Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Aug 14, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf | Apr 27, 2020 | Aug 14, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 15, 2018 | Aug 10, 2018 |
| Apple Osx Hypervisor | — | Apply OS X security update 2018-002 High Sierra | Oct 31, 2018 | Aug 14, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 16, 2018 | Aug 15, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Aug 14, 2018 |
| Debian | — | Upgrade xenUpgrade intel-microcodeUpgrade linux | Aug 17, 2018 | Aug 15, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 4, 2018 |
| Freebsd | — | Upgrade FreeBSD | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 31, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64 | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Sep 4, 2018 | Aug 14, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.3.0.1.5.0 on Solaris 11.4 | Nov 19, 2018 | Aug 14, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2018 | Aug 14, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade xen-tools-xendomains-wait-diskUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade dpdk-thunderx-develUpgrade kernel-obs-buildUpgrade dpdk-develUpgrade kernel-docs-azureUpgrade kernel-source-azureUpgrade xen-libsUpgrade xen-tools-domuUpgrade kernel-default-manUpgrade xen-toolsUpgrade kernel-devel-azureUpgrade xenUpgrade kernel-default-extraUpgrade kernel-docsUpgrade xen-devel | Aug 15, 2018 | Aug 15, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-133-powerpc64-embUpgrade linux-image-3.2.0-137-powerpc-smpUpgrade linux-image-4.15.0-1015-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-4.15.0-32-generic-lpaeUpgrade linux-image-3.2.0-137-omapUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-3.2.0-137-generic-paeUpgrade linux-image-3.2.0-137-virtualUpgrade linux-image-4.15.0-32-genericUpgrade linux-image-highbankUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1019-kvmUpgrade linux-image-kvmUpgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-4.4.0-133-powerpc64-smpUpgrade intel-microcodeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-3.2.0-137-genericUpgrade linux-image-4.15.0-1019-awsUpgrade linux-image-4.15.0-1017-gcpUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-4.15.0-1021-azureUpgrade linux-image-generic-paeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-155-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-32-lowlatencyUpgrade linux-image-3.2.0-137-highbankUpgrade linux-image-powerpcUpgrade linux-image-4.15.0-32-snapdragonUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-3.2.0-137-powerpc64-smpUpgrade linux-image-azure-edgeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1020-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-omapUpgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-smp-lts-xenial | Aug 18, 2018 | Aug 15, 2018 |
| Vmsa 2018 0020 | — | Upgrade VMware ESXi 6.7 to build number 9484548Upgrade VMware ESXi 6.5 to build number 9298722Upgrade VMware ESXi 6.0 to build number 8967301Upgrade VMware ESXi 5.5 to build number 9313066 | Aug 17, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub