var-201905-0709

Vulnerability from variot

Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf. Intel Xeon Scalable Processors and so on are products of Intel Corporation of the United States. Intel XeonScalable Processors is a scalable server central processing unit (CPU). IntelXeonProcessorE7v4Family is a XeonE7 series server central processing unit (CPU). IntelXeonProcessorE5v4Family is a XeonE5 series server central processing unit (CPU). An information disclosure vulnerability exists in several Intel products. The vulnerability stems from errors in the configuration of the network system or product during operation. An unauthorized attacker can exploit the vulnerability to obtain sensitive information about the affected component. The following products and versions are affected: Intel Xeon Scalable Processors; Xeon Processor E7 v4 Family; Xeon Processor E5 v4 Family; Xeon Processor E3 v6 Family; Xeon Processor E3 v4 Family; Xeon Processor E; Xeon E Processor; Xeon D Processor; Puma; Pentium Processor Silver Series; Pentium Processor N Series; Pentium Processor J Series; Pentium Gold Processor Series; Mobile Communications Platforms; Microcode; Core X series Processors; Celeron Processor N Series; Celeron Processor J Series; Celeron Processor G Series; Atom Processor X Series ;Atom Processor E3900 Series;Atom Processor E3800 Series;Atom Processor. Description:

The VDSM service is required by a Virtualization Manager to manage the Linux hosts. VDSM manages and monitors the host's storage, memory and networks as well as virtual machine creation, other host administration tasks, statistics gathering, and log collection. 7.2) - noarch, x86_64

Description:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Bug Fix(es):

rwsem in inconsistent state leading system to hung (BZ#1690318)

This update provides additional support for some Sandybridge server and Core-X CPUs which were not covered in the original May microcode release. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

============================================================================ FreeBSD-SA-19:26.mcu Security Advisory The FreeBSD Project

Topic: Intel CPU Microcode Update

Category: 3rd party Module: Intel CPU microcode Announced: 2019-11-12 Credits: Intel Affects: All supported versions of FreeBSD running on certain Intel CPUs. CVE Name: CVE-2019-11135, CVE-2019-11139, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2018-11091, CVE-2017-5715

For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . Background

From time to time Intel releases new CPU microcode to address functional issues and security vulnerabilities. Such a release is also known as a Micro Code Update (MCU), and is a component of a broader Intel Platform Update (IPU). FreeBSD distributes CPU microcode via the devcpu-data port and package.

II. Problem Description

Starting with version 1.26, the devcpu-data port/package includes updates and mitigations for the following technical and security advisories (depending on CPU model).

Intel TSX Updates (TAA) CVE-2019-11135 Voltage Modulation Vulnerability CVE-2019-11139 MD_CLEAR Operations CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-11091 TA Indirect Sharing CVE-2017-5715 EGETKEY CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-11091 JCC SKX102 Erratum

Updated microcode includes mitigations for CPU issues, but may also cause a performance regression due to the JCC erratum mitigation. Please visit http://www.intel.com/benchmarks for further information.

Please visit http://www.intel.com/security for detailed information on these advisories as well as a list of CPUs that are affected.

III. Impact

Operating a CPU without the latest microcode may result in erratic or unpredictable behavior, including system crashes and lock ups. Certain issues listed in this advisory may result in the leakage of privileged system information to unprivileged users.

IV. Workaround

To determine if TSX is present in your system, run the following:

kldload cpuctl
cpucontrol -i 7 /dev/cpuctl0

If bits 4 (0x10) and 11 (0x800) are set in the second response word (EBX), TSX is present.

In the absence of updated microcode, TAA can be mitigated by enabling the MDS mitigation:

sysctl hw.mds_disable=1

Systems must be running FreeBSD 11.3, FreeBSD 12.1, or later for this to work.

IMPORTANT If your use case can tolerate leaving the CPU issues unmitigated and cannot tolerate a performance regression, ensure that the devcpu-data package is not installed or is locked at 1.25 or earlier.

pkg delete devcpu-data

pkg lock devcpu-data

Later versions of the LLVM and GCC compilers will include changes that partially relieve the peformance impact.

V. Solution

Install the latest Intel Microcode Update via the devcpu-data port/package, version 1.26 or later.

Updated microcode adds the ability to disable TSX. With updated microcode the issue can still be mitigated by enabling the MDS mitigation as described in the workaround section, or by disabling TSX instead:

kldload cpuctl
cpucontrol -i 7 /dev/cpuctl0

If bit 29 (0x20000000) is set in the fourth response word (EDX), then the 0x10a MSR is present. cpucontrol -m 0x10a /dev/cpuctl0

If bit 8 (0x100) of the response word is set, your CPU is not vulnerable to TAA and no further action is required.

If bit 7 (0x80) is cleared, then your CPU does not have updated microcode that facilitates TSX to be disabled. The only remedy available is to enable the MDS mitigation, as documented above. cpucontrol -m 0x122=3 /dev/cpuctl0

Repeat step 4 for each numbered CPU that is present.

A future kernel change to FreeBSD will provide automatic detection and mitigation for TAA.

LLVM 9.0 will be updated in FreeBSD 13-current to address the JCC peformance impact. Updates to prior versions of LLVM are currently being evaluated.

VI. Correction details

There are currently no changes in FreeBSD to address this issue.

VII. ========================================================================== Ubuntu Security Notice USN-3979-1 May 14, 2019

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

Ubuntu 19.04

Summary:

Several security issues were fixed in the Linux kernel.

Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-kvm: Linux kernel for cloud environments - linux-raspi2: Linux kernel for Raspberry Pi 2

Details:

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian \xd6sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered that memory previously stored in microarchitectural fill buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. (CVE-2018-12130)

Brandon Falk, Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Stephan van Schaik, Alyssa Milburn, Sebastian \xd6sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that memory previously stored in microarchitectural load ports of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. (CVE-2018-12127)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Marina Minkin, Daniel Moghimi, Moritz Lipp, Michael Schwarz, Jo Van Bulck, Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom discovered that memory previously stored in microarchitectural store buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. (CVE-2018-12126)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Volodrmyr Pikhur, Moritz Lipp, Michael Schwarz, Daniel Gruss, Stephan van Schaik, Alyssa Milburn, Sebastian \xd6sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that uncacheable memory previously stored in microarchitectural buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. (CVE-2019-11091)

It was discovered that the IPv4 generic receive offload (GRO) for UDP implementation in the Linux kernel did not properly handle padded packets. A remote attacker could use this to cause a denial of service (system crash). (CVE-2019-11683)

It was discovered that a race condition existed in the Binder IPC driver for the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-1999)

Matteo Croce, Natale Vinto, and Andrea Spagnolo discovered that the cgroups subsystem of the Linux kernel did not properly account for SCTP socket buffers. A local attacker could use this to cause a denial of service (system crash). (CVE-2019-3874)

Alex Williamson discovered that the vfio subsystem of the Linux kernel did not properly limit DMA mappings. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2019-3882)

Marc Orr discovered that the KVM hypervisor implementation in the Linux kernel did not properly restrict APIC MSR register values when nested virtualization is used. An attacker in a guest vm could use this to cause a denial of service (host OS crash). (CVE-2019-3887)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel contained a head puffer overflow. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-9500)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel did not properly prevent remote firmware events from being processed for USB Wifi devices. A physically proximate attacker could use this to send firmware events to the device. (CVE-2019-9503)

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.04: linux-image-5.0.0-1006-aws 5.0.0-1006.6 linux-image-5.0.0-1006-azure 5.0.0-1006.6 linux-image-5.0.0-1006-gcp 5.0.0-1006.6 linux-image-5.0.0-1006-kvm 5.0.0-1006.6 linux-image-5.0.0-1008-raspi2 5.0.0-1008.8 linux-image-5.0.0-15-generic 5.0.0-15.16 linux-image-5.0.0-15-generic-lpae 5.0.0-15.16 linux-image-5.0.0-15-lowlatency 5.0.0-15.16 linux-image-aws 5.0.0.1006.6 linux-image-azure 5.0.0.1006.6 linux-image-gcp 5.0.0.1006.6 linux-image-generic 5.0.0.15.16 linux-image-generic-lpae 5.0.0.15.16 linux-image-gke 5.0.0.1006.6 linux-image-kvm 5.0.0.1006.6 linux-image-lowlatency 5.0.0.15.16 linux-image-raspi2 5.0.0.1008.5 linux-image-virtual 5.0.0.15.16

After a standard system update you need to reboot your computer to make all the necessary changes.

Please note that fully mitigating the Microarchitectural Data Sampling (MDS) issues (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091) requires corresponding processor microcode/firmware updates or, in virtual environments, hypervisor updates. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

===================================================================== Red Hat Security Advisory

Synopsis: Important: libvirt security update Advisory ID: RHSA-2019:1186-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:1186 Issue date: 2019-05-14 CVE Names: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 =====================================================================

Summary:

An update for libvirt is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Relevant releases/architectures:

Red Hat Enterprise Linux Server AUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server E4S (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.2) - x86_64

Description:

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer while the data is fetched from higher level caches. This response time can be measured to infer data in the fill buffer. (CVE-2018-12130)
Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA (STore Address) and STD (STore Data) sub-operations. These sub-operations allow the processor to hand-off address generation logic into these sub-operations for optimized writes. Both of these sub-operations write to a shared distributed processor structure called the 'processor store buffer'. As a result, an unprivileged attacker could use this flaw to read private data resident within the CPU's processor store buffer. (CVE-2018-12126)
Microprocessors use a ‘load port’ subcomponent to perform load operations from memory or IO. During a load operation, the load port receives data from the memory or IO subsystem and then provides the data to the CPU registers and operations in the CPU’s pipelines. Stale load operations results are stored in the 'load port' table until overwritten by newer operations. Certain load-port operations triggered by an attacker can be used to reveal data about previous stale requests leaking data back to the attacker via a timing side-channel. (CVE-2019-11091)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution:

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, libvirtd will be restarted automatically.

Bugs fixed (https://bugzilla.redhat.com/):

1646781 - CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) 1646784 - CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) 1667782 - CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) 1705312 - CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

Package List:

Red Hat Enterprise Linux Server AUS (v. 7.2):

Source: libvirt-1.2.17-13.el7_2.10.src.rpm

x86_64: libvirt-1.2.17-13.el7_2.10.x86_64.rpm libvirt-client-1.2.17-13.el7_2.10.i686.rpm libvirt-client-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-config-network-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-config-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-interface-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-lxc-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-network-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-nodedev-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-qemu-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-secret-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-driver-storage-1.2.17-13.el7_2.10.x86_64.rpm libvirt-daemon-kvm-1.2.17-13.el7_2.10.x86_64.rpm libvirt-debuginfo-1.2.17-13.el7_2.10.i686.rpm libvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm libvirt-devel-1.2.17-13.el7_2.10.i686.rpm libvirt-devel-1.2.17-13.el7_2.10.x86_64.rpm libvirt-docs-1.2.17-13.el7_2.10.x86_64.rpm

Red Hat Enterprise Linux Server E4S (v. 7.2):

Source: libvirt-1.2.17-13.el7_2.10.src.rpm

Red Hat Enterprise Linux Server TUS (v. 7.2):

Source: libvirt-1.2.17-13.el7_2.10.src.rpm

Red Hat Enterprise Linux Server Optional AUS (v. 7.2):

x86_64: libvirt-daemon-lxc-1.2.17-13.el7_2.10.x86_64.rpm libvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm libvirt-lock-sanlock-1.2.17-13.el7_2.10.x86_64.rpm libvirt-login-shell-1.2.17-13.el7_2.10.x86_64.rpm

Red Hat Enterprise Linux Server Optional E4S (v. 7.2):

Red Hat Enterprise Linux Server Optional TUS (v. 7.2):

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/

References:

https://access.redhat.com/security/cve/CVE-2018-12126 https://access.redhat.com/security/cve/CVE-2018-12127 https://access.redhat.com/security/cve/CVE-2018-12130 https://access.redhat.com/security/cve/CVE-2019-11091 https://access.redhat.com/security/vulnerabilities/mds https://access.redhat.com/security/updates/classification/#important

Contact:

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/

iQIVAwUBXNspY9zjgjWX9erEAQhYSQ/+IUAyZl0LnpfmMs2b4cWyhab2xcuwg0vH vwW0ba3+TmjGHt+fwMEAaA4/sSnEbquIbJbCu8fx4KHz3Z9bS+Bz203+EYoAkX6W 47MphBHQYJSRKXk2J1IYNMFRD/zCuAXMU5C0wZ2M8a28TTVEXh7qnz1iPbvQsc2U vDEptwBjGTuqtYg7c4n2Q0wEIrlOx9cWrBPupbVYvTLQEjXD1HNTdKd76p2xvV43 p2uP0rrEypU8Isq44/3l9jkZipjx6AoVAxdTaCJ1hpXTNb8UblnGiDTY03kdAdvH ALSG99xmBSOymJ0XMw0t4I0LVhKRcdM/Z+xvIKhfu2TTJzCC5yFWIVYXISDGTbJj vz8M3KfcFwZF+PZZTurd1koLRTvw99l9vtNxwOEyoFaCueOEjW3nd4q8RZKdvpbV 4ZidTKtbRTNGpAZ2mz7O5EIDBB0N6g23bU5BW8Mzc5jeyJBpMJb+qPXhKXh4iMmi 5ySGrAeuUoOMR7Aa+S5dq6o7lu8wiMhiYlrxQjNLH1iCN6geHi7iiCMuR6PN+Hn2 tprWi2lNFlSgf2VFTewiy7cJYMJ8P5O77TpSfWJasxN+MD+bjt4Oc0ywTCA32m1a Gsk+5KntQlVDT1QbuJWvV/02/+khz7Oxq3yIDWlJePrRRufknyOJXTADDcsiUAG7 LXhfb/N/qQY= =W0lI -----END PGP SIGNATURE-----

-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . 6) - i386, x86_64

Description:

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Once all virtual machines have shut down, start them again for this update to take effect. It provides mitigations for the MSBDS, MFBDS, MLPDS and MDSUM hardware vulnerabilities.

To fully resolve these vulnerabilities it is also necessary to update the Linux kernel packages as released in DSA 4444.

For the stable distribution (stretch), these problems have been fixed in version 3.20190514.1~deb9u1.

We recommend that you upgrade your intel-microcode packages.

For the detailed security status of intel-microcode please refer to its security tracker page at: https://security-tracker.debian.org/tracker/intel-microcode

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlzb2WsACgkQEMKTtsN8 TjZ+PBAAqVaw+/6ZsLEwj4aPlI0XrDP1MEWLHSFyOpOluNKaHSfCR1MopjdmSykT 91es+HCLISwbpuhPy8a+rPEZnSwnQczuXJITMVnW0Z9noUvTf/BnN/dAdwTa8Ka8 DkhBnvmc5gOkdcG7il+PaI1byZ5/6S+znqhDiN4VSZg3h1LhJMk9h9kUjQS+W6uC qA4JGdJsqeQShngE8njGetwCaf29+e2OQ3RfuDp+6XgsQln2ZOi7r69Bj5VmH5jB yYzMMp8n0jMKelzqP9HtniL/P/75foDhQrP95k8gFaeRaLTEIb0NNLP1JpiaVKtn +c+1yMN6R7JG86AOlNOq/xUHv3pkuP9i2PBEga/956nQZf9g9/5tc6/K0dgHl4Yx zn1SKQrKdXVqtvYx6boh3cPqoJ99W32GijQHr2N8ezjdmW7SHMGtpnSVO88nDbH4 JVdxVhtY4JCsDJxYIwb6T4p3TSGIzN0T7y5/YqItqObmblLpg8jASWNkrepH3jqY a9swwMelQTsop5LFTwgYbTznXSEE+AorFTc+hOvScR4ZSr8kPVK/nf/m+h5Zj68B Lx/nnOQZFYySrNBKMfMLCXmrmMWP3ZavMiiEJL4GbWfNFAEJH4P+2UwsjwyEVW3h NrRAdm0MqsY86tHBWmDGhNMYjShKm/vG5mMpWg5r3AG3IhG1x/U= =PWZK -----END PGP SIGNATURE----- . Affects: All supported versions of FreeBSD. Background

Modern processors make use of speculative execution, an optimization technique which performs some action in advance of knowing whether the result will actually be used. Impact

An attacker may be able to read secret data from the kernel or from a process when executing untrusted code (for example, in a web browser). Workaround

No workaround is available.

Systems with users or processors in different trust domains should disable Hyper-Threading by setting the machdep.hyperthreading_allowed tunable to 0:

echo 'machdep.hyperthreading_allowed=0 >> /boot/loader.conf'

shutdown

V. Solution

Perform one of the following:

Update CPU microcode, upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date, evaluate mitigation and Hyper Threading controls, and reboot the system. Ensure that the BIOS update or devcpu-data package is dated after 2014-05-14.

If using the package or port the microcode update can be applied at boot time by adding the following lines to the system's /boot/loader.conf:

cpu_microcode_load="YES" cpu_microcode_name="/boot/firmware/intel-ucode.bin"

Microcode updates can also be applied while the system is running. See cpucontrol(8) for details.

1) To update your vulnerable system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:

freebsd-update fetch

freebsd-update install

Follow additional details under "Mitigation Configuration" below.

2) To update your vulnerable system via a source code patch:

The following patches have been verified to apply to the applicable FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.

[FreeBSD 12.0-STABLE]

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12-stable.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12-stable.patch.asc

gpg --verify mds.12-stable.patch.asc

[FreeBSD 12.0-RELEASE]

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12.0.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12.0.patch.asc

gpg --verify mds.12.0.patch.asc

[FreeBSD 11.3-PRERELEASE]

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11-stable.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11-stable.patch.asc

gpg --verify mds.11-stable.patch.asc

[FreeBSD 11.2-RELEASE]

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11.2.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11.2.patch.asc

gpg --verify mds.11.2.patch.asc

b) Apply the patch. Execute the following commands as root:

cd /usr/src

patch < /path/to/patch

c) Recompile your kernel as described in .

Mitigation Configuration

Systems with users, processes, or virtual machines in different trust domains should disable Hyper-Threading by setting the machdep.hyperthreading_allowed tunable to 0:

echo machdep.hyperthreading_allowed=0 >> /boot/loader.conf

To activate the MDS mitigation set the hw.mds_disable sysctl. The settings are:

0 - mitigation disabled 1 - VERW instruction (microcode) mitigation enabled 2 - Software sequence mitigation enabled (not recommended) 3 - Automatic VERW or Software selection

Automatic mode uses the VERW instruction if supported by the CPU / microcode, or software sequences if not. To enable automatic mode at boot:

echo hw.mds_disable=3 >> /etc/sysctl.conf

Reboot the system:

shutdown -r +10min "Security update"

Check the mitigation status:

sysctl hw.mds_disable_state

hw.mds_disable_state: software Silvermont

VI. Correction details

The following list contains the correction revision numbers for each affected branch.

Branch/path Revision

stable/12/ r347567 releng/12.0/ r346594 stable/11/ r347568 releng/11.2/ r347595

To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:

svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

VII

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201905-0709",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "microarchitectural store buffer data sampling",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "xeon scalable processors",
        "scope": null,
        "trust": 0.6,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "6th generation core processors",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "0"
      },
      {
        "model": "5th generation core processors",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "0"
      },
      {
        "model": "8th generation core processors",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "0"
      },
      {
        "model": "7th generation core processors",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "0"
      },
      {
        "model": "xeon processor e3 family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "v60"
      },
      {
        "model": "xeon processor e5 family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "v40"
      },
      {
        "model": "xeon processor e7 family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "v40"
      },
      {
        "model": "xeon processor e3 family",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "intel",
        "version": "v4"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "152926"
      },
      {
        "db": "PACKETSTORM",
        "id": "152896"
      },
      {
        "db": "PACKETSTORM",
        "id": "152903"
      },
      {
        "db": "PACKETSTORM",
        "id": "152878"
      }
    ],
    "trust": 0.4
  },
  "cve": "CVE-2018-12126",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.4,
            "id": "CVE-2018-12126",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.0,
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.4,
            "id": "CNVD-2019-22231",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.4,
            "id": "VHN-122054",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:L/AC:M/AU:N/C:C/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.1,
            "id": "CVE-2018-12126",
            "impactScore": 4.0,
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2018-12126",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2019-22231",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-122054",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf. Intel Xeon Scalable Processors and so on are products of Intel Corporation of the United States. Intel XeonScalable Processors is a scalable server central processing unit (CPU). IntelXeonProcessorE7v4Family is a XeonE7 series server central processing unit (CPU). IntelXeonProcessorE5v4Family is a XeonE5 series server central processing unit (CPU). An information disclosure vulnerability exists in several Intel products. The vulnerability stems from errors in the configuration of the network system or product during operation. An unauthorized attacker can exploit the vulnerability to obtain sensitive information about the affected component. The following products and versions are affected: Intel Xeon Scalable Processors; Xeon Processor E7 v4 Family; Xeon Processor E5 v4 Family; Xeon Processor E3 v6 Family; Xeon Processor E3 v4 Family; Xeon Processor E; Xeon E Processor; Xeon D Processor; Puma; Pentium Processor Silver Series; Pentium Processor N Series; Pentium Processor J Series; Pentium Gold Processor Series; Mobile Communications Platforms; Microcode; Core X series Processors; Celeron Processor N Series; Celeron Processor J Series; Celeron Processor G Series; Atom Processor X Series ;Atom Processor E3900 Series;Atom Processor E3800 Series;Atom Processor. Description:\n\nThe VDSM service is required by a Virtualization Manager to manage the\nLinux hosts. VDSM manages and monitors the host\u0027s storage, memory and\nnetworks as well as virtual machine creation, other host administration\ntasks, statistics gathering, and log collection. 7.2) - noarch, x86_64\n\n3. Description:\n\nThe kernel packages contain the Linux kernel, the core of any Linux\noperating system. \n\nBug Fix(es):\n\n* rwsem in inconsistent state leading system to hung (BZ#1690318)\n\n4. \n\nThis update provides additional support for some Sandybridge server\nand Core-X CPUs which were not covered in the original May microcode\nrelease. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n============================================================================\nFreeBSD-SA-19:26.mcu                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          Intel CPU Microcode Update\n\nCategory:       3rd party\nModule:         Intel CPU microcode\nAnnounced:      2019-11-12\nCredits:        Intel\nAffects:        All supported versions of FreeBSD running on certain\n\t\tIntel CPUs. \nCVE Name:       CVE-2019-11135, CVE-2019-11139, CVE-2018-12126,\n                CVE-2018-12127, CVE-2018-12130, CVE-2018-11091,\n                CVE-2017-5715\n\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e.   Background\n\n- From time to time Intel releases new CPU microcode to address functional\nissues and security vulnerabilities.  Such a release is also known as a\nMicro Code Update (MCU), and is a component of a broader Intel Platform\nUpdate (IPU).  FreeBSD distributes CPU microcode via the devcpu-data port\nand package. \n\nII.  Problem Description\n\nStarting with version 1.26, the devcpu-data port/package includes updates and\nmitigations for the following technical and security advisories (depending\non CPU model). \n\nIntel TSX Updates (TAA)                 CVE-2019-11135\nVoltage Modulation Vulnerability        CVE-2019-11139\nMD_CLEAR Operations                     CVE-2018-12126\n                                        CVE-2018-12127\n                                        CVE-2018-12130\n                                        CVE-2018-11091\nTA Indirect Sharing                     CVE-2017-5715\nEGETKEY                                 CVE-2018-12126\n                                        CVE-2018-12127\n                                        CVE-2018-12130\n                                        CVE-2018-11091\nJCC                                     SKX102 Erratum\n\nUpdated microcode includes mitigations for CPU issues, but may also cause a\nperformance regression due to the JCC erratum mitigation.  Please visit\nhttp://www.intel.com/benchmarks for further information. \n\nPlease visit http://www.intel.com/security for detailed information on\nthese advisories as well as a list of CPUs that are affected. \n\nIII. Impact\n\nOperating a CPU without the latest microcode may result in erratic or\nunpredictable behavior, including system crashes and lock ups.  Certain\nissues listed in this advisory may result in the leakage of privileged\nsystem information to unprivileged users. \n\nIV.  Workaround\n\nTo determine if TSX is present in your system, run the following:\n\n1. kldload cpuctl\n\n2. cpucontrol -i 7 /dev/cpuctl0\n\nIf bits 4 (0x10) and 11 (0x800) are set in the second response word (EBX),\nTSX is present. \n\nIn the absence of updated microcode, TAA can be mitigated by enabling the\nMDS mitigation:\n\n3. sysctl hw.mds_disable=1\n\nSystems must be running FreeBSD 11.3, FreeBSD 12.1, or later for this to\nwork. \n\n*IMPORTANT*\nIf your use case can tolerate leaving the CPU issues unmitigated and cannot\ntolerate a performance regression, ensure that the devcpu-data package is\nnot installed or is locked at 1.25 or earlier. \n\n# pkg delete devcpu-data\n\nor\n\n# pkg lock devcpu-data\n\nLater versions of the LLVM and GCC compilers will include changes that\npartially relieve the peformance impact. \n\nV.   Solution\n\nInstall the latest Intel Microcode Update via the devcpu-data port/package,\nversion 1.26 or later. \n\nUpdated microcode adds the ability to disable TSX.  With updated microcode\nthe issue can still be mitigated by enabling the MDS mitigation as\ndescribed in the workaround section, or by disabling TSX instead:\n\n1. kldload cpuctl\n\n2. cpucontrol -i 7 /dev/cpuctl0\n\nIf bit 29 (0x20000000) is set in the fourth response word (EDX), then the\n0x10a MSR is present. cpucontrol -m 0x10a /dev/cpuctl0\n\nIf bit 8 (0x100) of the response word is set, your CPU is not vulnerable to\nTAA and no further action is required. \n\nIf bit 7 (0x80) is cleared, then your CPU does not have updated microcode\nthat facilitates TSX to be disabled.  The only remedy available is to\nenable the MDS mitigation, as documented above. cpucontrol -m 0x122=3 /dev/cpuctl0\n\nRepeat step 4 for each numbered CPU that is present. \n\nA future kernel change to FreeBSD will provide automatic detection and\nmitigation for TAA. \n\nLLVM 9.0 will be updated in FreeBSD 13-current to address the JCC\npeformance impact.  Updates to prior versions of LLVM are currently being\nevaluated. \n\nVI.  Correction details\n\nThere are currently no changes in FreeBSD to address this issue. \n\nVII. ==========================================================================\nUbuntu Security Notice USN-3979-1\nMay 14, 2019\n\nlinux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 19.04\n\nSummary:\n\nSeveral security issues were fixed in the Linux kernel. \n\nSoftware Description:\n- linux: Linux kernel\n- linux-aws: Linux kernel for Amazon Web Services (AWS) systems\n- linux-azure: Linux kernel for Microsoft Azure Cloud systems\n- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems\n- linux-kvm: Linux kernel for cloud environments\n- linux-raspi2: Linux kernel for Raspberry Pi 2\n\nDetails:\n\nKe Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan\nHorea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa\nMilburn, Sebastian \\xd6sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos,\nCristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss\ndiscovered that memory previously stored in microarchitectural fill buffers\nof an Intel CPU core may be exposed to a malicious process that is\nexecuting on the same CPU core. (CVE-2018-12130)\n\nBrandon Falk, Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Stephan\nvan Schaik, Alyssa Milburn, Sebastian \\xd6sterlund, Pietro Frigo, Kaveh\nRazavi, Herbert Bos, and Cristiano Giuffrida discovered that memory\npreviously stored in microarchitectural load ports of an Intel CPU core may\nbe exposed to a malicious process that is executing on the same CPU core. \n(CVE-2018-12127)\n\nKe Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Marina Minkin, Daniel\nMoghimi, Moritz Lipp, Michael Schwarz, Jo Van Bulck, Daniel Genkin, Daniel\nGruss, Berk Sunar, Frank Piessens, and Yuval Yarom discovered that memory\npreviously stored in microarchitectural store buffers of an Intel CPU core\nmay be exposed to a malicious process that is executing on the same CPU\ncore. \n(CVE-2018-12126)\n\nKe Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Volodrmyr Pikhur,\nMoritz Lipp, Michael Schwarz, Daniel Gruss, Stephan van Schaik, Alyssa\nMilburn, Sebastian \\xd6sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and\nCristiano Giuffrida discovered that uncacheable memory previously stored in\nmicroarchitectural buffers of an Intel CPU core may be exposed to a\nmalicious process that is executing on the same CPU core. (CVE-2019-11091)\n\nIt was discovered that the IPv4 generic receive offload (GRO) for UDP\nimplementation in the Linux kernel did not properly handle padded packets. \nA remote attacker could use this to cause a denial of service (system\ncrash). (CVE-2019-11683)\n\nIt was discovered that a race condition existed in the Binder IPC driver\nfor the Linux kernel. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2019-1999)\n\nMatteo Croce, Natale Vinto, and Andrea Spagnolo discovered that the cgroups\nsubsystem of the Linux kernel did not properly account for SCTP socket\nbuffers. A local attacker could use this to cause a denial of service\n(system crash). (CVE-2019-3874)\n\nAlex Williamson discovered that the vfio subsystem of the Linux kernel did\nnot properly limit DMA mappings. A local attacker could use this to cause a\ndenial of service (memory exhaustion). (CVE-2019-3882)\n\nMarc Orr discovered that the KVM hypervisor implementation in the Linux\nkernel did not properly restrict APIC MSR register values when nested\nvirtualization is used. An attacker in a guest vm could use this to cause a\ndenial of service (host OS crash). (CVE-2019-3887)\n\nHugues Anguelkov discovered that the Broadcom Wifi driver in the Linux\nkernel contained a head puffer overflow. A physically proximate attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2019-9500)\n\nHugues Anguelkov discovered that the Broadcom Wifi driver in the Linux\nkernel did not properly prevent remote firmware events from being processed\nfor USB Wifi devices. A physically proximate attacker could use this to\nsend firmware events to the device. (CVE-2019-9503)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 19.04:\n  linux-image-5.0.0-1006-aws      5.0.0-1006.6\n  linux-image-5.0.0-1006-azure    5.0.0-1006.6\n  linux-image-5.0.0-1006-gcp      5.0.0-1006.6\n  linux-image-5.0.0-1006-kvm      5.0.0-1006.6\n  linux-image-5.0.0-1008-raspi2   5.0.0-1008.8\n  linux-image-5.0.0-15-generic    5.0.0-15.16\n  linux-image-5.0.0-15-generic-lpae  5.0.0-15.16\n  linux-image-5.0.0-15-lowlatency  5.0.0-15.16\n  linux-image-aws                 5.0.0.1006.6\n  linux-image-azure               5.0.0.1006.6\n  linux-image-gcp                 5.0.0.1006.6\n  linux-image-generic             5.0.0.15.16\n  linux-image-generic-lpae        5.0.0.15.16\n  linux-image-gke                 5.0.0.1006.6\n  linux-image-kvm                 5.0.0.1006.6\n  linux-image-lowlatency          5.0.0.15.16\n  linux-image-raspi2              5.0.0.1008.5\n  linux-image-virtual             5.0.0.15.16\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nPlease note that fully mitigating the Microarchitectural Data Sampling\n(MDS) issues (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and\nCVE-2019-11091) requires corresponding processor microcode/firmware\nupdates or, in virtual environments, hypervisor updates. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Important: libvirt security update\nAdvisory ID:       RHSA-2019:1186-01\nProduct:           Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2019:1186\nIssue date:        2019-05-14\nCVE Names:         CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 \n                   CVE-2019-11091 \n=====================================================================\n\n1. Summary:\n\nAn update for libvirt is now available for Red Hat Enterprise Linux 7.2\nAdvanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update\nSupport, and Red Hat Enterprise Linux 7.2 Update Services for SAP\nSolutions. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Server AUS (v. 7.2) - x86_64\nRed Hat Enterprise Linux Server E4S (v. 7.2) - x86_64\nRed Hat Enterprise Linux Server Optional AUS (v. 7.2) - x86_64\nRed Hat Enterprise Linux Server Optional E4S (v. 7.2) - x86_64\nRed Hat Enterprise Linux Server Optional TUS (v. 7.2) - x86_64\nRed Hat Enterprise Linux Server TUS (v. 7.2) - x86_64\n\n3. Description:\n\nThe libvirt library contains a C API for managing and interacting with the\nvirtualization capabilities of Linux and other operating systems. In\naddition, libvirt provides tools for remote management of virtualized\nsystems. \n\nSecurity Fix(es):\n\n* A flaw was found in the implementation of the \"fill buffer\", a mechanism\nused by modern CPUs when a cache-miss is made on L1 CPU cache. If an\nattacker can generate a load operation that would create a page fault, the\nexecution will continue speculatively with incorrect data from the fill\nbuffer while the data is fetched from higher level caches. This response\ntime can be measured to infer data in the fill buffer. (CVE-2018-12130)\n\n* Modern Intel microprocessors implement hardware-level micro-optimizations\nto improve the performance of writing data back to CPU caches. The write\noperation is split into STA (STore Address) and STD (STore Data)\nsub-operations. These sub-operations allow the processor to hand-off\naddress generation logic into these sub-operations for optimized writes. \nBoth of these sub-operations write to a shared distributed processor\nstructure called the \u0027processor store buffer\u0027. As a result, an unprivileged\nattacker could use this flaw to read private data resident within the CPU\u0027s\nprocessor store buffer. (CVE-2018-12126)\n\n* Microprocessors use a \u2018load port\u2019 subcomponent to perform load operations\nfrom memory or IO. During a load operation, the load port receives data\nfrom the memory or IO subsystem and then provides the data to the CPU\nregisters and operations in the CPU\u2019s pipelines. Stale load operations\nresults are stored in the \u0027load port\u0027 table until overwritten by newer\noperations. Certain load-port operations triggered by an attacker can be\nused to reveal data about previous stale requests leaking data back to the\nattacker via a timing side-channel. (CVE-2019-11091)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, libvirtd will be restarted\nautomatically. \n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1646781 - CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)\n1646784 - CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)\n1667782 - CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)\n1705312 - CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)\n\n6. Package List:\n\nRed Hat Enterprise Linux Server AUS (v. 7.2):\n\nSource:\nlibvirt-1.2.17-13.el7_2.10.src.rpm\n\nx86_64:\nlibvirt-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-client-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-client-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-config-network-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-config-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-interface-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-lxc-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-network-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-nodedev-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-qemu-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-secret-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-storage-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-kvm-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-devel-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-devel-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-docs-1.2.17-13.el7_2.10.x86_64.rpm\n\nRed Hat Enterprise Linux Server E4S (v. 7.2):\n\nSource:\nlibvirt-1.2.17-13.el7_2.10.src.rpm\n\nx86_64:\nlibvirt-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-client-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-client-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-config-network-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-config-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-interface-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-lxc-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-network-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-nodedev-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-qemu-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-secret-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-storage-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-kvm-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-devel-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-devel-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-docs-1.2.17-13.el7_2.10.x86_64.rpm\n\nRed Hat Enterprise Linux Server TUS (v. 7.2):\n\nSource:\nlibvirt-1.2.17-13.el7_2.10.src.rpm\n\nx86_64:\nlibvirt-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-client-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-client-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-config-network-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-config-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-interface-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-lxc-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-network-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-nodedev-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-nwfilter-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-qemu-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-secret-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-driver-storage-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-daemon-kvm-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-devel-1.2.17-13.el7_2.10.i686.rpm\nlibvirt-devel-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-docs-1.2.17-13.el7_2.10.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional AUS (v. 7.2):\n\nx86_64:\nlibvirt-daemon-lxc-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-lock-sanlock-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-login-shell-1.2.17-13.el7_2.10.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional E4S (v. 7.2):\n\nx86_64:\nlibvirt-daemon-lxc-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-lock-sanlock-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-login-shell-1.2.17-13.el7_2.10.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional TUS (v. 7.2):\n\nx86_64:\nlibvirt-daemon-lxc-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-debuginfo-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-lock-sanlock-1.2.17-13.el7_2.10.x86_64.rpm\nlibvirt-login-shell-1.2.17-13.el7_2.10.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2018-12126\nhttps://access.redhat.com/security/cve/CVE-2018-12127\nhttps://access.redhat.com/security/cve/CVE-2018-12130\nhttps://access.redhat.com/security/cve/CVE-2019-11091\nhttps://access.redhat.com/security/vulnerabilities/mds\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2019 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niQIVAwUBXNspY9zjgjWX9erEAQhYSQ/+IUAyZl0LnpfmMs2b4cWyhab2xcuwg0vH\nvwW0ba3+TmjGHt+fwMEAaA4/sSnEbquIbJbCu8fx4KHz3Z9bS+Bz203+EYoAkX6W\n47MphBHQYJSRKXk2J1IYNMFRD/zCuAXMU5C0wZ2M8a28TTVEXh7qnz1iPbvQsc2U\nvDEptwBjGTuqtYg7c4n2Q0wEIrlOx9cWrBPupbVYvTLQEjXD1HNTdKd76p2xvV43\np2uP0rrEypU8Isq44/3l9jkZipjx6AoVAxdTaCJ1hpXTNb8UblnGiDTY03kdAdvH\nALSG99xmBSOymJ0XMw0t4I0LVhKRcdM/Z+xvIKhfu2TTJzCC5yFWIVYXISDGTbJj\nvz8M3KfcFwZF+PZZTurd1koLRTvw99l9vtNxwOEyoFaCueOEjW3nd4q8RZKdvpbV\n4ZidTKtbRTNGpAZ2mz7O5EIDBB0N6g23bU5BW8Mzc5jeyJBpMJb+qPXhKXh4iMmi\n5ySGrAeuUoOMR7Aa+S5dq6o7lu8wiMhiYlrxQjNLH1iCN6geHi7iiCMuR6PN+Hn2\ntprWi2lNFlSgf2VFTewiy7cJYMJ8P5O77TpSfWJasxN+MD+bjt4Oc0ywTCA32m1a\nGsk+5KntQlVDT1QbuJWvV/02/+khz7Oxq3yIDWlJePrRRufknyOJXTADDcsiUAG7\nLXhfb/N/qQY=\n=W0lI\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. 6) - i386, x86_64\n\n3. Description:\n\nKernel-based Virtual Machine (KVM) is a full virtualization solution for\nLinux on a variety of architectures. The qemu-kvm packages provide the\nuser-space component for running virtual machines that use KVM. Once\nall virtual machines have shut down, start them again for this update to\ntake effect. It\nprovides mitigations for the MSBDS, MFBDS, MLPDS and MDSUM hardware\nvulnerabilities. \n\nTo fully resolve these vulnerabilities it is also necessary to update\nthe Linux kernel packages as released in DSA 4444. \n\nFor the stable distribution (stretch), these problems have been fixed in\nversion 3.20190514.1~deb9u1. \n\nWe recommend that you upgrade your intel-microcode packages. \n\nFor the detailed security status of intel-microcode please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/intel-microcode\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n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\nNrRAdm0MqsY86tHBWmDGhNMYjShKm/vG5mMpWg5r3AG3IhG1x/U=\n=PWZK\n-----END PGP SIGNATURE-----\n. \nAffects:        All supported versions of FreeBSD.   Background\n\nModern processors make use of speculative execution, an optimization\ntechnique which performs some action in advance of knowing whether the\nresult will actually be used. Impact\n\nAn attacker may be able to read secret data from the kernel or from a\nprocess when executing untrusted code (for example, in a web browser).  Workaround\n\nNo workaround is available. \n\nSystems with users or processors in different trust domains should disable\nHyper-Threading by setting the machdep.hyperthreading_allowed tunable to 0:\n\n# echo \u0027machdep.hyperthreading_allowed=0 \u003e\u003e /boot/loader.conf\u0027\n# shutdown\n\nV.   Solution\n\nPerform one of the following:\n\nUpdate CPU microcode, upgrade your vulnerable system to a supported FreeBSD\nstable or release / security branch (releng) dated after the correction date,\nevaluate mitigation and Hyper Threading controls, and reboot the system. \nEnsure that the BIOS update or devcpu-data package is dated after 2014-05-14. \n\nIf using the package or port the microcode update can be applied at boot time\nby adding the following lines to the system\u0027s /boot/loader.conf:\n\ncpu_microcode_load=\"YES\"\ncpu_microcode_name=\"/boot/firmware/intel-ucode.bin\"\n\nMicrocode updates can also be applied while the system is running.  See\ncpucontrol(8) for details. \n\n1) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nFollow additional details under \"Mitigation Configuration\" below. \n\n2) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 12.0-STABLE]\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12-stable.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12-stable.patch.asc\n# gpg --verify mds.12-stable.patch.asc\n\n[FreeBSD 12.0-RELEASE]\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12.0.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12.0.patch.asc\n# gpg --verify mds.12.0.patch.asc\n\n[FreeBSD 11.3-PRERELEASE]\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11-stable.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11-stable.patch.asc\n# gpg --verify mds.11-stable.patch.asc\n\n[FreeBSD 11.2-RELEASE]\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11.2.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11.2.patch.asc\n# gpg --verify mds.11.2.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile your kernel as described in\n\u003cURL:https://www.FreeBSD.org/handbook/kernelconfig.html\u003e. \n\nMitigation Configuration\n\nSystems with users, processes, or virtual machines in different trust\ndomains should disable Hyper-Threading by setting the\nmachdep.hyperthreading_allowed tunable to 0:\n\n# echo machdep.hyperthreading_allowed=0 \u003e\u003e /boot/loader.conf\n\nTo activate the MDS mitigation set the hw.mds_disable sysctl.  The settings\nare:\n\n0 - mitigation disabled\n1 - VERW instruction (microcode) mitigation enabled\n2 - Software sequence mitigation enabled (not recommended)\n3 - Automatic VERW or Software selection\n\nAutomatic mode uses the VERW instruction if supported by the CPU / microcode,\nor software sequences if not.  To enable automatic mode at boot:\n\n# echo hw.mds_disable=3 \u003e\u003e /etc/sysctl.conf\n\nReboot the system:\n\n# shutdown -r +10min \"Security update\"\n\nCheck the mitigation status:\n\n# sysctl hw.mds_disable_state\nhw.mds_disable_state: software Silvermont\n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/12/                                                        r347567\nreleng/12.0/                                                      r346594\nstable/11/                                                        r347568\nreleng/11.2/                                                      r347595\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2018-12126"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "db": "PACKETSTORM",
        "id": "152952"
      },
      {
        "db": "PACKETSTORM",
        "id": "152926"
      },
      {
        "db": "PACKETSTORM",
        "id": "152896"
      },
      {
        "db": "PACKETSTORM",
        "id": "153379"
      },
      {
        "db": "PACKETSTORM",
        "id": "155281"
      },
      {
        "db": "PACKETSTORM",
        "id": "152913"
      },
      {
        "db": "PACKETSTORM",
        "id": "152903"
      },
      {
        "db": "PACKETSTORM",
        "id": "152878"
      },
      {
        "db": "PACKETSTORM",
        "id": "152942"
      },
      {
        "db": "PACKETSTORM",
        "id": "152908"
      },
      {
        "db": "PACKETSTORM",
        "id": "152936"
      }
    ],
    "trust": 2.52
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2018-12126",
        "trust": 2.8
      },
      {
        "db": "PACKETSTORM",
        "id": "155281",
        "trust": 1.2
      },
      {
        "db": "MCAFEE",
        "id": "SB10292",
        "trust": 1.1
      },
      {
        "db": "SIEMENS",
        "id": "SSA-616472",
        "trust": 1.1
      },
      {
        "db": "SIEMENS",
        "id": "SSA-608355",
        "trust": 1.1
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "152908",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152903",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152936",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152896",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152952",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152878",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152913",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152942",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152926",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "153379",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152939",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152899",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152902",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152891",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152907",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152938",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152911",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152919",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "153389",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "155956",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152922",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152904",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152900",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152886",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152884",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154188",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152885",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152882",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152924",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152905",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152916",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152875",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152898",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152894",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152874",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152889",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152931",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152918",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152895",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "156920",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152962",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152892",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "153248",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152927",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152890",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152932",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152925",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152888",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152920",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152901",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152923",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152879",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152937",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152887",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152876",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152929",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152921",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152880",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152935",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152906",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152881",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152893",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "153049",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152917",
        "trust": 0.1
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201905-621",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-122054",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "db": "PACKETSTORM",
        "id": "152952"
      },
      {
        "db": "PACKETSTORM",
        "id": "152926"
      },
      {
        "db": "PACKETSTORM",
        "id": "152896"
      },
      {
        "db": "PACKETSTORM",
        "id": "153379"
      },
      {
        "db": "PACKETSTORM",
        "id": "155281"
      },
      {
        "db": "PACKETSTORM",
        "id": "152913"
      },
      {
        "db": "PACKETSTORM",
        "id": "152903"
      },
      {
        "db": "PACKETSTORM",
        "id": "152878"
      },
      {
        "db": "PACKETSTORM",
        "id": "152942"
      },
      {
        "db": "PACKETSTORM",
        "id": "152908"
      },
      {
        "db": "PACKETSTORM",
        "id": "152936"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "id": "VAR-201905-0709",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "db": "VULHUB",
        "id": "VHN-122054"
      }
    ],
    "trust": 1.420027655
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      }
    ]
  },
  "last_update_date": "2024-11-29T20:38:28.298000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patches for multiple Intel Product Information Disclosure Vulnerabilities (CNVD-2019-22231)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/168513"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-200",
        "trust": 1.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.1,
        "url": "https://seclists.org/bugtraq/2019/jun/28"
      },
      {
        "trust": 1.1,
        "url": "https://seclists.org/bugtraq/2019/jun/36"
      },
      {
        "trust": 1.1,
        "url": "https://seclists.org/bugtraq/2019/nov/16"
      },
      {
        "trust": 1.1,
        "url": "https://seclists.org/bugtraq/2019/nov/15"
      },
      {
        "trust": 1.1,
        "url": "https://seclists.org/bugtraq/2020/jan/21"
      },
      {
        "trust": 1.1,
        "url": "http://www.arubanetworks.com/assets/alert/aruba-psa-2019-003.txt"
      },
      {
        "trust": 1.1,
        "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
      },
      {
        "trust": 1.1,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
      },
      {
        "trust": 1.1,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
      },
      {
        "trust": 1.1,
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
      },
      {
        "trust": 1.1,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_24"
      },
      {
        "trust": 1.1,
        "url": "https://www.debian.org/security/2020/dsa-4602"
      },
      {
        "trust": 1.1,
        "url": "https://www.freebsd.org/security/advisories/freebsd-sa-19:07.mds.asc"
      },
      {
        "trust": 1.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:26.mcu.asc"
      },
      {
        "trust": 1.1,
        "url": "https://security.gentoo.org/glsa/202003-56"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/155281/freebsd-security-advisory-freebsd-sa-19-26.mcu.html"
      },
      {
        "trust": 1.1,
        "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:1455"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:2553"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
      },
      {
        "trust": 1.1,
        "url": "https://usn.ubuntu.com/3977-3/"
      },
      {
        "trust": 1.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-12126"
      },
      {
        "trust": 1.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-12130"
      },
      {
        "trust": 1.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-12127"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-11091"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/oh73sgtj575obcpsjfx6lx7kp2kzien4/"
      },
      {
        "trust": 1.0,
        "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10292"
      },
      {
        "trust": 0.6,
        "url": "https://usn.ubuntu.com/3977-1/"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2019-11091"
      },
      {
        "trust": 0.4,
        "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/vulnerabilities/mds"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2018-12127"
      },
      {
        "trust": 0.4,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2018-12130"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2018-12126"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.2,
        "url": "https://security-tracker.debian.org/tracker/intel-microcode"
      },
      {
        "trust": 0.2,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.2,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.2,
        "url": "https://security.freebsd.org/\u003e."
      },
      {
        "trust": 0.2,
        "url": "https://wiki.ubuntu.com/securityteam/knowledgebase/mds"
      },
      {
        "trust": 0.1,
        "url": "https://kc.mcafee.com/corporate/index?page=content\u0026amp;id=sb10292"
      },
      {
        "trust": 0.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/oh73sgtj575obcpsjfx6lx7kp2kzien4/"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/libvirt/1.3.1-1ubuntu10.26"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/libvirt/4.6.0-2ubuntu3.5"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/libvirt/4.0.0-1ubuntu8.10"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3985-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/libvirt/5.0.0-1ubuntu2.1"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/articles/2974891"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:1204"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:1172"
      },
      {
        "trust": 0.1,
        "url": "https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/sa00233-microcode-update-guidance_05132019.pdf"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-12126\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11091\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-11139"
      },
      {
        "trust": 0.1,
        "url": "https://software.intel.com/security-software-guidance/software-guidance/intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-12130\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-12127\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-5715\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11139\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://blogs.intel.com/technology/2019/11/ipas-november-2019-intel-platform-update-ipu/\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11135\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.intel.com/content/www/us/en/support/articles/000055650.html\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-5715"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:26.mcu.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "http://www.intel.com/benchmarks"
      },
      {
        "trust": 0.1,
        "url": "http://www.intel.com/security"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-11091"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-11135"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9503"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-3874"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-1999"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9500"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-azure/5.0.0-1006.6"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-raspi2/5.0.0-1008.8"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-gcp/5.0.0-1006.6"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-aws/5.0.0-1006.6"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-3887"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux/5.0.0-15.16"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-11683"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3979-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/linux-kvm/5.0.0-1006.6"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-3882"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:1186"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2019:1181"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/intel-microcode/3.20190514.0ubuntu0.18.10.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/intel-microcode/3.20190514.0ubuntu0.19.04.1"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3977-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/intel-microcode/3.20190514.0ubuntu0.16.04.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/intel-microcode/3.20190514.0ubuntu0.18.04.2"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.12-stable.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.12-stable.patch"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.11.2.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.12.0.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.12.0.patch"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.11-stable.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.11-stable.patch"
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:07/mds.11.2.patch"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:07.mds.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/kernelconfig.html\u003e."
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "db": "PACKETSTORM",
        "id": "152952"
      },
      {
        "db": "PACKETSTORM",
        "id": "152926"
      },
      {
        "db": "PACKETSTORM",
        "id": "152896"
      },
      {
        "db": "PACKETSTORM",
        "id": "153379"
      },
      {
        "db": "PACKETSTORM",
        "id": "155281"
      },
      {
        "db": "PACKETSTORM",
        "id": "152913"
      },
      {
        "db": "PACKETSTORM",
        "id": "152903"
      },
      {
        "db": "PACKETSTORM",
        "id": "152878"
      },
      {
        "db": "PACKETSTORM",
        "id": "152942"
      },
      {
        "db": "PACKETSTORM",
        "id": "152908"
      },
      {
        "db": "PACKETSTORM",
        "id": "152936"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "db": "PACKETSTORM",
        "id": "152952"
      },
      {
        "db": "PACKETSTORM",
        "id": "152926"
      },
      {
        "db": "PACKETSTORM",
        "id": "152896"
      },
      {
        "db": "PACKETSTORM",
        "id": "153379"
      },
      {
        "db": "PACKETSTORM",
        "id": "155281"
      },
      {
        "db": "PACKETSTORM",
        "id": "152913"
      },
      {
        "db": "PACKETSTORM",
        "id": "152903"
      },
      {
        "db": "PACKETSTORM",
        "id": "152878"
      },
      {
        "db": "PACKETSTORM",
        "id": "152942"
      },
      {
        "db": "PACKETSTORM",
        "id": "152908"
      },
      {
        "db": "PACKETSTORM",
        "id": "152936"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-07-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "date": "2019-05-30T00:00:00",
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "date": "2019-05-16T23:04:15",
        "db": "PACKETSTORM",
        "id": "152952"
      },
      {
        "date": "2019-05-15T15:41:04",
        "db": "PACKETSTORM",
        "id": "152926"
      },
      {
        "date": "2019-05-15T15:21:28",
        "db": "PACKETSTORM",
        "id": "152896"
      },
      {
        "date": "2019-06-21T19:32:22",
        "db": "PACKETSTORM",
        "id": "153379"
      },
      {
        "date": "2019-11-12T21:46:17",
        "db": "PACKETSTORM",
        "id": "155281"
      },
      {
        "date": "2019-05-15T15:29:38",
        "db": "PACKETSTORM",
        "id": "152913"
      },
      {
        "date": "2019-05-15T15:23:27",
        "db": "PACKETSTORM",
        "id": "152903"
      },
      {
        "date": "2019-05-15T15:04:38",
        "db": "PACKETSTORM",
        "id": "152878"
      },
      {
        "date": "2019-05-15T15:59:12",
        "db": "PACKETSTORM",
        "id": "152942"
      },
      {
        "date": "2019-05-15T15:24:45",
        "db": "PACKETSTORM",
        "id": "152908"
      },
      {
        "date": "2019-05-15T15:47:43",
        "db": "PACKETSTORM",
        "id": "152936"
      },
      {
        "date": "2019-05-30T16:29:00.870000",
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-07-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      },
      {
        "date": "2019-06-11T00:00:00",
        "db": "VULHUB",
        "id": "VHN-122054"
      },
      {
        "date": "2024-11-21T03:44:38.583000",
        "db": "NVD",
        "id": "CVE-2018-12126"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "152952"
      },
      {
        "db": "PACKETSTORM",
        "id": "152913"
      },
      {
        "db": "PACKETSTORM",
        "id": "152908"
      },
      {
        "db": "PACKETSTORM",
        "id": "152936"
      }
    ],
    "trust": 0.4
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Multiple Intel Product Information Disclosure Vulnerabilities (CNVD-2019-22231)",
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-22231"
      }
    ],
    "trust": 0.6
  }
}

cve-2018-12126

Vulnerability from cvelistv5

Published

2019-05-30 15:36

Modified

2024-08-05 08:30

Severity ?

Summary

References

▼	URL	Tags
	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html	x_refsource_CONFIRM
	https://www.synology.com/security/advisory/Synology_SA_19_24	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:1455	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3977-3/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html	mailing-list, x_refsource_MLIST
	https://seclists.org/bugtraq/2019/Jun/28	mailing-list, x_refsource_BUGTRAQ
	https://seclists.org/bugtraq/2019/Jun/36	mailing-list, x_refsource_BUGTRAQ
	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf	x_refsource_CONFIRM
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html	vendor-advisory, x_refsource_SUSE
	https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc	vendor-advisory, x_refsource_FREEBSD
	https://access.redhat.com/errata/RHSA-2019:2553	vendor-advisory, x_refsource_REDHAT
	https://kc.mcafee.com/corporate/index?page=content&id=SB10292	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc	vendor-advisory, x_refsource_FREEBSD
	https://seclists.org/bugtraq/2019/Nov/16	mailing-list, x_refsource_BUGTRAQ
	https://seclists.org/bugtraq/2019/Nov/15	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html	x_refsource_MISC
	https://www.debian.org/security/2020/dsa-4602	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2020/Jan/21	mailing-list, x_refsource_BUGTRAQ
	https://security.gentoo.org/glsa/202003-56	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

▼

Intel Corporation

Central ProcCVE-2018-12126essing Units (CPUs)

Version: A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:57.443Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
          },
          {
            "name": "FEDORA-2019-1f5832fc0e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
          },
          {
            "name": "openSUSE-SU-2019:1505",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
          },
          {
            "name": "RHSA-2019:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1455"
          },
          {
            "name": "USN-3977-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3977-3/"
          },
          {
            "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/28"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
          },
          {
            "name": "openSUSE-SU-2019:1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
          },
          {
            "name": "openSUSE-SU-2019:1806",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
          },
          {
            "name": "FreeBSD-SA-19:07",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
          },
          {
            "name": "RHSA-2019:2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "name": "FreeBSD-SA-19:26",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
          },
          {
            "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/16"
          },
          {
            "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
          },
          {
            "name": "DSA-4602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4602"
          },
          {
            "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/21"
          },
          {
            "name": "GLSA-202003-56",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-56"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Central ProcCVE-2018-12126essing Units (CPUs)",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        }
      ],
      "datePublic": "2019-05-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-26T14:06:17",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
        },
        {
          "name": "FEDORA-2019-1f5832fc0e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
        },
        {
          "name": "openSUSE-SU-2019:1505",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
        },
        {
          "name": "RHSA-2019:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1455"
        },
        {
          "name": "USN-3977-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3977-3/"
        },
        {
          "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/28"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
        },
        {
          "name": "openSUSE-SU-2019:1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
        },
        {
          "name": "openSUSE-SU-2019:1806",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
        },
        {
          "name": "FreeBSD-SA-19:07",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
        },
        {
          "name": "RHSA-2019:2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "name": "FreeBSD-SA-19:26",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
        },
        {
          "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/16"
        },
        {
          "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
        },
        {
          "name": "DSA-4602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4602"
        },
        {
          "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/21"
        },
        {
          "name": "GLSA-202003-56",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-56"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2018-12126",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Central ProcCVE-2018-12126essing Units (CPUs)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
            },
            {
              "name": "https://www.synology.com/security/advisory/Synology_SA_19_24",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
            },
            {
              "name": "FEDORA-2019-1f5832fc0e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
            },
            {
              "name": "openSUSE-SU-2019:1505",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
            },
            {
              "name": "RHSA-2019:1455",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1455"
            },
            {
              "name": "USN-3977-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3977-3/"
            },
            {
              "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/28"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/36"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
            },
            {
              "name": "openSUSE-SU-2019:1805",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
            },
            {
              "name": "openSUSE-SU-2019:1806",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
            },
            {
              "name": "FreeBSD-SA-19:07",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
            },
            {
              "name": "RHSA-2019:2553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2553"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "FreeBSD-SA-19:26",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
            },
            {
              "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/16"
            },
            {
              "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/15"
            },
            {
              "name": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
            },
            {
              "name": "DSA-4602",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4602"
            },
            {
              "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/21"
            },
            {
              "name": "GLSA-202003-56",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-56"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-12126",
    "datePublished": "2019-05-30T15:36:05",
    "dateReserved": "2018-06-11T00:00:00",
    "dateUpdated": "2024-08-05T08:30:57.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

var-201905-0709

Vulnerability from variot

pkg delete devcpu-data

pkg lock devcpu-data

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities

echo 'machdep.hyperthreading_allowed=0 >> /boot/loader.conf'

shutdown

freebsd-update fetch

freebsd-update install

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12-stable.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12-stable.patch.asc

gpg --verify mds.12-stable.patch.asc

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12.0.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.12.0.patch.asc

gpg --verify mds.12.0.patch.asc

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11-stable.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11-stable.patch.asc

gpg --verify mds.11-stable.patch.asc

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11.2.patch

fetch https://security.FreeBSD.org/patches/SA-19:07/mds.11.2.patch.asc

gpg --verify mds.11.2.patch.asc

cd /usr/src

patch < /path/to/patch

echo machdep.hyperthreading_allowed=0 >> /boot/loader.conf

echo hw.mds_disable=3 >> /etc/sysctl.conf

shutdown -r +10min "Security update"

sysctl hw.mds_disable_state

svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

cve-2018-12126

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature