Medium · published November 16, 2018
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
| Product | Versions | Fixed in |
|---|---|---|
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| nodejs/node.js | < 6.14.4 | 6.14.4 |
| nodejs/node.js | ≥ 8.0.0, < 8.11.4 | 8.11.4 |
| nodejs/node.js | ≥ 10.0.0, < 10.9.0 | 10.9.0 |
| openssl/openssl | ≥ 1.0.2, < 1.0.2q | 1.0.2q |
| openssl/openssl | ≥ 1.1.0, < 1.1.0i | 1.1.0i |
| tenable/nessus | < 8.1.1 | 8.1.1 |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/tuxedo | all versions | — |
| oracle/vm_virtualbox | < 6.0.0 | 6.0.0 |
| oracle/api_gateway | all versions | — |
| oracle/application_server | all versions | — |
| oracle/application_server | all versions | — |
| oracle/application_server | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/mysql_enterprise_backup | ≤ 3.12.3 | — |
| oracle/mysql_enterprise_backup | ≥ 3.12.4, ≤ 4.1.2 | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | ≥ 17.7, ≤ 17.12 | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_eus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |