Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Oct 1, 2024 | Nov 15, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-debuginfoUpgrade openssl-perlUpgrade opensslUpgrade openssl-libsUpgrade openssl-staticUpgrade openssl-devel | Apr 27, 2020 | Nov 15, 2018 |
| Amazon_linux | — | Upgrade openssl | Apr 10, 2019 | Nov 12, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 15, 2018 |
| Centos_linux | — | Upgrade opensslUpgrade OVMFUpgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-staticUpgrade openssl-perl | Apr 1, 2019 | Nov 12, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Nov 12, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 30, 2018 |
| Freebsd | — | Upgrade opensslUpgrade node10Upgrade node6Upgrade nodeUpgrade node8 | Dec 10, 2018 | Dec 10, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Mar 14, 2019 | Nov 15, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Nov 15, 2018 | Nov 15, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl110f-libsUpgrade openssl110f-develUpgrade openssl110f | Jul 23, 2019 | Nov 15, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-libsUpgrade openssl-devel | Dec 31, 2018 | Nov 15, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade opensslUpgrade openssl-libsUpgrade openssl-devel | Apr 3, 2019 | Nov 15, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Aug 28, 2019 | Nov 15, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory29 | Dec 12, 2018 | Nov 15, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.17-11.4.5.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.5.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Nov 15, 2018 |
| Oracle Virtualbox | — | Upgrade Oracle VirtualBox to the latest version | Jul 17, 2025 | Nov 15, 2018 |
| Oracle_linux | — | Upgrade opensslUpgrade OVMFUpgrade openssl-perlUpgrade openssl-staticUpgrade openssl-develUpgrade openssl-libs | Aug 15, 2019 | Oct 30, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Oct 30, 2018 |
| Redhat_linux | — | Upgrade openssl-debuginfoUpgrade OVMFUpgrade openssl-develUpgrade openssl-staticUpgrade openssl-perlUpgrade openssl-libsUpgrade opensslNo solution exists | Mar 14, 2019 | Nov 15, 2018 |
| Suse | — | Upgrade nodejs6-develUpgrade nodejs4-develUpgrade libopenssl-1_0_0-devel-32bitUpgrade nodejs6-docsUpgrade nodejs6Upgrade libopenssl1_0_0-steam-32bitUpgrade openssl-1_0_0Upgrade npm4Upgrade openssl-1_0_0-cavsUpgrade openssl1-docUpgrade openssl-docUpgrade opensslUpgrade libopenssl0_9_8-hmacUpgrade nodejs4-docsUpgrade libopenssl1_0_0-steamUpgrade libopenssl-1_0_0-develUpgrade libopenssl1_0_0-hmacUpgrade libopenssl1_0_0-hmac-32bitUpgrade npm6Upgrade libopenssl0_9_8-hmac-32bitUpgrade openssl-1_0_0-docUpgrade openssl1Upgrade libopenssl10Upgrade nodejs4Upgrade libopenssl-develUpgrade libopenssl1_0_0-x86Upgrade libopenssl0_9_8Upgrade libopenssl-devel-32bitUpgrade libopenssl1-develUpgrade libopenssl1_0_0-32bitUpgrade libopenssl0_9_8-32bitUpgrade libopenssl0_9_8-x86Upgrade libopenssl1_0_0 | Nov 23, 2018 | Nov 12, 2018 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0 | Dec 21, 2018 | Nov 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 15, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub