Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Aug 14, 2018 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Aug 14, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 15, 2018 | Aug 10, 2018 |
| Apple Osx Hypervisor | — | Apply Apple macOS Security Update 2018-002 High Sierra | Oct 31, 2018 | Aug 14, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 16, 2018 | Aug 15, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Aug 14, 2018 |
| Debian | — | Upgrade linuxUpgrade xenUpgrade intel-microcode | Aug 17, 2018 | Aug 15, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 4, 2018 |
| Freebsd | — | Upgrade FreeBSD | Aug 23, 2018 | Aug 22, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 31, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Sep 4, 2018 | Aug 14, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.3.0.1.5.0 on Solaris 11.4 | Nov 19, 2018 | Aug 14, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2018 | Aug 14, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade xen-tools-domUUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-azure-baseUpgrade dpdk-thunderx-develUpgrade dpdk-develUpgrade kernel-default-manUpgrade xen-libsUpgrade xen-toolsUpgrade xen-develUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade xenUpgrade kernel-devel-azureUpgrade kernel-docs-azureUpgrade kernel-docs | Aug 15, 2018 | Aug 15, 2018 |
| Ubuntu | — | Upgrade linux-image-3.2.0-137-virtualUpgrade linux-image-highbankUpgrade linux-image-4.4.0-133-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-133-powerpc64-embUpgrade linux-image-4.15.0-32-genericUpgrade linux-image-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-3.2.0-137-omapUpgrade linux-image-4.15.0-32-generic-lpaeUpgrade linux-image-3.2.0-137-powerpc-smpUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade intel-microcodeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-4.15.0-1015-oemUpgrade linux-image-4.15.0-1019-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.2.0-137-generic-paeUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1019-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1017-gcpUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-generic-paeUpgrade linux-image-3.13.0-155-genericUpgrade linux-image-3.2.0-137-highbankUpgrade linux-image-oemUpgrade linux-image-4.15.0-1020-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-32-snapdragonUpgrade linux-image-powerpcUpgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-3.2.0-137-genericUpgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-omapUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1021-azureUpgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-3.2.0-137-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-4.15.0-32-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-lowlatency | Aug 18, 2018 | Aug 15, 2018 |
| Vmsa 2018 0020 | — | Upgrade VMware ESXi 6.5 to build number 9298722Upgrade VMware ESXi 6.7 to build number 9484548Upgrade VMware ESXi 5.5 to build number 9313066Upgrade VMware ESXi 6.0 to build number 8967301 | Aug 17, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub