Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade intel-ucode | Mar 6, 2018 | Jan 4, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-docUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Apr 27, 2020 | Jan 4, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 4, 2018 | Jan 3, 2018 |
| Apple Osx Kernel | — | Apply OS X security update 2018-001 SierraApply OS X security update 2018-001 El CapitanUpgrade macOS to the latest version | Jan 5, 2018 | Jan 5, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 4, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 18, 2018 | Jan 3, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Jan 4, 2018 |
| Debian | — | Upgrade xenUpgrade linuxUpgrade nvidia-graphics-drivers | Jan 5, 2018 | Jan 3, 2018 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 8, 2018 | Jan 4, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 4, 2018 |
| Freebsd | — | Upgrade FreeBSD | Mar 15, 2018 | Mar 14, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen. | Oct 31, 2018 | Jan 4, 2018 |
| Ibm Aix | — | Apply the fix or workaround for spectre_meltdown_advisory | Jan 26, 2018 | Jan 4, 2018 |
| Msft | — | Microsoft ADV180002 Guidance to mitigate speculative execution side-channel vulnerabilities | Feb 1, 2018 | Jan 3, 2018 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade driver/graphics/nvidiaR340 to version 0.340.104.0-0.175.3.29.0.4.0 on Solaris 11.3Upgrade driver/graphics/nvidia to version 0.384.111.0-0.175.3.29.0.4.0 on Solaris 11.3Upgrade web/browser/firefox/plugin/firefox-java to version 52.6.0-0.175.3.29.0.3.0 on Solaris 11.3Upgrade web/browser/firefox to version 52.6.0-0.175.3.29.0.3.0 on Solaris 11.3Upgrade driver/graphics/nvidiaR304 to version 0.304.137.0-0.175.3.29.0.4.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 52.6.0-0.175.3.29.0.3.0 on Solaris 11.3Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Feb 22, 2018 | Jan 4, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 24, 2018 | Jan 3, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 17, 2018 | Jan 3, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade xen-develUpgrade webkit2gtk3-develUpgrade kernel-defaultUpgrade kernel-docs | Jan 4, 2018 | Jan 3, 2018 |
| Ubuntu | — | Upgrade linux-image-4.13.0-25-genericUpgrade linux-image-gcpUpgrade linux-image-4.13.0-1015-oemUpgrade linux-image-4.4.0-1049-awsUpgrade linux-image-4.4.0-112-genericUpgrade linux-image-4.13.0-1006-azureUpgrade linux-image-4.4.0-1015-kvmUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-112-generic-lpaeUpgrade linux-image-4.4.0-111-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-26-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-1007-gcpUpgrade linux-image-4.4.0-111-genericUpgrade linux-image-4.4.0-108-genericUpgrade linux-image-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-139-genericUpgrade linux-image-3.2.0-132-generic-paeUpgrade linux-image-4.4.0-112-lowlatencyUpgrade linux-image-generic-paeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.13.0-37-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-112-powerpc64-embUpgrade firefoxUpgrade linux-image-3.13.0-139-generic-lpaeUpgrade linux-image-4.13.0-1017-oemUpgrade linux-image-4.4.0-112-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.13.0-25-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-37-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.13.0-1015-raspi2Upgrade linux-image-4.4.0-1011-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.13.0-31-lowlatencyUpgrade linux-image-3.2.0-132-genericUpgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-112-powerpc64-smpUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-9023-euclidUpgrade linux-image-3.13.0-139-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-108-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1009-awsUpgrade linux-image-4.13.0-31-genericUpgrade linux-image-4.4.0-111-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.4.0-112-powerpc-smpUpgrade linux-image-4.13.0-1005-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1047-awsUpgrade linux-image-4.13.0-37-generic-lpaeUpgrade linux-image-4.4.0-111-powerpc-smpUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-26-genericUpgrade linux-image-euclidUpgrade linux-image-4.4.0-111-powerpc64-smpUpgrade linux-image-4.4.0-111-lowlatencyUpgrade linux-image-4.13.0-1006-gcpUpgrade linux-image-4.4.0-9021-euclidUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-4.13.0-26-lowlatency | Jan 6, 2018 | Jan 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub