Vulnerability-Lookup

RHSA-2018_2384

Vulnerability from csaf_redhat - Published: 2018-08-14 18:49 - Updated: 2024-11-15 03:05

Summary

Red Hat Security Advisory: kernel security and bug fix update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of instructions (a commonly used performance optimisation) in combination with handling of page-faults caused by terminated virtual to physical address resolving process. As a result, an unprivileged attacker could use this flaw to read privileged memory of the kernel or other processes and/or cross guest/host boundaries to read host memory by conducting targeted cache side-channel attacks. (CVE-2018-3620, CVE-2018-3646) * An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions past bounds check. The flaw relies on the presence of a precisely-defined instruction sequence in the privileged code and the fact that memory writes occur to an address which depends on the untrusted value. Such writes cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to influence speculative execution and/or read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3693) * A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() functions by sending specially modified packets within ongoing TCP sessions which could lead to a CPU saturation and hence a denial of service on the system. Maintaining the denial of service condition requires continuous two-way TCP sessions to a reachable open port, thus the attacks cannot be performed using spoofed IP addresses. (CVE-2018-5390) * kernel: crypto: privilege escalation in skcipher_recvmsg function (CVE-2017-13215) * kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact (CVE-2018-10675) * kernel: race condition in snd_seq_write() may lead to UAF or OOB access (CVE-2018-7566) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank Intel OSSIRT (Intel.com) for reporting CVE-2018-3620 and CVE-2018-3646; Vladimir Kiriansky (MIT) and Carl Waldspurger (Carl Waldspurger Consulting) for reporting CVE-2018-3693; and Juha-Matti Tilli (Aalto University, Department of Communications and Networking and Nokia Bell Labs) for reporting CVE-2018-5390. Bug Fix(es): These updated kernel packages include also numerous bug fixes. Space precludes documenting all of the bug fixes in this advisory. See the descriptions in the related Knowledge Article: https://access.redhat.com/articles/3527791

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2017-13215

A flaw was found in the Linux kernel's skcipher component, which affects the skcipher_recvmsg function. Attackers using a specific input can lead to a privilege escalation.

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-287 - Improper Authentication

Affected products

Fixed 680 products

Product	Version	Remediation
Unresolved product id: 7Client-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-Alt-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-abi-whitelists-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-bootwrapper-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debug-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-common-ppc64-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-common-ppc64le-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-common-s390x-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-debuginfo-common-x86_64-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-doc-0:3.10.0-862.11.6.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-headers-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-kdump-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-kdump-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-kdump-devel-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-libs-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:kernel-tools-libs-devel-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.5.Z:python-perf-debuginfo-0:3.10.0-862.11.6.el7.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2018-3620

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of instructions (a commonly used performance optimization) in combination with handling of page-faults caused by terminated virtual to physical address resolving process. As a result, an unprivileged attacker could use this flaw to read privileged memory of the kernel or other processes and/or cross guest/host boundaries to read host memory by conducting targeted cache side-channel attacks.

5.6 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 680 products, the same list as for CVE-2017-13215

Threats

Impact Important

CVE-2018-3646

5.6 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 680 products, the same list as for CVE-2017-13215

Threats

Impact Important

CVE-2018-3693

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions past bounds check. The flaw relies on the presence of a precisely-defined instruction sequence in the privileged code and the fact that memory writes occur to an address which depends on the untrusted value. Such writes cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to influence speculative execution and/or read privileged memory by conducting targeted cache side-channel attacks.

5.9 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 680 products, the same list as for CVE-2017-13215

Threats

Impact Important

CVE-2018-5390

A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() functions by sending specially modified packets within ongoing TCP sessions which could lead to a CPU saturation and hence a denial of service on the system. Maintaining the denial of service condition requires continuous two-way TCP sessions to a reachable open port, thus the attacks cannot be performed using spoofed IP addresses.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 680 products, the same list as for CVE-2017-13215

Threats

Impact Important

CVE-2018-7566

ALSA sequencer core initializes the event pool on demand by invoking snd_seq_pool_init() when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access.

6.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 680 products, the same list as for CVE-2017-13215

Threats

Impact Moderate

CVE-2018-10675

The do_get_mempolicy() function in mm/mempolicy.c in the Linux kernel allows local users to hit a use-after-free bug via crafted system calls and thus cause a denial of service (DoS) or possibly have unspecified other impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 680 products, the same list as for CVE-2017-13215

Threats

Impact Important

References

51 references

URL	Category
https://access.redhat.com/errata/RHSA-2018:2384	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/vulnerabilities/L1TF	external
https://access.redhat.com/articles/3527791	external
https://bugzilla.redhat.com/show_bug.cgi?id=1535173	external
https://bugzilla.redhat.com/show_bug.cgi?id=1550142	external
https://bugzilla.redhat.com/show_bug.cgi?id=1575065	external
https://bugzilla.redhat.com/show_bug.cgi?id=1581650	external
https://bugzilla.redhat.com/show_bug.cgi?id=1585005	external
https://bugzilla.redhat.com/show_bug.cgi?id=1601704	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2017-13215	self
https://bugzilla.redhat.com/show_bug.cgi?id=1535173	external
https://www.cve.org/CVERecord?id=CVE-2017-13215	external
https://nvd.nist.gov/vuln/detail/CVE-2017-13215	external
https://access.redhat.com/security/cve/CVE-2018-3620	self
https://bugzilla.redhat.com/show_bug.cgi?id=1585005	external
https://www.cve.org/CVERecord?id=CVE-2018-3620	external
https://nvd.nist.gov/vuln/detail/CVE-2018-3620	external
https://access.redhat.com/articles/3562741	external
https://access.redhat.com/security/vulnerabilities/L1TF	external
https://foreshadowattack.eu/	external
https://software.intel.com/security-software-guid…	external
https://www.redhat.com/en/blog/deeper-look-l1-ter…	external
https://www.redhat.com/en/blog/understanding-l1-t…	external
https://access.redhat.com/security/cve/CVE-2018-3646	self
https://www.cve.org/CVERecord?id=CVE-2018-3646	external
https://nvd.nist.gov/vuln/detail/CVE-2018-3646	external
https://access.redhat.com/security/cve/CVE-2018-3693	self
https://bugzilla.redhat.com/show_bug.cgi?id=1581650	external
https://www.cve.org/CVERecord?id=CVE-2018-3693	external
https://nvd.nist.gov/vuln/detail/CVE-2018-3693	external
https://01.org/security/advisories/intel-oss-10002	external
https://access.redhat.com/solutions/3523601	external
https://people.csail.mit.edu/vlk/spectre11.pdf	external
https://software.intel.com/sites/default/files/ma…	external
https://access.redhat.com/security/cve/CVE-2018-5390	self
https://bugzilla.redhat.com/show_bug.cgi?id=1601704	external
https://www.cve.org/CVERecord?id=CVE-2018-5390	external
https://nvd.nist.gov/vuln/detail/CVE-2018-5390	external
https://access.redhat.com/articles/3553061	external
https://www.kb.cert.org/vuls/id/962459	external
https://www.spinics.net/lists/netdev/msg514742.html	external
https://access.redhat.com/security/cve/CVE-2018-7566	self
https://bugzilla.redhat.com/show_bug.cgi?id=1550142	external
https://www.cve.org/CVERecord?id=CVE-2018-7566	external
https://nvd.nist.gov/vuln/detail/CVE-2018-7566	external
https://access.redhat.com/security/cve/CVE-2018-10675	self
https://bugzilla.redhat.com/show_bug.cgi?id=1575065	external
https://www.cve.org/CVERecord?id=CVE-2018-10675	external
https://nvd.nist.gov/vuln/detail/CVE-2018-10675	external

Acknowledgments

Intel.com Intel OSSIRT

Carl Waldspurger Consulting Carl Waldspurger

MIT Vladimir Kiriansky

Aalto University - Department of Communications and Networking and Nokia Bell Labs Juha-Matti Tilli

JSON

To clipboard

Loading 1.5 MB of JSON…

CVE-2017-13215 (GCVE-0-2017-13215)

Vulnerability from cvelistv5 – Published: 2018-01-12 23:00 – Updated: 2024-09-16 17:59

Summary

A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel.

Severity

No CVSS data available.

CWE

Elevation of privilege

Assigner

google_android Google root

References

7 references

URL	Tags
http://www.securityfocus.com/bid/102390	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://source.android.com/security/bulletin/2018-01-01	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040106	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2019:1170	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1190	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Google Inc.	Android	Affected: Android kernel

Date Public

2018-01-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:58:12.703Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "102390",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102390"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2018-01-01"
          },
          {
            "name": "1040106",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040106"
          },
          {
            "name": "RHSA-2019:1170",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1170"
          },
          {
            "name": "RHSA-2019:1190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1190"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "Google Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "datePublic": "2018-01-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-05-14T22:06:08.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "name": "102390",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102390"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2018-01-01"
        },
        {
          "name": "1040106",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040106"
        },
        {
          "name": "RHSA-2019:1170",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1170"
        },
        {
          "name": "RHSA-2019:1190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1190"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "DATE_PUBLIC": "2018-01-02T00:00:00",
          "ID": "CVE-2017-13215",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android kernel"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Google Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "102390",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102390"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "https://source.android.com/security/bulletin/2018-01-01",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2018-01-01"
            },
            {
              "name": "1040106",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040106"
            },
            {
              "name": "RHSA-2019:1170",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1170"
            },
            {
              "name": "RHSA-2019:1190",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1190"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2017-13215",
    "datePublished": "2018-01-12T23:00:00.000Z",
    "dateReserved": "2017-08-23T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:59:42.805Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-10675 (GCVE-0-2018-10675)

Vulnerability from cvelistv5 – Published: 2018-05-02 18:00 – Updated: 2024-08-05 07:46

Summary

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:3540	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2785	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2164	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2925	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2933	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3754-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:3590	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/104093	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:2924	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3586	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2791	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/73223e4e…	x_refsource_MISC
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
https://www.kernel.org/pub/linux/kernel/v4.x/Chan…	x_refsource_MISC

Date Public

2018-05-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:46:46.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3540",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3540"
          },
          {
            "name": "RHSA-2018:2785",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2785"
          },
          {
            "name": "RHSA-2018:2164",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2164"
          },
          {
            "name": "RHSA-2018:2925",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2925"
          },
          {
            "name": "RHSA-2018:2933",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2933"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "name": "USN-3754-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3754-1/"
          },
          {
            "name": "RHSA-2018:3590",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3590"
          },
          {
            "name": "104093",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104093"
          },
          {
            "name": "RHSA-2018:2924",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2924"
          },
          {
            "name": "RHSA-2018:3586",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3586"
          },
          {
            "name": "RHSA-2018:2791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2791"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e4e2e3867ebf033a5a8eb2e5df0158ccc99"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-05-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:56.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:3540",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3540"
        },
        {
          "name": "RHSA-2018:2785",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2785"
        },
        {
          "name": "RHSA-2018:2164",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2164"
        },
        {
          "name": "RHSA-2018:2925",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2925"
        },
        {
          "name": "RHSA-2018:2933",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2933"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "name": "USN-3754-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3754-1/"
        },
        {
          "name": "RHSA-2018:3590",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3590"
        },
        {
          "name": "104093",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104093"
        },
        {
          "name": "RHSA-2018:2924",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2924"
        },
        {
          "name": "RHSA-2018:3586",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3586"
        },
        {
          "name": "RHSA-2018:2791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2791"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e4e2e3867ebf033a5a8eb2e5df0158ccc99"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-10675",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3540",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3540"
            },
            {
              "name": "RHSA-2018:2785",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2785"
            },
            {
              "name": "RHSA-2018:2164",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2164"
            },
            {
              "name": "RHSA-2018:2925",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2925"
            },
            {
              "name": "RHSA-2018:2933",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2933"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "USN-3754-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3754-1/"
            },
            {
              "name": "RHSA-2018:3590",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3590"
            },
            {
              "name": "104093",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104093"
            },
            {
              "name": "RHSA-2018:2924",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2924"
            },
            {
              "name": "RHSA-2018:3586",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3586"
            },
            {
              "name": "RHSA-2018:2791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2791"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e4e2e3867ebf033a5a8eb2e5df0158ccc99",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e4e2e3867ebf033a5a8eb2e5df0158ccc99"
            },
            {
              "name": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9",
              "refsource": "MISC",
              "url": "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-10675",
    "datePublished": "2018-05-02T18:00:00.000Z",
    "dateReserved": "2018-05-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T07:46:46.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-3620 (GCVE-0-2018-3620)

Vulnerability from cvelistv5 – Published: 2018-08-14 19:00 – Updated: 2026-05-29 20:11

Summary

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 20:11 UTC

CWE

Information Disclosure
CWE-203 - Observable Discrepancy

Assigner

intel mitre root

References

53 references

URL	Tags
https://www.kb.cert.org/vuls/id/982149	third-party-advisoryx_refsource_CERT-VN
http://www.securitytracker.com/id/1041451	vdb-entryx_refsource_SECTRACK
https://security.gentoo.org/glsa/201810-06	vendor-advisoryx_refsource_GENTOO
https://usn.ubuntu.com/3741-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2393	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3823-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2403	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/105080	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3740-2/	vendor-advisoryx_refsource_UBUNTU
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://www.debian.org/security/2018/dsa-4274	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2018:2388	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3741-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2603	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2402	vendor-advisoryx_refsource_REDHAT
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/3742-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2404	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3740-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2396	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4279	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:2392	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3742-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2602	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2018:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2387	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
http://xenbits.xen.org/xsa/advisory-273.html	x_refsource_CONFIRM
https://foreshadowattack.eu/	x_refsource_MISC
http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2018081…	x_refsource_CONFIRM
https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K95275140	x_refsource_CONFIRM
http://support.lenovo.com/us/en/solutions/LEN-24163	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
https://www.synology.com/support/security/Synolog…	x_refsource_CONFIRM
https://psirt.global.sonicwall.com/vuln-detail/SN…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
https://software.intel.com/security-software-guid…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Multiple	Affected: Multiple

Date Public

2018-08-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:50:29.256Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#982149",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/982149"
          },
          {
            "name": "1041451",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041451"
          },
          {
            "name": "GLSA-201810-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-06"
          },
          {
            "name": "USN-3741-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-2/"
          },
          {
            "name": "RHSA-2018:2393",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2393"
          },
          {
            "name": "USN-3823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3823-1/"
          },
          {
            "name": "RHSA-2018:2389",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2389"
          },
          {
            "name": "RHSA-2018:2390",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2390"
          },
          {
            "name": "RHSA-2018:2403",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2403"
          },
          {
            "name": "105080",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105080"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "name": "USN-3740-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3740-2/"
          },
          {
            "name": "FreeBSD-SA-18:09",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc"
          },
          {
            "name": "DSA-4274",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4274"
          },
          {
            "name": "FEDORA-2018-1c80fea1cd",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/"
          },
          {
            "name": "RHSA-2018:2388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2388"
          },
          {
            "name": "USN-3741-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-1/"
          },
          {
            "name": "RHSA-2018:2603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2603"
          },
          {
            "name": "RHSA-2018:2402",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2402"
          },
          {
            "name": "20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel"
          },
          {
            "name": "FEDORA-2018-f8cba144ae",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/"
          },
          {
            "name": "USN-3742-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-2/"
          },
          {
            "name": "RHSA-2018:2404",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2404"
          },
          {
            "name": "USN-3740-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3740-1/"
          },
          {
            "name": "RHSA-2018:2391",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2391"
          },
          {
            "name": "RHSA-2018:2396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2396"
          },
          {
            "name": "DSA-4279",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4279"
          },
          {
            "name": "RHSA-2018:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2392"
          },
          {
            "name": "[debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html"
          },
          {
            "name": "USN-3742-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-1/"
          },
          {
            "name": "RHSA-2018:2602",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2602"
          },
          {
            "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
          },
          {
            "name": "RHSA-2018:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2394"
          },
          {
            "name": "RHSA-2018:2387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2387"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-273.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://foreshadowattack.eu/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2018-0021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180815-0001/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K95275140"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.lenovo.com/us/en/solutions/LEN-24163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_45"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0009"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2018-3620",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T20:11:10.591000Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-203",
                "description": "CWE-203 Observable Discrepancy",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T20:11:15.073Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Multiple",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Multiple"
            }
          ]
        }
      ],
      "datePublic": "2018-08-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:58.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "VU#982149",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/982149"
        },
        {
          "name": "1041451",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041451"
        },
        {
          "name": "GLSA-201810-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-06"
        },
        {
          "name": "USN-3741-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-2/"
        },
        {
          "name": "RHSA-2018:2393",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2393"
        },
        {
          "name": "USN-3823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3823-1/"
        },
        {
          "name": "RHSA-2018:2389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2389"
        },
        {
          "name": "RHSA-2018:2390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2390"
        },
        {
          "name": "RHSA-2018:2403",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2403"
        },
        {
          "name": "105080",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105080"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "name": "USN-3740-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3740-2/"
        },
        {
          "name": "FreeBSD-SA-18:09",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc"
        },
        {
          "name": "DSA-4274",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4274"
        },
        {
          "name": "FEDORA-2018-1c80fea1cd",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/"
        },
        {
          "name": "RHSA-2018:2388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2388"
        },
        {
          "name": "USN-3741-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-1/"
        },
        {
          "name": "RHSA-2018:2603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2603"
        },
        {
          "name": "RHSA-2018:2402",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2402"
        },
        {
          "name": "20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel"
        },
        {
          "name": "FEDORA-2018-f8cba144ae",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/"
        },
        {
          "name": "USN-3742-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-2/"
        },
        {
          "name": "RHSA-2018:2404",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2404"
        },
        {
          "name": "USN-3740-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3740-1/"
        },
        {
          "name": "RHSA-2018:2391",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2391"
        },
        {
          "name": "RHSA-2018:2396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2396"
        },
        {
          "name": "DSA-4279",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4279"
        },
        {
          "name": "RHSA-2018:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2392"
        },
        {
          "name": "[debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html"
        },
        {
          "name": "USN-3742-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-1/"
        },
        {
          "name": "RHSA-2018:2602",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2602"
        },
        {
          "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
        },
        {
          "name": "RHSA-2018:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2394"
        },
        {
          "name": "RHSA-2018:2387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2387"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-273.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://foreshadowattack.eu/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2018-0021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180815-0001/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K95275140"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.lenovo.com/us/en/solutions/LEN-24163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_45"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0009"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "DATE_PUBLIC": "2018-08-14T00:00:00",
          "ID": "CVE-2018-3620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Multiple",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Multiple"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#982149",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/982149"
            },
            {
              "name": "1041451",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041451"
            },
            {
              "name": "GLSA-201810-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-06"
            },
            {
              "name": "USN-3741-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-2/"
            },
            {
              "name": "RHSA-2018:2393",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2393"
            },
            {
              "name": "USN-3823-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3823-1/"
            },
            {
              "name": "RHSA-2018:2389",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2389"
            },
            {
              "name": "RHSA-2018:2390",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2390"
            },
            {
              "name": "RHSA-2018:2403",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2403"
            },
            {
              "name": "105080",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105080"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "USN-3740-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3740-2/"
            },
            {
              "name": "FreeBSD-SA-18:09",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc"
            },
            {
              "name": "DSA-4274",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4274"
            },
            {
              "name": "FEDORA-2018-1c80fea1cd",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/"
            },
            {
              "name": "RHSA-2018:2388",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2388"
            },
            {
              "name": "USN-3741-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-1/"
            },
            {
              "name": "RHSA-2018:2603",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2603"
            },
            {
              "name": "RHSA-2018:2402",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2402"
            },
            {
              "name": "20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel"
            },
            {
              "name": "FEDORA-2018-f8cba144ae",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/"
            },
            {
              "name": "USN-3742-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-2/"
            },
            {
              "name": "RHSA-2018:2404",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2404"
            },
            {
              "name": "USN-3740-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3740-1/"
            },
            {
              "name": "RHSA-2018:2391",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2391"
            },
            {
              "name": "RHSA-2018:2396",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2396"
            },
            {
              "name": "DSA-4279",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4279"
            },
            {
              "name": "RHSA-2018:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2392"
            },
            {
              "name": "[debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html"
            },
            {
              "name": "USN-3742-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-1/"
            },
            {
              "name": "RHSA-2018:2602",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2602"
            },
            {
              "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
            },
            {
              "name": "RHSA-2018:2394",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2394"
            },
            {
              "name": "RHSA-2018:2387",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2387"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-273.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-273.html"
            },
            {
              "name": "https://foreshadowattack.eu/",
              "refsource": "MISC",
              "url": "https://foreshadowattack.eu/"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2018-0021.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2018-0021.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180815-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180815-0001/"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018"
            },
            {
              "name": "https://support.f5.com/csp/article/K95275140",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K95275140"
            },
            {
              "name": "http://support.lenovo.com/us/en/solutions/LEN-24163",
              "refsource": "CONFIRM",
              "url": "http://support.lenovo.com/us/en/solutions/LEN-24163"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en"
            },
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_45",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_45"
            },
            {
              "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0009",
              "refsource": "CONFIRM",
              "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0009"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us"
            },
            {
              "name": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault",
              "refsource": "CONFIRM",
              "url": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-3620",
    "datePublished": "2018-08-14T19:00:00.000Z",
    "dateReserved": "2017-12-28T00:00:00.000Z",
    "dateUpdated": "2026-05-29T20:11:15.073Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2018-3646 (GCVE-0-2018-3646)

Vulnerability from cvelistv5 – Published: 2018-08-14 19:00 – Updated: 2026-05-29 20:10

Summary

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 20:10 UTC

CWE

Information Disclosure
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

intel mitre root

References

56 references

URL	Tags
https://www.kb.cert.org/vuls/id/982149	third-party-advisoryx_refsource_CERT-VN
http://www.securitytracker.com/id/1041451	vdb-entryx_refsource_SECTRACK
https://security.gentoo.org/glsa/201810-06	vendor-advisoryx_refsource_GENTOO
https://usn.ubuntu.com/3741-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2393	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3823-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2389	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1042004	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:2390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2403	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/105080	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3740-2/	vendor-advisoryx_refsource_UBUNTU
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://www.debian.org/security/2018/dsa-4274	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2018:2388	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3741-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2603	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2402	vendor-advisoryx_refsource_REDHAT
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/3742-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2404	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3740-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2396	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4279	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:2392	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3742-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2602	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2018:2394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2387	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3756-1/	vendor-advisoryx_refsource_UBUNTU
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_CONFIRM
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
http://xenbits.xen.org/xsa/advisory-273.html	x_refsource_CONFIRM
https://foreshadowattack.eu/	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2018081…	x_refsource_CONFIRM
https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
http://support.lenovo.com/us/en/solutions/LEN-24163	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
https://www.synology.com/support/security/Synolog…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
https://software.intel.com/security-software-guid…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://psirt.global.sonicwall.com/vuln-detail/SN…	x_refsource_CONFIRM
http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K31300402	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Multiple	Affected: Multiple

Date Public

2018-08-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:50:30.406Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#982149",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/982149"
          },
          {
            "name": "1041451",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041451"
          },
          {
            "name": "GLSA-201810-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-06"
          },
          {
            "name": "USN-3741-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-2/"
          },
          {
            "name": "RHSA-2018:2393",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2393"
          },
          {
            "name": "USN-3823-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3823-1/"
          },
          {
            "name": "RHSA-2018:2389",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2389"
          },
          {
            "name": "1042004",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1042004"
          },
          {
            "name": "RHSA-2018:2390",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2390"
          },
          {
            "name": "RHSA-2018:2403",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2403"
          },
          {
            "name": "105080",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105080"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "name": "USN-3740-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3740-2/"
          },
          {
            "name": "FreeBSD-SA-18:09",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc"
          },
          {
            "name": "DSA-4274",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4274"
          },
          {
            "name": "FEDORA-2018-1c80fea1cd",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/"
          },
          {
            "name": "RHSA-2018:2388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2388"
          },
          {
            "name": "USN-3741-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-1/"
          },
          {
            "name": "RHSA-2018:2603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2603"
          },
          {
            "name": "RHSA-2018:2402",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2402"
          },
          {
            "name": "20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel"
          },
          {
            "name": "FEDORA-2018-f8cba144ae",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/"
          },
          {
            "name": "USN-3742-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-2/"
          },
          {
            "name": "RHSA-2018:2404",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2404"
          },
          {
            "name": "USN-3740-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3740-1/"
          },
          {
            "name": "RHSA-2018:2391",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2391"
          },
          {
            "name": "RHSA-2018:2396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2396"
          },
          {
            "name": "DSA-4279",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4279"
          },
          {
            "name": "RHSA-2018:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2392"
          },
          {
            "name": "[debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html"
          },
          {
            "name": "USN-3742-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-1/"
          },
          {
            "name": "RHSA-2018:2602",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2602"
          },
          {
            "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
          },
          {
            "name": "RHSA-2018:2394",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2394"
          },
          {
            "name": "RHSA-2018:2387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2387"
          },
          {
            "name": "USN-3756-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3756-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-273.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://foreshadowattack.eu/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180815-0001/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.lenovo.com/us/en/solutions/LEN-24163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_45"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0010"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2018-0020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K31300402"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2018-3646",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T20:10:26.910599Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T20:10:40.370Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Multiple",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Multiple"
            }
          ]
        }
      ],
      "datePublic": "2018-08-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:59.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "VU#982149",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/982149"
        },
        {
          "name": "1041451",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041451"
        },
        {
          "name": "GLSA-201810-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-06"
        },
        {
          "name": "USN-3741-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-2/"
        },
        {
          "name": "RHSA-2018:2393",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2393"
        },
        {
          "name": "USN-3823-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3823-1/"
        },
        {
          "name": "RHSA-2018:2389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2389"
        },
        {
          "name": "1042004",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1042004"
        },
        {
          "name": "RHSA-2018:2390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2390"
        },
        {
          "name": "RHSA-2018:2403",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2403"
        },
        {
          "name": "105080",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105080"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "name": "USN-3740-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3740-2/"
        },
        {
          "name": "FreeBSD-SA-18:09",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc"
        },
        {
          "name": "DSA-4274",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4274"
        },
        {
          "name": "FEDORA-2018-1c80fea1cd",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/"
        },
        {
          "name": "RHSA-2018:2388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2388"
        },
        {
          "name": "USN-3741-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-1/"
        },
        {
          "name": "RHSA-2018:2603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2603"
        },
        {
          "name": "RHSA-2018:2402",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2402"
        },
        {
          "name": "20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel"
        },
        {
          "name": "FEDORA-2018-f8cba144ae",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/"
        },
        {
          "name": "USN-3742-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-2/"
        },
        {
          "name": "RHSA-2018:2404",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2404"
        },
        {
          "name": "USN-3740-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3740-1/"
        },
        {
          "name": "RHSA-2018:2391",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2391"
        },
        {
          "name": "RHSA-2018:2396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2396"
        },
        {
          "name": "DSA-4279",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4279"
        },
        {
          "name": "RHSA-2018:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2392"
        },
        {
          "name": "[debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html"
        },
        {
          "name": "USN-3742-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-1/"
        },
        {
          "name": "RHSA-2018:2602",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2602"
        },
        {
          "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
        },
        {
          "name": "RHSA-2018:2394",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2394"
        },
        {
          "name": "RHSA-2018:2387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2387"
        },
        {
          "name": "USN-3756-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3756-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-273.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://foreshadowattack.eu/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180815-0001/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.lenovo.com/us/en/solutions/LEN-24163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_45"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0010"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2018-0020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K31300402"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "DATE_PUBLIC": "2018-08-14T00:00:00",
          "ID": "CVE-2018-3646",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Multiple",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Multiple"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#982149",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/982149"
            },
            {
              "name": "1041451",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041451"
            },
            {
              "name": "GLSA-201810-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-06"
            },
            {
              "name": "USN-3741-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-2/"
            },
            {
              "name": "RHSA-2018:2393",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2393"
            },
            {
              "name": "USN-3823-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3823-1/"
            },
            {
              "name": "RHSA-2018:2389",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2389"
            },
            {
              "name": "1042004",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1042004"
            },
            {
              "name": "RHSA-2018:2390",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2390"
            },
            {
              "name": "RHSA-2018:2403",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2403"
            },
            {
              "name": "105080",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105080"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "USN-3740-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3740-2/"
            },
            {
              "name": "FreeBSD-SA-18:09",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:09.l1tf.asc"
            },
            {
              "name": "DSA-4274",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4274"
            },
            {
              "name": "FEDORA-2018-1c80fea1cd",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/"
            },
            {
              "name": "RHSA-2018:2388",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2388"
            },
            {
              "name": "USN-3741-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-1/"
            },
            {
              "name": "RHSA-2018:2603",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2603"
            },
            {
              "name": "RHSA-2018:2402",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2402"
            },
            {
              "name": "20180814 CPU Side-Channel Information Disclosure Vulnerabilities: August 2018",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180814-cpusidechannel"
            },
            {
              "name": "FEDORA-2018-f8cba144ae",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V4UWGORQWCENCIF2BHWUEF2ODBV75QS2/"
            },
            {
              "name": "USN-3742-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-2/"
            },
            {
              "name": "RHSA-2018:2404",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2404"
            },
            {
              "name": "USN-3740-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3740-1/"
            },
            {
              "name": "RHSA-2018:2391",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2391"
            },
            {
              "name": "RHSA-2018:2396",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2396"
            },
            {
              "name": "DSA-4279",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4279"
            },
            {
              "name": "RHSA-2018:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2392"
            },
            {
              "name": "[debian-lts-announce] 20180828 [SECURITY] [DLA 1481-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00029.html"
            },
            {
              "name": "USN-3742-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-1/"
            },
            {
              "name": "RHSA-2018:2602",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2602"
            },
            {
              "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
            },
            {
              "name": "RHSA-2018:2394",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2394"
            },
            {
              "name": "RHSA-2018:2387",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2387"
            },
            {
              "name": "USN-3756-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3756-1/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
              "refsource": "CONFIRM",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-273.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-273.html"
            },
            {
              "name": "https://foreshadowattack.eu/",
              "refsource": "MISC",
              "url": "https://foreshadowattack.eu/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180815-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180815-0001/"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180018"
            },
            {
              "name": "http://support.lenovo.com/us/en/solutions/LEN-24163",
              "refsource": "CONFIRM",
              "url": "http://support.lenovo.com/us/en/solutions/LEN-24163"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en"
            },
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_45",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_45"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-254686.pdf"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03874en_us"
            },
            {
              "name": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault",
              "refsource": "CONFIRM",
              "url": "https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0010",
              "refsource": "CONFIRM",
              "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0010"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2018-0020.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2018-0020.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K31300402",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K31300402"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-3646",
    "datePublished": "2018-08-14T19:00:00.000Z",
    "dateReserved": "2017-12-28T00:00:00.000Z",
    "dateUpdated": "2026-05-29T20:10:40.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2018-3693 (GCVE-0-2018-3693)

Vulnerability from cvelistv5 – Published: 2018-07-10 21:00 – Updated: 2024-08-05 04:50

Summary

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.

Severity

No CVSS data available.

CWE

Information Disclosure

Assigner

intel mitre root

References

11 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:2390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0174	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2018082…	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
https://cdrdv2.intel.com/v1/dl/getContent/685359	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Most Modern Operating Systems	Affected: All

Date Public

2018-07-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:50:30.557Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:2390",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2390"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "name": "RHSA-2019:1946",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1946"
          },
          {
            "name": "RHSA-2020:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0174"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180823-0001/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdrdv2.intel.com/v1/dl/getContent/685359"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Most Modern Operating Systems",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        }
      ],
      "datePublic": "2018-07-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-19T17:51:16.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "RHSA-2018:2390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2390"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "name": "RHSA-2019:1946",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1946"
        },
        {
          "name": "RHSA-2020:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0174"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180823-0001/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdrdv2.intel.com/v1/dl/getContent/685359"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2018-3693",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Most Modern Operating Systems",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:2390",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2390"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "RHSA-2019:1946",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1946"
            },
            {
              "name": "RHSA-2020:0174",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0174"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180823-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180823-0001/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
            },
            {
              "name": "https://cdrdv2.intel.com/v1/dl/getContent/685359",
              "refsource": "CONFIRM",
              "url": "https://cdrdv2.intel.com/v1/dl/getContent/685359"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-3693",
    "datePublished": "2018-07-10T21:00:00.000Z",
    "dateReserved": "2017-12-28T00:00:00.000Z",
    "dateUpdated": "2024-08-05T04:50:30.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-5390 (GCVE-0-2018-5390)

Vulnerability from cvelistv5 – Published: 2018-08-06 20:00 – Updated: 2024-08-05 05:33

Title

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

Summary

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Severity

No CVSS data available.

CWE

CWE-400

Assigner

certcc mitre root

References

42 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:2785	vendor-advisoryx_refsource_REDHAT
https://www.kb.cert.org/vuls/id/962459	third-party-advisoryx_refsource_CERT-VN
https://usn.ubuntu.com/3741-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2776	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2933	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2403	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3763-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3741-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2402	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3742-2/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041434	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3732-2/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/104976	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1041424	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3742-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2924	vendor-advisoryx_refsource_REDHAT
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
https://access.redhat.com/errata/RHSA-2018:2789	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4266	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:2645	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3732-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2790	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2019/06/28/2	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/07/06/3	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/07/06/4	mailing-listx_refsource_MLIST
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_CONFIRM
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2018081…	x_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
https://www.synology.com/support/security/Synolog…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K95343321	x_refsource_CONFIRM
https://www.a10networks.com/support/security-advi…	x_refsource_CONFIRM
https://git.kernel.org/pub/scm/linux/kernel/git/d…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K95343321?utm_…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Linux	Linux Kernel	Affected: 4.9 , < 4.9* (custom)

Date Public

2018-07-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:33:44.409Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:2785",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2785"
          },
          {
            "name": "VU#962459",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/962459"
          },
          {
            "name": "USN-3741-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-2/"
          },
          {
            "name": "RHSA-2018:2776",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2776"
          },
          {
            "name": "RHSA-2018:2933",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2933"
          },
          {
            "name": "RHSA-2018:2403",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2403"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "USN-3763-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3763-1/"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "name": "USN-3741-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3741-1/"
          },
          {
            "name": "RHSA-2018:2402",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2402"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "USN-3742-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-2/"
          },
          {
            "name": "1041434",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041434"
          },
          {
            "name": "USN-3732-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3732-2/"
          },
          {
            "name": "104976",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104976"
          },
          {
            "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
          },
          {
            "name": "1041424",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041424"
          },
          {
            "name": "USN-3742-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3742-1/"
          },
          {
            "name": "RHSA-2018:2924",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2924"
          },
          {
            "name": "20180824 Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp"
          },
          {
            "name": "RHSA-2018:2789",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2789"
          },
          {
            "name": "DSA-4266",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4266"
          },
          {
            "name": "RHSA-2018:2645",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2645"
          },
          {
            "name": "USN-3732-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3732-1/"
          },
          {
            "name": "RHSA-2018:2791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2791"
          },
          {
            "name": "RHSA-2018:2790",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2790"
          },
          {
            "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
          },
          {
            "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
          },
          {
            "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180815-0003/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_41"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K95343321"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4.9*",
              "status": "affected",
              "version": "4.9",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-07-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:59.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "RHSA-2018:2785",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2785"
        },
        {
          "name": "VU#962459",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/962459"
        },
        {
          "name": "USN-3741-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-2/"
        },
        {
          "name": "RHSA-2018:2776",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2776"
        },
        {
          "name": "RHSA-2018:2933",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2933"
        },
        {
          "name": "RHSA-2018:2403",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2403"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "USN-3763-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3763-1/"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "name": "USN-3741-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3741-1/"
        },
        {
          "name": "RHSA-2018:2402",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2402"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "USN-3742-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-2/"
        },
        {
          "name": "1041434",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041434"
        },
        {
          "name": "USN-3732-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3732-2/"
        },
        {
          "name": "104976",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104976"
        },
        {
          "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
        },
        {
          "name": "1041424",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041424"
        },
        {
          "name": "USN-3742-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3742-1/"
        },
        {
          "name": "RHSA-2018:2924",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2924"
        },
        {
          "name": "20180824 Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp"
        },
        {
          "name": "RHSA-2018:2789",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2789"
        },
        {
          "name": "DSA-4266",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4266"
        },
        {
          "name": "RHSA-2018:2645",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2645"
        },
        {
          "name": "USN-3732-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3732-1/"
        },
        {
          "name": "RHSA-2018:2791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2791"
        },
        {
          "name": "RHSA-2018:2790",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2790"
        },
        {
          "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
        },
        {
          "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
        },
        {
          "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180815-0003/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_41"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K95343321"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2018-5390",
          "STATE": "PUBLIC",
          "TITLE": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux Kernel",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003e=",
                            "version_affected": "\u003e=",
                            "version_name": "4.9",
                            "version_value": "4.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:2785",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2785"
            },
            {
              "name": "VU#962459",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/962459"
            },
            {
              "name": "USN-3741-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-2/"
            },
            {
              "name": "RHSA-2018:2776",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2776"
            },
            {
              "name": "RHSA-2018:2933",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2933"
            },
            {
              "name": "RHSA-2018:2403",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2403"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "USN-3763-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3763-1/"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "USN-3741-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3741-1/"
            },
            {
              "name": "RHSA-2018:2402",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2402"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "USN-3742-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-2/"
            },
            {
              "name": "1041434",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041434"
            },
            {
              "name": "USN-3732-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3732-2/"
            },
            {
              "name": "104976",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104976"
            },
            {
              "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html"
            },
            {
              "name": "1041424",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041424"
            },
            {
              "name": "USN-3742-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3742-1/"
            },
            {
              "name": "RHSA-2018:2924",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2924"
            },
            {
              "name": "20180824 Linux and FreeBSD Kernels TCP Reassembly Denial of Service Vulnerabilities Affecting Cisco Products: August 2018",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp"
            },
            {
              "name": "RHSA-2018:2789",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2789"
            },
            {
              "name": "DSA-4266",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4266"
            },
            {
              "name": "RHSA-2018:2645",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2645"
            },
            {
              "name": "USN-3732-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3732-1/"
            },
            {
              "name": "RHSA-2018:2791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2791"
            },
            {
              "name": "RHSA-2018:2790",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2790"
            },
            {
              "name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
            },
            {
              "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/06/3"
            },
            {
              "name": "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/06/4"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
              "refsource": "CONFIRM",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180815-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180815-0003/"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_41",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_41"
            },
            {
              "name": "https://support.f5.com/csp/article/K95343321",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K95343321"
            },
            {
              "name": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack",
              "refsource": "CONFIRM",
              "url": "https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e"
            },
            {
              "name": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K95343321?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2018-5390",
    "datePublished": "2018-08-06T20:00:00.000Z",
    "dateReserved": "2018-01-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T05:33:44.409Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-7566 (GCVE-0-2018-7566)

Vulnerability from cvelistv5 – Published: 2018-03-30 21:00 – Updated: 2024-08-05 06:31

Summary

The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
https://usn.ubuntu.com/3631-2/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4187	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/3631-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2384	vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2018/dsa-4188	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:2948	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/103605	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://mailman.alsa-project.org/pipermail/alsa-de…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3798-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3798-2/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:1483	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1487	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1550142	x_refsource_CONFIRM

Date Public

2018-02-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:31:04.728Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3631-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-2/"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3631-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3631-1/"
          },
          {
            "name": "RHSA-2018:2390",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2390"
          },
          {
            "name": "RHSA-2018:2395",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2395"
          },
          {
            "name": "RHSA-2018:2384",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2384"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "RHSA-2018:2948",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2948"
          },
          {
            "name": "103605",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103605"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "[alsa-devel] 20180214 [PATCH] ALSA: seq: Fix racy pool initializations",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mailman.alsa-project.org/pipermail/alsa-devel/2018-February/132026.html"
          },
          {
            "name": "USN-3798-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3798-1/"
          },
          {
            "name": "USN-3798-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3798-2/"
          },
          {
            "name": "SUSE-SU-2018:0834",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html"
          },
          {
            "name": "RHSA-2019:1483",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1483"
          },
          {
            "name": "RHSA-2019:1487",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1487"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d15d662e89fc667b90cd294b0eb45694e33144da"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550142"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-15T02:22:59.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3631-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-2/"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3631-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3631-1/"
        },
        {
          "name": "RHSA-2018:2390",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2390"
        },
        {
          "name": "RHSA-2018:2395",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2395"
        },
        {
          "name": "RHSA-2018:2384",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2384"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "RHSA-2018:2948",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2948"
        },
        {
          "name": "103605",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103605"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "[alsa-devel] 20180214 [PATCH] ALSA: seq: Fix racy pool initializations",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mailman.alsa-project.org/pipermail/alsa-devel/2018-February/132026.html"
        },
        {
          "name": "USN-3798-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3798-1/"
        },
        {
          "name": "USN-3798-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3798-2/"
        },
        {
          "name": "SUSE-SU-2018:0834",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html"
        },
        {
          "name": "RHSA-2019:1483",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1483"
        },
        {
          "name": "RHSA-2019:1487",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1487"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d15d662e89fc667b90cd294b0eb45694e33144da"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550142"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-7566",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3631-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-2/"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3631-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3631-1/"
            },
            {
              "name": "RHSA-2018:2390",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2390"
            },
            {
              "name": "RHSA-2018:2395",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2395"
            },
            {
              "name": "RHSA-2018:2384",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2384"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "RHSA-2018:2948",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2948"
            },
            {
              "name": "103605",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103605"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "[alsa-devel] 20180214 [PATCH] ALSA: seq: Fix racy pool initializations",
              "refsource": "MLIST",
              "url": "http://mailman.alsa-project.org/pipermail/alsa-devel/2018-February/132026.html"
            },
            {
              "name": "USN-3798-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3798-1/"
            },
            {
              "name": "USN-3798-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3798-2/"
            },
            {
              "name": "SUSE-SU-2018:0834",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html"
            },
            {
              "name": "RHSA-2019:1483",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1483"
            },
            {
              "name": "RHSA-2019:1487",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1487"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d15d662e89fc667b90cd294b0eb45694e33144da",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d15d662e89fc667b90cd294b0eb45694e33144da"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1550142",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1550142"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-7566",
    "datePublished": "2018-03-30T21:00:00.000Z",
    "dateReserved": "2018-02-28T00:00:00.000Z",
    "dateUpdated": "2024-08-05T06:31:04.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2018_2384

CVE-2017-13215 (GCVE-0-2017-13215)

CVE-2018-10675 (GCVE-0-2018-10675)

CVE-2018-3620 (GCVE-0-2018-3620)

CVE-2018-3646 (GCVE-0-2018-3646)

CVE-2018-3693 (GCVE-0-2018-3693)

CVE-2018-5390 (GCVE-0-2018-5390)

CVE-2018-7566 (GCVE-0-2018-7566)

Tags

Sightings

Nomenclature

Related by attack behaviour