CVE-2018-3639

Aliases:UBUNTU-CVE-2018-3639DEBIAN-CVE-2018-3639
Advisory lineage Upstream: 0 Downstream: 189
Modified
Published: 22 May 2018, 12:00
Last modified:29 May 2026, 20:14

Vulnerability Summary

Overall Risk (default)
medium
44/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
60.63% CRITICAL
61% probability +21.54%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

22 May 2018, 12:00
Published
Vulnerability first disclosed
29 May 2026, 20:14
Last Modified
Vulnerability information updated

Description

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 60.63%• Percentile: 99%

Techniques & Countermeasures

  • CWE-203•Observable Discrepancy

    The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

Affected Systems

  • arm•cortex-a

    15 | 57 | 72

  • canonical•ubuntu_linux

    12.04 | 14.04 | 16.04 | 17.10 | 18.04

  • debian•intel-microcode

    < 3.20180703.1 | < 3.20180703.1 | < 3.20180703.1 | < 3.20180703.1

  • debian•linux

    < 4.16.12-1 | < 4.16.12-1 | < 4.16.12-1 | < 4.16.12-1

  • debian•xen

    < 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7 | < 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7 | < 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7 | < 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7

  • ubuntu•intel-microcode

    < 3.20180807a.0ubuntu0.14.04.1 | < 3.20180807a.0ubuntu0.16.04.1 | < 3.20180807a.0ubuntu0.18.04.1

  • ubuntu•libvirt

    < 1.2.2-0ubuntu13.1.27 | < 1.3.1-1ubuntu10.24 | < 4.0.0-1ubuntu8.2

  • ubuntu•linux

    < 3.13.0-149.199 | < 4.4.0-127.153 | < 4.15.0-22.24

  • ubuntu•linux-aws

    < 4.4.0-1022.22 | < 4.4.0-1060.69 | < 4.15.0-1009.9

  • ubuntu•linux-azure

    < 4.13.0-1018.21 | < 4.15.0-1012.12

  • ubuntu•linux-azure-fde-5.15

    < 5.15.0-1114.123~20.04.1

  • ubuntu•linux-bluefield

    all

  • ubuntu•linux-fips

    < 4.4.0-1008.10

  • ubuntu•linux-gcp

    < 4.13.0-1017.21 | < 4.15.0-1008.8

  • ubuntu•linux-hwe

    < 4.13.0-43.48~16.04.1

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-kvm

    < 4.4.0-1026.31 | < 4.15.0-1010.10

  • ubuntu•linux-lts-xenial

    < 4.4.0-127.153~14.04.1

  • ubuntu•linux-oem

    < 4.13.0-1028.31 | < 4.15.0-1006.9

  • ubuntu•linux-raspi-realtime

    all

  • ubuntu•linux-raspi2

    < 4.4.0-1091.99 | < 4.15.0-1012.13

  • ubuntu•linux-realtime

    all

  • ubuntu•linux-snapdragon

    < 4.4.0-1094.99 | < 4.15.0-1053.57

  • ubuntu•qemu

    < 2.0.0+dfsg-2ubuntu1.42 | < 1:2.5+dfsg-5ubuntu10.29 | < 1:2.11+dfsg-1ubuntu7.2

  • ubuntu•xen

    all

  • debian•debian_linux

    8.0 | 9.0

  • intel corporation•multiple

    Multiple

  • intel•atom_c

    c2308 | c3308 | c3338 | c3508 | c3538 | c3558 | c3708 | c3750 | c3758 | c3808 | c3830 | c3850 | c3858 | c3950 | c3955 | c3958

  • intel•atom_e

    e3805 | e3815 | e3825 | e3826 | e3827 | e3845

  • intel•atom_x5-e3930_firmware

    na

  • intel•atom_x5-e3940_firmware

    na

  • intel•atom_x7-e3950_firmware

    na

  • intel•atom_z

    z2420 | z2460 | z2480 | z2520 | z2560 | z2580 | z2760 | z3460 | z3480 | z3530 | z3560 | z3570 | z3580 | z3590 | z3735d | z3735e | z3735f | z3735g | z3736f | z3736g | z3740 | z3740d | z3745 | z3745d | z3770 | z3770d | z3775 | z3775d | z3785 | z3795

  • intel•celeron_j

    j3455 | j4005 | j4105

  • intel•celeron_n

    n3450

  • intel•core_i3

    32nm | 45nm

  • intel•core_i5

    32nm | 45nm

  • intel•core_i7

    32nm | 45nm

  • intel•core_m

    32nm | 45nm

  • intel•pentium

    n4000 | n4100 | n4200

  • intel•pentium_j

    j4205

  • intel•pentium_silver

    j5005 | n5000

  • intel•xeon_e-1105c_firmware

    na

  • intel•xeon_e3

    125c_ | 1220_ | 1275_ | 1505m_v6 | 1515m_v5 | 1535m_v5 | 1535m_v6 | 1545m_v5 | 1558l_v5 | 1565l_v5 | 1575m_v5 | 1578l_v5 | 1585_v5 | 1585l_v5 | 3600 | 5600 | 7500 | e5502 | e5503 | e5504 | e5506 | e5507 | e5520 | e5530 | e5540 | e6510 | e6540 | e6550 | l3403 | l3406 | l3426 | l5506 | l5508_ | l5518_ | l5520 | l5530 | w5580 | w5590 | x3430 | x3440 | x3450 | x3460 | x3470 | x3480 | x5550 | x5560 | x5570

  • intel•xeon_e3_1105c_v2

    na

  • intel•xeon_e3_1125c_v2

    na

  • intel•xeon_e3_1220_v2

    na

  • intel•xeon_e3_1220_v3

    na

  • intel•xeon_e3_1220_v5

    na

  • intel•xeon_e3_1220_v6

    na

Showing first 50 affected entries in server-rendered view.

References (162)