Security Bulletin: This Power System update is being released to address multiple CVEs for vTPM1.2

Summary

This update addresses multiple CVEs that impacts any VM configured with a virtual trusted platform module (vTPM) version 1.2

Vulnerability Details

CVEID:CVE-2018-5407
**DESCRIPTION:**Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain sensitive information, caused by executing engine sharing on Simultaneous Multithreading (SMT) architecture. By using the PortSmash new side-channel attack, an attacker could run a malicious process next to legitimate processes using the architecture’s parallel thread running capabilities to leak encrypted data from the CPU’s internal processes. Note: This vulnerability is known as PortSmash.
CVSS Base score: 5.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/152484 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)

CVEID:CVE-2009-3245
**DESCRIPTION:**An unspecified error in OpenSSL related to a missing check for a NULL return value from bn_wexpand function calls has an unknown impact and attack vector.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/56751 for the current score.
CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVEID:CVE-2014-0076
**DESCRIPTION:**OpenSSL could allow a local attacker to obtain sensitive information, caused by an implementation error in ECDSA (Elliptic Curve Digital Signature Algorithm). An attacker could exploit this vulnerability using the FLUSH+RELOAD cache side-channel attack to recover ECDSA nonces.
CVSS Base score: 2.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/91990 for the current score.
CVSS Vector: (AV:L/AC:L/Au:N/C:P/I:N/A:N)

CVEID:CVE-2022-0778
**DESCRIPTION:**OpenSSL is vulnerable to a denial of service, caused by a flaw in the BN_mod_sqrt() function when parsing certificates. By using a specially-crafted certificate with invalid explicit curve parameters, a remote attacker could exploit this vulnerability to cause an infinite loop, and results in a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/221911 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

Customers with the products below should install FW950.60(950_111), FW1010.40(1010_146), FW1020.20(1020_089) or newer to remediate this concern.

Power 9

1. IBM Power System S922 (9009-22A, 9009-22G)
2. IBM Power System H922 (9223-22H, 9223-22S)
3. IBM Power System S914 (9009-41A, 9009-41G)
4. IBM Power System S924 (9009-42A, 9009-42G)
5. IBM Power System H924 (9223-42H, 9223-42S)
6. IBM Power System E950 (9040-MR9)
7. IBM Power System E980 (9080-M9S)

Power 10

1. IBM Power System S1022 (9105-22A)
2. IBM Power System S1024 (9105-42A)
3. IBM Power System S1022S (9105-22B)
4. IBM Power System S1014 (9105-41B)
5. IBM Power System L1022 (9786-22H)
6. IBM Power System L1024 (9786-42H)
7. IBM Power System E1050 (9043-MRX)
8. IBM Power System E1080 (9080-HEX)

Workarounds and Mitigations

None