r002c00spc305
ORhuaweifusionserver_ch222_v3Range<V100R001C00SPC261
ORhuaweich225_v5Range<V100R001C00SPC161
ORhuaweich226_v3_server_firmwareRange<V100R001C00SPC181
ORhuaweich240Matchv100r001c00
ORhuaweich242Matchv100r001c00
ORhuaweich242_v3_firmwareRange<V100R001C00SPC331
ORhuaweich242_v3_firmwareRange<V100R001C00SPC331
ORhuaweich242_v5Range<V100R001C00SPC121
ORhuaweifusioncomputeMatchv100r006c00
ORhuaweifusioncomputeMatchv100r006c10
ORhuaweifusioncubeMatchv100r002c02
ORhuaweifusioncubeMatchv100r002c30
ORhuaweifusioncubeMatchv100r002c70
ORhuaweifusionsphere_openstackMatchv100r005c00
ORhuaweifusionsphere_openstackMatchv100r005c10spc700
ORhuaweifusionsphere_openstackMatchv100r005c10spc701
ORhuaweifusionsphere_openstackMatchv100r006c00
ORhuaweifusionsphere_openstackMatchv100r006c10
ORhuaweifusionsphere_openstackMatchv1r6c00rc1spc1b060
ORhuaweimatebook_hz-w09Range<1.52
ORhuaweimatebook_hz-w19Range<1.52
ORhuaweimatebook_hz-w29Range<1.52
ORhuaweimatebook_b200Range<1.21
ORhuaweimatebook_d_pl-w09Range<1.21
ORhuaweimatebook_d_pl-w19Range<1.21
ORhuaweimatebook_d_pl-w29Range<1.21
ORhuaweimatebook_d_mrc-w10Range<1.19
ORhuaweimatebook_d_mrc-w50Range<1.19
ORhuaweimatebook_d_mrc-w60Range<1.19
ORhuaweimatebook_x_wt-w19Range<1.12
ORhuaweimatebook_hz-w29Range<1.12
ORhuaweihonor_magicbook_vlt-w50Range<1.12
ORhuaweihonor_magicbook_vlt-w60Range<1.12
ORhuaweimanageoneMatch3.0.5
ORhuaweimanageoneMatch3.0.7
ORhuaweimanageoneMatch3.0.8
ORhuaweimanageoneMatch3.0.9
ORhuaweioceanstor_18500_firmwareMatchv100r001c30spc300
ORhuaweioceanstor_18500_firmwareMatchv300r003c00
ORhuaweioceanstor_18500_firmwareMatchv300r006c10spc100
ORhuawei18500f_v3Matchv300r006c10spc100
ORhuaweioceanstor_18800_firmwareMatchv100r001c30spc300
ORhuaweioceanstor_18800_firmwareMatchv300r006c10spc100
ORhuaweioceanstor_18800f_firmwareMatchv100r001c30spc300
ORhuaweioceanstor_18800f_firmwareMatchv300r006c10spc100
ORhuaweioceanstor_5300_firmwareMatchv300r006c10spc100
ORhuaweioceanstor_5500_firmwareMatchv300r006c10spc100
ORhuaweioceanstor_5600_v3_firmwareMatchv300r006c10spc100
ORhuaweioceanstor_5800_v3Matchv300r006c10spc100
ORhuaweioceanstor_5800_v3Matchv300r006c10spc100
ORhuaweioceanstor_hvs85t_firmwareMatchv100r001c00
ORhuaweioceanstor_hvs88t_firmwareMatchv100r001c00
ORhuaweioceanstor_replicationdirectorMatchv200r001c00
ORhuaweirh1288_v2_firmwareRange<V100R002C00SPC640
ORhuaweirh1288_v3_firmwareRange<V100R003C00SPC706
ORhuaweifusionserver_rh1288a_v2Range<V100R002C00SPC710
ORhuaweirh2265_v2_firmwareRange<V100R002C00SPC510
ORhuaweirh2268_v2_firmwareRange<V100R002C00SPC609
ORhuaweirh2285_v2_firmwareRange<V100R002C00SPC511
ORhuaweirh2285h_v2_firmwareRange<V100R002C00SPC511
ORhuaweirh2288_v2_firmwareRange<V100R002C00SPC610
ORhuaweifusionserver_rh2288_v3Range<V100R003C00SPC706
ORhuaweirh2288a_v2_firmwareRange<V100R002C00SPC710
ORhuaweirh2288e_v2_firmwareRange<V100R002C00SPC302
ORhuaweirh2288h_v2_firmwareRange<V100R002C00SPC620
ORhuaweifusionserver_rh2288h_v3Range<V100R003C00SPC706
ORhuaweirh2485_v2_firmwareRange<V100R002C00SPC713
ORhuaweirh5885_v2_firmwareRange<V100R001C02SPC306
ORhuaweirh5885_v2_firmwareRange<V100R001C02SPC306
ORhuaweirh5885_v3_firmwareRange<V100R003C01SPC127
ORhuaweirh5885_v3_firmwareRange<V100R003C10SPC121
ORhuaweitecal_rh5885h_v3_firmwareRange<V100R003C00SPC218
ORhuaweitecal_rh5885h_v3_firmwareRange<V100R003C00SPC218
ORhuaweitecal_rh5885h_v3_firmwareRange<V100R003C10SPC120
ORhuaweifusionserver_rh8100_v3Range<V100R003C00SPC229
ORhuaweifusionserver_rh8100_v3Range<V100R003C00SPC229
ORhuaweirse6500Matchv500r002c00
ORhuaweismc2.0Matchv100r003c10
ORhuaweismc2.0Matchv500r002c00
ORhuaweitaishan200_2180k\[1\]Range<1.1.0.SPC133
ORhuaweitaishan200_2280\[1\]Range<1.0.0.SPC133
ORhuaweitaishan200_2280k\[1\]Range<1.1.0.SPC133
ORhuaweitaishan200_5280\[1\]Range<1.2.0.SPC133
ORhuaweivp9630Matchv600r006c10
ORhuaweivp9660Matchv600r006c10
ORhuaweixh310_v3_firmwareRange<V100R003C00SPC706
ORhuaweixh321_v3_firmwareRange<V100R003C00SPC706
ORhuaweixh620_v3_firmwareRange<V100R003C00SPC706
ORhuaweixh622_v3_server_firmwareRange<V100R003C00SPC706
ORhuaweixh628_v3_firmwareRange<V100R003C00SPC706
ORhuaweiecns280Matchv100r005c00
ORhuaweiese620x_vessMatchv100r001c00
ORhuaweiese620x_vessMatchv100r001c10
ORhuaweiimanager_netecoMatchv600r007c00
ORhuaweiimanager_netecoMatchv600r007c10
ORhuaweiimanager_netecoMatchv600r007c11
ORhuaweiimanager_netecoMatchv600r007c12
ORhuaweiimanager_netecoMatchv600r007c20
ORhuaweiimanager_netecoMatchv600r007c40
ORhuaweiimanager_netecoMatchv600r008c00
ORhuaweiimanager_netecoMatchv600r008c10
ORhuaweiimanager_netecoMatchv600r008c20
ORhuaweiimanager_netecoMatchv600r008c30
ORhuaweiimanager_neteco_6000Matchv600r007c40
ORhuaweiimanager_neteco_6000Matchv600r007c60
ORhuaweiimanager_neteco_6000Matchv600r007c80
ORhuaweiimanager_neteco_6000Matchv600r007c90
ORhuaweiimanager_neteco_6000Matchv600r008c00
Related
nessus
nessus
debian
debian
[SECURITY] [DSA 4273-2] intel-microcode security update
2018-09-16 20:43:40
[SECURITY] [DLA 1446-1] intel-microcode security update
2018-07-27 05:08:13
[SECURITY] [DSA 4273-1] intel-microcode security update
2018-08-16 20:43:21
openvas
openvas
Debian: Security Advisory (DLA-1446-1)
2018-07-26 00:00:00
openSUSE: Security Advisory for ucode-intel (openSUSE-SU-2018:1904-1)
2018-07-07 00:00:00
suse
suse
Security update for ucode-intel (important)
2018-07-06 21:08:25
Security update to ucode-intel (important)
2018-08-17 12:10:34
Security update for libvirt (moderate)
2018-08-13 12:07:25
osv
osv
intel-microcode - security update
2018-09-16 00:00:00
intel-microcode - security update
2018-08-16 00:00:00
intel-microcode - security update
2018-07-27 00:00:00
threatpost
threatpost
Intel Responds to Spectre-Like Flaw In CPUs
2018-05-22 14:03:08
Intel’s ‘Virtual Fences’ Spectre Fix Won’t Protect Against Variant 4
2018-05-24 15:18:03
cisco
cisco
CPU Side-Channel Information Disclosure Vulnerabilities: May 2018
2018-05-22 01:00:00
mscve
mscve
Microsoft Guidance for Speculative Store Bypass
2018-05-21 07:00:00
Microsoft Guidance for Rogue System Register Read
2018-05-21 07:00:00
mageia
mageia
Updated microcode packages fix security vulnerability
2018-07-25 11:24:17
Updated libvirt packages fix security vulnerability
2018-05-31 23:34:08
qualysblog
qualysblog
All Hands Memo to Owners of Home / Small Office Routers: Reboot Them!
2018-05-30 14:33:42
hp
hp
HPSBHF03584 rev. 8 - Derivative Side-Channel Analysis Method
2018-05-04 00:00:00
vmware
vmware
intel
intel
Q2 2018 Speculative Execution Side Channel Update
2021-05-11 00:00:00
cloudfoundry
cloudfoundry
USN-3756-1: Intel Microcode vulnerabilities | Cloud Foundry
2018-09-11 00:00:00
f5
f5
K58304450 : Multiple Intel Processor vulnerabilities: Spectre-NG
2018-05-30 00:00:00
K51801290 : RSRE Variant 3a vulnerability CVE-2018-3640
2018-07-03 00:00:00
K29146534 : SSB Variant 4 vulnerability CVE-2018-3639
2018-07-10 00:00:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2018-08-27 00:00:00
Linux kernel vulnerability
2018-05-22 00:00:00
QEMU update
2018-05-21 00:00:00
cve
cve
CVE-2018-3640
2018-05-22 12:29:00
cvelist
cvelist
CVE-2018-3640
2018-05-21 00:00:00
redhatcve
redhatcve
CVE-2018-3640
2018-05-21 21:19:45
prion
prion
Design/Logic Flaw
2018-05-22 12:29:00
ubuntucve
ubuntucve
CVE-2018-3640
2018-05-21 00:00:00
CVE-2018-3639
2018-05-21 00:00:00
nvd
nvd
CVE-2018-3640
2018-05-22 12:29:00
debiancve
debiancve
CVE-2018-3640
2018-05-22 12:29:00
CVE-2018-3639
2018-05-22 12:29:00
lenovo
lenovo
Speculative Execution Side Channel Variants 4 and 3a - US
2018-09-13 11:41:00
Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US
2018-10-16 12:02:18
Intel Software Guard Extensions (SGX) Vulnerabilities - US
2018-08-22 18:58:00
cert
cert
fedora
fedora
[SECURITY] Fedora 29 Update: java-1.8.0-openjdk-1.8.0.201.b09-2.fc29
2019-02-11 01:57:50
[SECURITY] Fedora 29 Update: java-1.8.0-openjdk-1.8.0.212.b04-0.fc29
2019-05-03 03:43:22
[SECURITY] Fedora 28 Update: java-1.8.0-openjdk-1.8.0.201.b09-2.fc28
2019-02-25 01:34:09
oraclelinux
oraclelinux
libvirt security update
2018-05-22 00:00:00
qemu-kvm security update
2018-05-22 00:00:00
java-1.7.0-openjdk security update
2018-05-22 00:00:00
redhat
redhat
(RHSA-2018:1675) Important: vdsm security update
2018-05-21 23:04:07
(RHSA-2018:1659) Important: qemu-kvm security update
2018-05-21 22:58:30
(RHSA-2018:1690) Important: vdsm security update
2018-05-22 08:43:58
virtuozzo
virtuozzo
citrix
citrix
CVE-2018-3639 - Citrix XenServer Security Update
2018-05-22 04:00:00
centos
centos
java security update
2018-05-22 15:32:03
java security update
2018-05-22 15:30:51
kernel, perf, python security update
2018-05-22 15:35:50
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2018-07-27 21:57:40
almalinux
almalinux
java-1.8.0-openjdk bug fix and enhancement update
2021-01-21 10:00:00
alpinelinux
alpinelinux
CVE-2018-3639
2018-05-22 12:29:00
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.003
Percentile
65.7%
Related for HUAWEI-SA-20180615-01-CPU