Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2018-4210
HistorySep 06, 2018 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2018-09-0600:00:00
linux.oracle.com
29

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

54.4%

JSON

[4.1.12-124.19.1]

  • x86/entry/64: Ensure %ebx handling correct in xen_failsafe_callback (George Kennedy) [Orabug: 28402927] {CVE-2018-14678}
  • x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen) [Orabug: 28488808] {CVE-2018-3620}
  • x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Vlastimil Babka) [Orabug: 28488808] {CVE-2018-3620}
  • x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Vlastimil Babka) [Orabug: 28488808] {CVE-2018-3620}
  • x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka) [Orabug: 28488808] {CVE-2018-3620}
  • x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson) [Orabug: 28488808] {CVE-2018-3620}
  • x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Guenter Roeck) [Orabug: 28488808] {CVE-2018-3620}
  • x86/spectre: Add missing family 6 check to microcode check (Andi Kleen) [Orabug: 28488808] {CVE-2018-3620}
  • KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Thomas Gleixner) [Orabug: 28488808] {CVE-2018-3646}
  • x86/microcode: Allow late microcode loading with SMT disabled (Josh Poimboeuf) [Orabug: 28488808] {CVE-2018-3620}
  • x86/microcode: Do not upload microcode if CPUs are offline (Ashok Raj) [Orabug: 28488808] {CVE-2018-3620}
OSVersionArchitecturePackageVersionFilename
oracle linux6srckernel-uek< 4.1.12-124.19.1.el6uekkernel-uek-4.1.12-124.19.1.el6uek.src.rpm
oracle linux6x86_64kernel-uek< 4.1.12-124.19.1.el6uekkernel-uek-4.1.12-124.19.1.el6uek.x86_64.rpm
oracle linux6x86_64kernel-uek-debug< 4.1.12-124.19.1.el6uekkernel-uek-debug-4.1.12-124.19.1.el6uek.x86_64.rpm
oracle linux6x86_64kernel-uek-debug-devel< 4.1.12-124.19.1.el6uekkernel-uek-debug-devel-4.1.12-124.19.1.el6uek.x86_64.rpm
oracle linux6x86_64kernel-uek-devel< 4.1.12-124.19.1.el6uekkernel-uek-devel-4.1.12-124.19.1.el6uek.x86_64.rpm
oracle linux6noarchkernel-uek-doc< 4.1.12-124.19.1.el6uekkernel-uek-doc-4.1.12-124.19.1.el6uek.noarch.rpm
oracle linux6noarchkernel-uek-firmware< 4.1.12-124.19.1.el6uekkernel-uek-firmware-4.1.12-124.19.1.el6uek.noarch.rpm
oracle linux7srckernel-uek< 4.1.12-124.19.1.el7uekkernel-uek-4.1.12-124.19.1.el7uek.src.rpm
oracle linux7x86_64kernel-uek< 4.1.12-124.19.1.el7uekkernel-uek-4.1.12-124.19.1.el7uek.x86_64.rpm
oracle linux7x86_64kernel-uek-debug< 4.1.12-124.19.1.el7uekkernel-uek-debug-4.1.12-124.19.1.el7uek.x86_64.rpm
Rows per page:
1-10 of 141

Related

nessus 69
fedora 4
osv 5
redhatcve 3
redhat 13
freebsd 1
ibm 9
debian 4
openvas 35
ubuntu 9
freebsd_advisory 1
xen 2
f5 4
intel 1
thn 1
mageia 4
cloudfoundry 2
msrc 2
lenovo 2
threatpost 2
cisco 1
oraclelinux 3
cert 1
prion 3
cve 2
ubuntucve 2
amazon 2
huawei 1
debiancve 3
photon 1
citrix 1
vmware 3
veracode 2
suse 1
nessus
nessus
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4210)
2018-09-10 00:00:00
OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0254) (Foreshadow)
2018-09-10 00:00:00
OracleVM 3.4 : xen (OVMSA-2018-0246) (Foreshadow)
2018-08-16 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: kernel-headers-4.17.14-3.fc28
2018-08-16 08:08:45
[SECURITY] Fedora 27 Update: kernel-headers-4.17.14-3.fc27
2018-08-16 07:24:56
[SECURITY] Fedora 27 Update: kernel-headers-4.17.11-1.fc27
2018-08-03 19:58:29
osv
osv
linux-4.9 - security update
2018-08-28 00:00:00
linux - security update
2018-08-20 00:00:00
xen - security update
2018-08-16 00:00:00
redhatcve
redhatcve
CVE-2018-3646
2021-01-24 22:39:20
CVE-2018-14678
2018-07-30 02:19:21
CVE-2018-3620
2021-03-20 21:41:50
redhat
redhat
(RHSA-2018:2404) Important: rhev-hypervisor7 security update
2018-08-15 15:14:04
(RHSA-2018:2388) Important: kernel security and bug fix update
2018-08-14 18:50:39
(RHSA-2018:2389) Important: kernel security update
2018-08-14 18:50:42
freebsd
freebsd
FreeBSD -- L1 Terminal Fault (L1TF) Kernel Information Disclosure
2018-08-14 00:00:00
ibm
ibm
Security Bulletin: L1TF - L1 Terminal Fault Attack affect IBM Netezza Host Management
2019-10-18 03:36:34
Security Bulletin: IBM Security Guardium is affected by a Foreshadow Spectre Variant vulnerability
2019-02-07 19:55:01
Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private Cloud Foundry (CVE-2018-3646, CVE-2018-3615, CVE-2018-3620)
2018-11-19 15:40:01
debian
debian
[SECURITY] [DSA 4279-1] linux security update
2018-08-20 11:44:32
[SECURITY] [DLA 1481-1] linux-4.9 security update
2018-08-28 17:10:51
[SECURITY] [DSA 4274-1] xen security update
2018-08-16 20:47:43
openvas
openvas
Ubuntu: Security Advisory (USN-3823-1)
2022-08-26 00:00:00
Fedora Update for kernel-headers FEDORA-2018-1c80fea1cd
2018-08-19 00:00:00
Debian: Security Advisory (DLA-1481-1)
2018-09-02 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2018-11-15 00:00:00
Linux kernel vulnerabilities
2018-08-14 00:00:00
Linux kernel (HWE) vulnerabilities
2018-08-14 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-18:09.l1tf
2018-08-14 00:00:00
xen
xen
L1 Terminal Fault speculative side channel
2018-08-14 17:15:00
Linux: Uninitialized state in x86 PV failsafe callback path
2018-07-25 16:39:00
f5
f5
K70675920 : August 2018 Intel security vulnerability announcement
2018-08-15 00:00:00
K05510205 : Linux kernel vulnerability CVE-2018-14678
2019-01-17 00:00:00
K95275140 : OS Kernel and SMM mode L1 Terminal Fault vulnerability CVE-2018-3620
2018-10-05 00:00:00
intel
intel
Q3 2018 Speculative Execution Side Channel Update
2021-05-11 00:00:00
thn
thn
Foreshadow Attacks — 3 New Intel CPU Side-Channel Flaws Discovered
2018-08-15 07:40:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2018-08-19 14:24:54
Updated microcode packages fix security vulnerabilities
2018-08-19 14:24:54
Updated kernel packages fix security vulnerabilities
2018-08-19 14:24:54
cloudfoundry
cloudfoundry
USN-3740-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2018-09-11 00:00:00
USN-3741-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-08-17 00:00:00
msrc
msrc
Analysis and mitigation of L1 Terminal Fault (L1TF)
2018-08-13 07:00:00
Analysis and mitigation of L1 Terminal Fault (L1TF)
2018-08-13 07:00:00
lenovo
lenovo
L1 Terminal Fault Side Channel Vulnerabilities - Lenovo Support NL
2018-08-16 14:27:00
L1 Terminal Fault Side Channel Vulnerabilities - US
2018-08-16 14:27:00
threatpost
threatpost
Intel CPUs Undermined By Fresh Speculative Execution Flaws
2018-08-14 19:24:34
New Ninth-Gen Intel CPUs Shield Against Some Spectre, Meltdown Variants
2018-10-09 19:37:35
cisco
cisco
CPU Side-Channel Information Disclosure Vulnerabilities: August 2018
2018-08-14 17:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2018-10-10 00:00:00
Unbreakable Enterprise kernel security update
2018-08-14 00:00:00
Unbreakable Enterprise kernel security update
2018-09-13 00:00:00
cert
cert
Intel processors are vulnerable to a speculative execution side-channel attack called L1 Terminal Fault (L1TF)
2018-08-15 00:00:00
prion
prion
Denial of service
2018-07-28 18:29:00
Information disclosure
2018-08-14 19:29:00
Information disclosure
2018-08-14 19:29:00
cve
cve
CVE-2018-14678
2018-07-28 18:29:00
CVE-2018-3620
2018-08-14 19:29:00
ubuntucve
ubuntucve
CVE-2018-14678
2018-07-28 00:00:00
CVE-2018-3620
2018-08-14 00:00:00
amazon
amazon
Critical: kernel
2018-08-10 22:53:00
Critical: kernel
2018-08-10 20:26:00
huawei
huawei
Security Advisory - CPU Side Channel Vulnerability "L1TF"
2018-08-15 00:00:00
debiancve
debiancve
CVE-2018-14678
2018-07-28 18:29:00
CVE-2018-3620
2018-08-14 19:29:00
CVE-2018-3646
2018-08-14 19:29:00
photon
photon
Critical Photon OS Security Update - PHSA-2018-0088
2018-08-28 00:00:00
citrix
citrix
XenServer Multiple Security Updates
2018-08-14 04:00:00
vmware
vmware
Operating System-Specific Mitigations address L1 Terminal Fault - OS vulnerability in VMware Virtual Appliances.
2018-08-14 00:00:00
Operating System-Specific Mitigations address L1 Terminal Fault - OS vulnerability in VMware Virtual Appliances.
2018-08-14 00:00:00
VMware vSphere, Workstation, and Fusion updates enable Hypervisor-Specific Mitigations for L1 Terminal Fault - VMM vulnerability.
2018-08-14 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 09:24:09
Information Disclosure
2019-05-16 03:11:25
suse
suse
Security update for xen (important)
2018-08-19 15:09:36

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

54.4%

JSON
Related for ELSA-2018-4210
nessus69fedora4osv5redhatcve3redhat13freebsd1ibm9debian4openvas35ubuntu9freebsd_advisory1xen2f54intel1thn1mageia4cloudfoundry2msrc2lenovo2threatpost2cisco1oraclelinux3cert1prion3cve2ubuntucve2amazon2huawei1debiancve3photon1citrix1vmware3veracode2suse1