vulnerability
FreeBSD: VID-2310B814-A652-11E8-805B-A4BADB2F4699 (CVE-2018-3646): FreeBSD -- L1 Terminal Fault (L1TF) Kernel Information Disclosure
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:M/Au:N/C:C/I:N/A:N) | 08/14/2018 | 08/23/2018 | 05/03/2019 |
Severity
5
CVSS
(AV:L/AC:M/Au:N/C:C/I:N/A:N)
Published
08/14/2018
Added
08/23/2018
Modified
05/03/2019
Description
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
Solution(s)
freebsd-upgrade-base-11_1-release-p13freebsd-upgrade-base-11_2-release-p2
References
- BID-105080
- SECTRACK-1041451
- SECTRACK-1042004
- REDHAT-RHSA-2018:2384
- REDHAT-RHSA-2018:2387
- REDHAT-RHSA-2018:2388
- REDHAT-RHSA-2018:2389
- REDHAT-RHSA-2018:2390
- REDHAT-RHSA-2018:2391
- REDHAT-RHSA-2018:2392
- REDHAT-RHSA-2018:2393
- REDHAT-RHSA-2018:2394
- REDHAT-RHSA-2018:2395
- REDHAT-RHSA-2018:2396
- REDHAT-RHSA-2018:2402
- REDHAT-RHSA-2018:2403
- REDHAT-RHSA-2018:2404
- REDHAT-RHSA-2018:2602
- REDHAT-RHSA-2018:2603
- FREEBSD-FreeBSD-SA-18:09
- GENTOO-GLSA-201810-06
- UBUNTU-USN-3740-1
- UBUNTU-USN-3740-2
- UBUNTU-USN-3741-1
- UBUNTU-USN-3741-2
- UBUNTU-USN-3741-3
- UBUNTU-USN-3742-1
- UBUNTU-USN-3742-2
- UBUNTU-USN-3742-3
- UBUNTU-USN-3756-1
- UBUNTU-USN-3823-1
- DEBIAN-DSA-4274
- DEBIAN-DSA-4279
- NVD-CVE-2018-3646
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.