- Home
- CVEs with nessus.description==According to the versions of the kernel packages installed, the
EulerOS Virtualization installation on the remote host is affected by
the following vulnerabilities :
- An industry-wide issue was found in the way many modern
microprocessor designs have implemented speculative
execution of Load & Store instructions (a commonly used
performance optimization). It relies on the presence of
a precisely-defined instruction sequence in the
privileged code as well as the fact that memory read
from address to which a recent memory write has
occurred may see an older value and subsequently cause
an update into the microprocessor's data cache even for
speculatively executed instructions that never actually
commit (retire). As a result, an unprivileged attacker
could use this flaw to read privileged memory by
conducting targeted cache side-channel
attacks.(CVE-2018-3639)
- A statement in the System Programming Guide of the
Intel 64 and IA-32 Architectures Software Developer's
Manual (SDM) was mishandled in the development of some
or all operating-system kernels, resulting in
unexpected behavior for #DB exceptions that are
deferred by MOV SS or POP SS, as demonstrated by (for
example) privilege escalation in Windows, macOS, some
Xen configurations, or FreeBSD, or a Linux kernel
crash. The MOV to SS and POP SS instructions inhibit
interrupts (including NMIs), data breakpoints, and
single step trap exceptions until the instruction
boundary following the next instruction (SDM Vol. 3A;
section 6.8.3). (The inhibited data breakpoints are
those on memory accessed by the MOV to SS or POP to SS
instruction itself.) Note that debug exceptions are not
inhibited by the interrupt enable (EFLAGS.IF) system
flag (SDM Vol. 3A; section 2.3). If the instruction
following the MOV to SS or POP to SS instruction is an
instruction like SYSCALL, SYSENTER, INT 3, etc. that
transfers control to the operating system at CPL < 3,
the debug exception is delivered after the transfer to
CPL < 3 is complete. OS kernels may not expect this
order of events and may therefore experience unexpected
behavior when it occurs.(CVE-2018-8897)
Note that Tenable Network Security has extracted the preceding
description block directly from the EulerOS security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top