Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8Upgrade xen | Aug 22, 2024 | May 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade java-1.7.0-openjdk-srcUpgrade libvirt-login-shellUpgrade qemu-kvm-toolsUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.7.0-openjdk-debuginfoUpgrade java-1.8.0-openjdkUpgrade perfUpgrade kernel-headersUpgrade java-1.7.0-openjdk-accessibilityUpgrade libvirt-daemon-config-networkUpgrade java-1.8.0-openjdk-develUpgrade kernel-debuginfoUpgrade java-1.8.0-openjdk-src-debugUpgrade libvirt-daemon-driver-qemuUpgrade java-1.7.0-openjdk-demoUpgrade qemu-kvmUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade libvirt-nssUpgrade java-1.8.0-openjdk-debugUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-javadocUpgrade python-perfUpgrade libvirt-docsUpgrade java-1.7.0-openjdk-headlessUpgrade libvirt-daemon-driver-lxcUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade libvirt-daemon-driver-nwfilterUpgrade java-1.8.0-openjdk-headlessUpgrade libvirt-debuginfoUpgrade java-1.8.0-openjdk-accessibilityUpgrade python-perf-debuginfoUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.7.0-openjdkUpgrade libvirtUpgrade kernel-tools-develUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade libvirt-daemon-driver-interfaceUpgrade java-1.7.0-openjdk-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-commonUpgrade libvirt-clientUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-iscsiUpgrade java-1.8.0-openjdk-demo-debugUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade kernel-develUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-adminUpgrade kernelUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-lxcUpgrade kernel-debuginfo-common-x86_64Upgrade libvirt-daemon-driver-storage-diskUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade java-1.8.0-openjdk-demoUpgrade libvirt-daemon-driver-storageUpgrade java-1.8.0-openjdk-debuginfoUpgrade kernel-toolsUpgrade java-1.8.0-openjdk-src | Apr 27, 2020 | May 22, 2018 |
| Amazon_linux | — | Upgrade java-1.7.0-openjdkUpgrade qemu-kvmUpgrade java-1.8.0-openjdkUpgrade kernel | Jun 12, 2018 | May 21, 2018 |
| Apple Osx Efi | — | Apply Apple macOS Security Update 2018-002 High Sierra | Oct 31, 2018 | May 22, 2018 |
| Centos_linux | — | Upgrade java-1.8.0-openjdk-accessibility-debugUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storageUpgrade kernel-rtUpgrade libvirt-daemon-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-adminUpgrade libvirt-libsUpgrade java-1.7.0-openjdk-accessibilityUpgrade libvirt-daemon-driver-storage-coreUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade kernelUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-imgUpgrade libvirt-daemon-config-nwfilterUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-srcUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-secretUpgrade java-1.7.0-openjdk-javadocUpgrade libvirt-clientUpgrade qemu-kvmUpgrade libvirt-pythonUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-toolsUpgrade java-1.8.0-openjdk-devel-debugUpgrade libvirtUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-debuginfoUpgrade java-1.7.0-openjdk-develUpgrade libvirt-docsUpgrade libvirt-nssUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-accessibilityUpgrade libvirt-daemon-driver-networkUpgrade java-1.8.0-openjdk-demoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade libvirt-daemon-config-networkUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-headlessUpgrade libvirt-login-shellUpgrade java-1.8.0-openjdk-demo-debugUpgrade libvirt-daemon-driver-lxcUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-headlessUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-commonUpgrade java-1.7.0-openjdk-srcUpgrade libvirt-daemon-driver-qemuUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-src-debug | May 24, 2018 | May 21, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | May 22, 2018 |
| Debian | — | Upgrade linuxUpgrade intel-microcodeUpgrade xen | May 26, 2018 | May 21, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 10, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storageUpgrade libvirt-client | Jun 20, 2018 | May 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Jul 3, 2018 | May 22, 2018 |
| Ibm Aix | — | Apply the fix or workaround for spectre_meltdown_advisoryApply the fix or workaround for variant4_advisoryApply the fix or workaround for spectre_update_advisory | Jun 15, 2018 | May 22, 2018 |
| Oracle Solaris | — | Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/browser/firefox to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.3.0.1.5.0 on Solaris 11.4Upgrade mail/thunderbird to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 19, 2018 | May 22, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 23, 2018 | May 21, 2018 |
| Redhat_linux | — | Upgrade libvirt-libsUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade java-1.7.0-openjdk-javadocUpgrade libvirt-daemon-driver-storage-scsiUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-debuginfoUpgrade java-1.8.0-openjdk-javadocUpgrade libvirt-daemon-driver-storage-logicalNo solution existsUpgrade libvirt-daemon-driver-storage-diskUpgrade java-1.8.0-openjdk-devel-debugUpgrade libvirt-debuginfoUpgrade java-1.7.0-openjdk-accessibilityUpgrade kernel-rtUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-glusterUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-debuginfoUpgrade libvirt-daemon-driver-lxcUpgrade java-1.7.0-openjdk-develUpgrade libvirt-develUpgrade java-1.8.0-openjdk-headless-debugUpgrade libvirt-daemon-config-nwfilterUpgrade java-1.8.0-openjdk-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-networkUpgrade java-1.8.0-openjdk-srcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-login-shellUpgrade libvirt-adminUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvmUpgrade libvirt-daemon-config-networkUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-demoUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade kernelUpgrade libvirt-daemon-kvmUpgrade libvirt-docsUpgrade java-1.7.0-openjdk-src | May 22, 2018 | May 21, 2018 |
| Suse | — | Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-xenUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade libvirt-daemon-lxcUpgrade libvirt-clientUpgrade kernel-default-extraUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-hw-usb-redirectUpgrade libvirt-adminUpgrade qemu-vgabiosUpgrade libvirt-daemon-driver-lxcUpgrade qemu-ksmUpgrade libvirt-daemon-config-networkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-chardev-baumUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade qemu-ui-spice-appUpgrade libvirt-daemon-driver-nwfilterUpgrade kernel-obs-buildUpgrade qemu-toolsUpgrade qemu-langUpgrade java-1_8_0-openjdk-headlessUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade qemu-microvmUpgrade qemu-ppcUpgrade java-1_8_0-openjdk-develUpgrade qemu-ui-gtkUpgrade qemu-audio-ossUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade qemu-seabiosUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-libxlUpgrade kernel-docsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade qemu-kvmUpgrade qemu-skibootUpgrade libvirt-daemon-driver-secretUpgrade qemu-s390Upgrade xenUpgrade qemu-audio-paUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-audio-alsaUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-hooksUpgrade kernel-default-manUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-ipxeUpgrade libvirt-daemon-driver-nodedevUpgrade xen-libsUpgrade kernel-devel-azureUpgrade qemu-ui-cursesUpgrade libvirt-lock-sanlockUpgrade libvirt-libsUpgrade qemuUpgrade qemu-s390xUpgrade qemu-x86Upgrade libvirt-daemon-driver-networkUpgrade xen-develUpgrade kernel-source-azureUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade ucode-intelUpgrade java-1_8_0-openjdk-demoUpgrade libvirt-docUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade java-1_8_0-openjdkUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-chardev-spiceUpgrade xen-tools-domUUpgrade qemu-audio-spiceUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpu | May 22, 2018 | May 21, 2018 |
| Ubuntu | — | Upgrade linux-image-4.13.0-43-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade intel-microcodeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-1028-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-149-powerpc64-embUpgrade linux-image-3.13.0-149-powerpc64-smpUpgrade linux-image-4.4.0-127-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1025-azureUpgrade linux-image-4.4.0-127-genericUpgrade linux-image-3.13.0-149-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-4.15.0-1009-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-22-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-trustyUpgrade qemu-systemUpgrade linux-image-4.4.0-127-powerpc-e500mcUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-3.13.0-149-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-127-lowlatencyUpgrade linux-image-4.15.0-22-generic-lpaeUpgrade linux-image-4.4.0-127-generic-lpaeUpgrade linux-image-4.15.0-22-genericUpgrade libvirt-binUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-3.13.0-149-powerpc-smpUpgrade linux-image-azure-edgeUpgrade linux-image-4.13.0-43-lowlatencyUpgrade linux-image-4.4.0-1026-kvmUpgrade linux-image-4.15.0-1010-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-149-lowlatencyUpgrade linux-image-3.13.0-149-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-43-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-127-powerpc64-smpUpgrade linux-image-4.13.0-1018-azureUpgrade libvirt0Upgrade qemuUpgrade linux-image-3.13.0-149-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-127-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade qemu-system-x86Upgrade linux-image-4.15.0-1008-gcpUpgrade linux-image-4.13.0-1017-gcpUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-azure | May 23, 2018 | May 21, 2018 |
| Vmsa 2018 0012 | — | Upgrade VMware ESXi 5.5 to build number 8934887Upgrade VMware ESXi 6.7 to build number 8941472Upgrade VMware ESXi 6.0 to build number 8934903Upgrade VMware ESXi 6.5 to build number 8935087 | Aug 2, 2018 | May 22, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub