CVE-2018-3639
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - secure@intel.com
- Published
- 2018-05-22
- Last modified
- 2026-05-29
- Weaknesses
- CWE-203
Affected products
- Cortex-a (Arm)
- Ubuntu Linux (Canonical)
- Debian Linux (Debian)
- Atom C (Intel)
- Atom E (Intel)
- Atom X5-e3930 (Intel)
- Atom X5-e3940 (Intel)
- Atom X7-e3950 (Intel)
- Atom Z (Intel)
- Celeron J (Intel)
- Celeron N (Intel)
- Core I3 (Intel)
- Core I5 (Intel)
- Core I7 (Intel)
- Core M (Intel)
- Pentium (Intel)
- Pentium J (Intel)
- Pentium Silver (Intel)
- Xeon E-1105c (Intel)
- Xeon E3 (Intel)
- Xeon E3 1105c V2 (Intel)
- Xeon E3 1125c V2 (Intel)
- Xeon E3 12201 (Intel)
- Xeon E3 12201 V2 (Intel)
- Xeon E3 1220 V2 (Intel)
- Xeon E3 1220 V3 (Intel)
- Xeon E3 1220 V5 (Intel)
- Xeon E3 1220 V6 (Intel)
- Xeon E3 1220l V3 (Intel)
- Xeon E3 1225 (Intel)
- Xeon E3 1225 V2 (Intel)
- Xeon E3 1225 V3 (Intel)
- Xeon E3 1225 V5 (Intel)
- Xeon E3 1225 V6 (Intel)
- Xeon E3 1226 V3 (Intel)
- Xeon E3 1230 (Intel)
- Xeon E3 1230 V2 (Intel)
- Xeon E3 1230 V3 (Intel)
- Xeon E3 1230 V5 (Intel)
- Xeon E3 1230 V6 (Intel)
- Xeon E3 1230l V3 (Intel)
- Xeon E3 1231 V3 (Intel)
- Xeon E3 1235 (Intel)
- Xeon E3 1235l V5 (Intel)
- Xeon E3 1240 (Intel)
- Xeon E3 1240 V2 (Intel)
- Xeon E3 1240 V3 (Intel)
- Xeon E3 1240 V5 (Intel)
- Xeon E3 1240 V6 (Intel)
- Xeon E3 1240l V3 (Intel)
- Xeon E3 1240l V5 (Intel)
- Xeon E3 1241 V3 (Intel)
- Xeon E3 1245 (Intel)
- Xeon E3 1245 V2 (Intel)
- Xeon E3 1245 V3 (Intel)
- Xeon E3 1245 V5 (Intel)
- Xeon E3 1245 V6 (Intel)
- Xeon E3 1246 V3 (Intel)
- Xeon E3 1258l V4 (Intel)
- Xeon E3 1260l (Intel)
- Xeon E3 1260l V5 (Intel)
- Xeon E3 1265l V2 (Intel)
- Xeon E3 1265l V3 (Intel)
- Xeon E3 1265l V4 (Intel)
- Xeon E3 1268l V3 (Intel)
- Xeon E3 1268l V5 (Intel)
- Xeon E3 1270 (Intel)
- Xeon E3 1270 V2 (Intel)
- Xeon E3 1270 V3 (Intel)
- Xeon E3 1270 V5 (Intel)
- Xeon E3 1270 V6 (Intel)
- Xeon E3 1271 V3 (Intel)
- Xeon E3 1275 V2 (Intel)
- Xeon E3 1275 V3 (Intel)
- Xeon E3 1275 V5 (Intel)
- Xeon E3 1275 V6 (Intel)
- Xeon E3 1275l V3 (Intel)
- Xeon E3 1276 V3 (Intel)
- Xeon E3 1278l V4 (Intel)
- Xeon E3 1280 (Intel)
- Xeon E3 1280 V2 (Intel)
- Xeon E3 1280 V3 (Intel)
- Xeon E3 1280 V5 (Intel)
- Xeon E3 1280 V6 (Intel)
- Xeon E3 1281 V3 (Intel)
- Xeon E3 1285 V3 (Intel)
- Xeon E3 1285 V4 (Intel)
- Xeon E3 1285 V6 (Intel)
- Xeon E3 1285l V3 (Intel)
- Xeon E3 1285l V4 (Intel)
- Xeon E3 1286 V3 (Intel)
- Xeon E3 1286l V3 (Intel)
- Xeon E3 1290 (Intel)
- Xeon E3 1290 V2 (Intel)
- Xeon E3 1501l V6 (Intel)
- Xeon E3 1501m V6 (Intel)
- Xeon E3 1505l V5 (Intel)
- Xeon E3 1505l V6 (Intel)
- Xeon E3 1505m V5 (Intel)
- Xeon E5 (Intel)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html
- http://support.lenovo.com/us/en/solutions/LEN-22133
- http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
- http://www.openwall.com/lists/oss-security/2020/06/10/1
- http://www.openwall.com/lists/oss-security/2020/06/10/2
- http://www.openwall.com/lists/oss-security/2020/06/10/5
- http://www.securityfocus.com/bid/104232
- http://www.securitytracker.com/id/1040949
- http://www.securitytracker.com/id/1042004
- http://xenbits.xen.org/xsa/advisory-263.html
- https://access.redhat.com/errata/RHSA-2018:1629
- https://access.redhat.com/errata/RHSA-2018:1630
- https://access.redhat.com/errata/RHSA-2018:1632
- https://access.redhat.com/errata/RHSA-2018:1633
- https://access.redhat.com/errata/RHSA-2018:1635
- https://access.redhat.com/errata/RHSA-2018:1636
- https://access.redhat.com/errata/RHSA-2018:1637
- https://access.redhat.com/errata/RHSA-2018:1638
- https://access.redhat.com/errata/RHSA-2018:1639
- https://access.redhat.com/errata/RHSA-2018:1640
- https://access.redhat.com/errata/RHSA-2018:1641
- https://access.redhat.com/errata/RHSA-2018:1642
- https://access.redhat.com/errata/RHSA-2018:1643
- https://access.redhat.com/errata/RHSA-2018:1644
- https://access.redhat.com/errata/RHSA-2018:1645
- https://access.redhat.com/errata/RHSA-2018:1646
- https://access.redhat.com/errata/RHSA-2018:1647
- https://access.redhat.com/errata/RHSA-2018:1648
