Vulnerabilities > CVE-2018-5407 - Information Exposure Through Discrepancy vulnerability in multiple products

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Vulnerable Configurations

Part	Description	Count
OS	Canonical Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10	4
OS	Debian Debian Debian Linux 8.0 Debian Debian Linux 9.0	2
OS	Redhat Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server 7.6 Redhat Enterprise Linux Server TUS 7.6 Redhat Enterprise Linux Server EUS 7.6 Redhat Enterprise Linux Server AUS 7.6	7
Application	Nodejs Nodejs Node.Js 10.0.0 Nodejs Node.Js 10.1.0 Nodejs Node.Js 10.2.0 Nodejs Node.Js 10.2.1 Nodejs Node.Js 10.3.0 Nodejs Node.Js 10.4.0 Nodejs Node.Js 10.4.1 Nodejs Node.Js 10.5.0 Nodejs Node.Js 10.6.0 Nodejs Node.Js 10.7.0 Nodejs Node.Js 10.8.0 Nodejs Node.Js 8.0.0 Nodejs Node.Js 8.1.0 Nodejs Node.Js 8.1.1 Nodejs Node.Js 8.1.2 Nodejs Node.Js 8.1.3 Nodejs Node.Js 8.1.4 Nodejs Node.Js 8.2.0 Nodejs Node.Js 8.2.1 Nodejs Node.Js 8.3.0 Nodejs Node.Js 8.4.0 Nodejs Node.Js 8.5.0 Nodejs Node.Js 8.6.0 Nodejs Node.Js 8.7.0 Nodejs Node.Js 8.8.0 Nodejs Node.Js 8.8.1 Nodejs Node.Js 8.9.0 Nodejs Node.Js 8.9.1 Nodejs Node.Js 8.9.2 Nodejs Node.Js 8.9.3 Nodejs Node.Js 8.9.4 Nodejs Node.Js 8.10.0 Nodejs Node.Js 8.11.0 Nodejs Node.Js 8.11.1 Nodejs Node.Js 8.11.2 Nodejs Node.Js 8.11.3 Nodejs Node.Js - Nodejs Node.Js 0.0.1 Nodejs Node.Js 0.0.2 Nodejs Node.Js 0.0.3 Nodejs Node.Js 0.0.4 Nodejs Node.Js 0.0.5 Nodejs Node.Js 0.0.6 Nodejs Node.Js 0.1.0 Nodejs Node.Js 0.1.1 Nodejs Node.Js 0.1.2 Nodejs Node.Js 0.1.3 Nodejs Node.Js 0.1.4 Nodejs Node.Js 0.1.5 Nodejs Node.Js 0.1.6 Nodejs Node.Js 0.1.7 Nodejs Node.Js 0.1.8 Nodejs Node.Js 0.1.9 Nodejs Node.Js 0.1.10 Nodejs Node.Js 0.1.11 Nodejs Node.Js 0.1.12 Nodejs Node.Js 0.1.13 Nodejs Node.Js 0.1.14 Nodejs Node.Js 0.1.15 Nodejs Node.Js 0.1.16 Nodejs Node.Js 0.1.17 Nodejs Node.Js 0.1.18 Nodejs Node.Js 0.1.19 Nodejs Node.Js 0.1.20 Nodejs Node.Js 0.1.21 Nodejs Node.Js 0.1.22 Nodejs Node.Js 0.1.23 Nodejs Node.Js 0.1.24 Nodejs Node.Js 0.1.25 Nodejs Node.Js 0.1.26 Nodejs Node.Js 0.1.27 Nodejs Node.Js 0.1.28 Nodejs Node.Js 0.1.29 Nodejs Node.Js 0.1.30 Nodejs Node.Js 0.1.31 Nodejs Node.Js 0.1.32 Nodejs Node.Js 0.1.33 Nodejs Node.Js 0.1.90 Nodejs Node.Js 0.1.91 Nodejs Node.Js 0.1.92 Nodejs Node.Js 0.1.93 Nodejs Node.Js 0.1.94 Nodejs Node.Js 0.1.95 Nodejs Node.Js 0.1.96 Nodejs Node.Js 0.1.97 Nodejs Node.Js 0.1.98 Nodejs Node.Js 0.1.99 Nodejs Node.Js 0.1.100 Nodejs Node.Js 0.1.101 Nodejs Node.Js 0.1.102 Nodejs Node.Js 0.1.103 Nodejs Node.Js 0.1.104 Nodejs Node.Js 0.2.0 Nodejs Node.Js 0.2.1 Nodejs Node.Js 0.2.2 Nodejs Node.Js 0.2.3 Nodejs Node.Js 0.2.4 Nodejs Node.Js 0.2.5 Nodejs Node.Js 0.2.6 Nodejs Node.Js 0.3.0 Nodejs Node.Js 0.3.1 Nodejs Node.Js 0.3.2 Nodejs Node.Js 0.3.3 Nodejs Node.Js 0.3.4 Nodejs Node.Js 0.3.5 Nodejs Node.Js 0.3.6 Nodejs Node.Js 0.3.7 Nodejs Node.Js 0.3.8 Nodejs Node.Js 0.4.0 Nodejs Node.Js 0.4.1 Nodejs Node.Js 0.4.2 Nodejs Node.Js 0.4.3 Nodejs Node.Js 0.4.4 Nodejs Node.Js 0.4.5 Nodejs Node.Js 0.4.6 Nodejs Node.Js 0.4.7 Nodejs Node.Js 0.4.8 Nodejs Node.Js 0.4.9 Nodejs Node.Js 0.4.10 Nodejs Node.Js 0.4.11 Nodejs Node.Js 0.4.12 Nodejs Node.Js 0.5.0 Nodejs Node.Js 0.5.1 Nodejs Node.Js 0.5.2 Nodejs Node.Js 0.5.3 Nodejs Node.Js 0.5.4 Nodejs Node.Js 0.5.5 Nodejs Node.Js 0.5.6 Nodejs Node.Js 0.5.7 Nodejs Node.Js 0.5.8 Nodejs Node.Js 0.5.9 Nodejs Node.Js 0.5.10 Nodejs Node.Js 0.6.0 Nodejs Node.Js 0.6.1 Nodejs Node.Js 0.6.2 Nodejs Node.Js 0.6.3 Nodejs Node.Js 0.6.4 Nodejs Node.Js 0.6.5 Nodejs Node.Js 0.6.6 Nodejs Node.Js 0.6.7 Nodejs Node.Js 0.6.8 Nodejs Node.Js 0.6.9 Nodejs Node.Js 0.6.10 Nodejs Node.Js 0.6.11 Nodejs Node.Js 0.6.12 Nodejs Node.Js 0.6.13 Nodejs Node.Js 0.6.14 Nodejs Node.Js 0.6.15 Nodejs Node.Js 0.6.16 Nodejs Node.Js 0.6.17 Nodejs Node.Js 0.6.18 Nodejs Node.Js 0.6.19 Nodejs Node.Js 0.6.20 Nodejs Node.Js 0.6.21 Nodejs Node.Js 0.7.0 Nodejs Node.Js 0.7.1 Nodejs Node.Js 0.7.2 Nodejs Node.Js 0.7.3 Nodejs Node.Js 0.7.4 Nodejs Node.Js 0.7.5 Nodejs Node.Js 0.7.6 Nodejs Node.Js 0.7.7 Nodejs Node.Js 0.7.8 Nodejs Node.Js 0.7.9 Nodejs Node.Js 0.7.10 Nodejs Node.Js 0.7.11 Nodejs Node.Js 0.7.12 Nodejs Node.Js 0.8.0 Nodejs Node.Js 0.8.1 Nodejs Node.Js 0.8.2 Nodejs Node.Js 0.8.3 Nodejs Node.Js 0.8.4 Nodejs Node.Js 0.8.5 Nodejs Node.Js 0.8.6 Nodejs Node.Js 0.8.7 Nodejs Node.Js 0.8.8 Nodejs Node.Js 0.8.9 Nodejs Node.Js 0.8.10 Nodejs Node.Js 0.8.11 Nodejs Node.Js 0.8.12 Nodejs Node.Js 0.8.13 Nodejs Node.Js 0.8.14 Nodejs Node.Js 0.8.15 Nodejs Node.Js 0.8.16 Nodejs Node.Js 0.8.17 Nodejs Node.Js 0.8.18 Nodejs Node.Js 0.8.19 Nodejs Node.Js 0.8.20 Nodejs Node.Js 0.8.21 Nodejs Node.Js 0.8.22 Nodejs Node.Js 0.8.23 Nodejs Node.Js 0.8.24 Nodejs Node.Js 0.8.25 Nodejs Node.Js 0.8.26 Nodejs Node.Js 0.8.27 Nodejs Node.Js 0.8.28 Nodejs Node.Js 0.9.0 Nodejs Node.Js 0.9.1 Nodejs Node.Js 0.9.2 Nodejs Node.Js 0.9.3 Nodejs Node.Js 0.9.4 Nodejs Node.Js 0.9.5 Nodejs Node.Js 0.9.6 Nodejs Node.Js 0.9.7 Nodejs Node.Js 0.9.8 Nodejs Node.Js 0.9.9 Nodejs Node.Js 0.9.10 Nodejs Node.Js 0.9.11 Nodejs Node.Js 0.9.12 Nodejs Node.Js 0.10.0 Nodejs Node.Js 0.10.1 Nodejs Node.Js 0.10.2 Nodejs Node.Js 0.10.3 Nodejs Node.Js 0.10.4 Nodejs Node.Js 0.10.5 Nodejs Node.Js 0.10.6 Nodejs Node.Js 0.10.7 Nodejs Node.Js 0.10.8 Nodejs Node.Js 0.10.9 Nodejs Node.Js 0.10.10 Nodejs Node.Js 0.10.11 Nodejs Node.Js 0.10.12 Nodejs Node.Js 0.10.13 Nodejs Node.Js 0.10.14 Nodejs Node.Js 0.10.15 Nodejs Node.Js 0.10.16 Nodejs Node.Js 0.10.16-Isaacs-Manual Nodejs Node.Js 0.10.17 Nodejs Node.Js 0.10.18 Nodejs Node.Js 0.10.19 Nodejs Node.Js 0.10.20 Nodejs Node.Js 0.10.21 Nodejs Node.Js 0.10.22 Nodejs Node.Js 0.10.23 Nodejs Node.Js 0.10.24 Nodejs Node.Js 0.10.25 Nodejs Node.Js 0.10.26 Nodejs Node.Js 0.10.27 Nodejs Node.Js 0.10.28 Nodejs Node.Js 0.10.29 Nodejs Node.Js 0.10.30 Nodejs Node.Js 0.10.31 Nodejs Node.Js 0.10.32 Nodejs Node.Js 0.10.33 Nodejs Node.Js 0.10.34 Nodejs Node.Js 0.10.35 Nodejs Node.Js 0.10.36 Nodejs Node.Js 0.10.37 Nodejs Node.Js 0.10.38 Nodejs Node.Js 0.10.39 Nodejs Node.Js 0.10.40 Nodejs Node.Js 0.10.41 Nodejs Node.Js 0.10.42 Nodejs Node.Js 0.10.43 Nodejs Node.Js 0.10.44 Nodejs Node.Js 0.10.45 Nodejs Node.Js 0.10.46 Nodejs Node.Js 0.10.47 Nodejs Node.Js 0.10.48 Nodejs Node.Js 0.11.0 Nodejs Node.Js 0.11.1 Nodejs Node.Js 0.11.2 Nodejs Node.Js 0.11.3 Nodejs Node.Js 0.11.4 Nodejs Node.Js 0.11.5 Nodejs Node.Js 0.11.6 Nodejs Node.Js 0.11.7 Nodejs Node.Js 0.11.8 Nodejs Node.Js 0.11.9 Nodejs Node.Js 0.11.10 Nodejs Node.Js 0.11.11 Nodejs Node.Js 0.11.12 Nodejs Node.Js 0.11.13 Nodejs Node.Js 0.11.14 Nodejs Node.Js 0.11.15 Nodejs Node.Js 0.11.16 Nodejs Node.Js 0.12.0 Nodejs Node.Js 0.12.1 Nodejs Node.Js 0.12.2 Nodejs Node.Js 0.12.3 Nodejs Node.Js 0.12.4 Nodejs Node.Js 0.12.5 Nodejs Node.Js 0.12.6 Nodejs Node.Js 0.12.7 Nodejs Node.Js 0.12.8 Nodejs Node.Js 0.12.9 Nodejs Node.Js 0.12.10 Nodejs Node.Js 0.12.11 Nodejs Node.Js 0.12.12 Nodejs Node.Js 0.12.13 Nodejs Node.Js 0.12.14 Nodejs Node.Js 0.12.15 Nodejs Node.Js 0.12.16 Nodejs Node.Js 0.12.17 Nodejs Node.Js 0.12.18 Nodejs Node.Js 1.0.0 Nodejs Node.Js 1.0.1 Nodejs Node.Js 1.0.2 Nodejs Node.Js 1.0.3 Nodejs Node.Js 1.0.4 Nodejs Node.Js 1.1.0 Nodejs Node.Js 1.2.0 Nodejs Node.Js 1.3.0 Nodejs Node.Js 1.4.1 Nodejs Node.Js 1.4.2 Nodejs Node.Js 1.4.3 Nodejs Node.Js 1.5.0 Nodejs Node.Js 1.5.1 Nodejs Node.Js 1.6.0 Nodejs Node.Js 1.6.1 Nodejs Node.Js 1.6.2 Nodejs Node.Js 1.6.3 Nodejs Node.Js 1.6.4 Nodejs Node.Js 1.7.0 Nodejs Node.Js 1.7.1 Nodejs Node.Js 1.8.1 Nodejs Node.Js 1.8.2 Nodejs Node.Js 1.8.3 Nodejs Node.Js 1.8.4 Nodejs Node.Js 2.0.0 Nodejs Node.Js 2.0.1 Nodejs Node.Js 2.0.2 Nodejs Node.Js 2.1.0 Nodejs Node.Js 2.2.0 Nodejs Node.Js 2.2.1 Nodejs Node.Js 2.3.0 Nodejs Node.Js 2.3.1 Nodejs Node.Js 2.3.2 Nodejs Node.Js 2.3.3 Nodejs Node.Js 2.3.4 Nodejs Node.Js 2.4.0 Nodejs Node.Js 2.5.0 Nodejs Node.Js 3.0.0 Nodejs Node.Js 3.1.0 Nodejs Node.Js 3.2.0 Nodejs Node.Js 3.3.0 Nodejs Node.Js 3.3.1 Nodejs Node.Js 4.0.0 Nodejs Node.Js 4.1.0 Nodejs Node.Js 4.1.1 Nodejs Node.Js 4.1.2 Nodejs Node.Js 4.2.0 Nodejs Node.Js 4.2.1 Nodejs Node.Js 4.2.2 Nodejs Node.Js 4.2.3 Nodejs Node.Js 4.2.4 Nodejs Node.Js 4.2.5 Nodejs Node.Js 4.2.6 Nodejs Node.Js 4.3.0 Nodejs Node.Js 4.3.1 Nodejs Node.Js 4.3.2 Nodejs Node.Js 4.4.0 Nodejs Node.Js 4.4.1 Nodejs Node.Js 4.4.2 Nodejs Node.Js 4.4.3 Nodejs Node.Js 4.4.4 Nodejs Node.Js 4.4.5 Nodejs Node.Js 4.4.6 Nodejs Node.Js 4.4.7 Nodejs Node.Js 4.5.0 Nodejs Node.Js 4.6.0 Nodejs Node.Js 4.6.1 Nodejs Node.Js 4.6.2 Nodejs Node.Js 4.7.0 Nodejs Node.Js 4.7.1 Nodejs Node.Js 4.7.2 Nodejs Node.Js 4.7.3 Nodejs Node.Js 4.8.0 Nodejs Node.Js 4.8.1 Nodejs Node.Js 4.8.2 Nodejs Node.Js 4.8.3 Nodejs Node.Js 4.8.4 Nodejs Node.Js 4.8.5 Nodejs Node.Js 4.8.6 Nodejs Node.Js 4.8.7 Nodejs Node.Js 4.9.0 Nodejs Node.Js 4.9.1 Nodejs Node.Js 5.0.0 Nodejs Node.Js 5.1.0 Nodejs Node.Js 5.1.1 Nodejs Node.Js 5.2.0 Nodejs Node.Js 5.3.0 Nodejs Node.Js 5.4.0 Nodejs Node.Js 5.4.1 Nodejs Node.Js 5.5.0 Nodejs Node.Js 5.6.0 Nodejs Node.Js 5.7.0 Nodejs Node.Js 5.7.1 Nodejs Node.Js 5.8.0 Nodejs Node.Js 5.8.1 Nodejs Node.Js 5.9.0 Nodejs Node.Js 5.9.1 Nodejs Node.Js 5.10.0 Nodejs Node.Js 5.10.1 Nodejs Node.Js 5.11.0 Nodejs Node.Js 5.11.1 Nodejs Node.Js 5.12.0 Nodejs Node.Js 6.0.0 Nodejs Node.Js 6.1.0 Nodejs Node.Js 6.2.0 Nodejs Node.Js 6.2.1 Nodejs Node.Js 6.2.2 Nodejs Node.Js 6.3.0 Nodejs Node.Js 6.3.1 Nodejs Node.Js 6.4.0 Nodejs Node.Js 6.5.0 Nodejs Node.Js 6.6.0 Nodejs Node.Js 6.7.0 Nodejs Node.Js 6.8.0 Nodejs Node.Js 6.8.1 Nodejs Node.Js 6.9.0 Nodejs Node.Js 6.9.1 Nodejs Node.Js 6.9.2 Nodejs Node.Js 6.9.3 Nodejs Node.Js 6.9.4 Nodejs Node.Js 6.9.5 Nodejs Node.Js 6.10.0 Nodejs Node.Js 6.10.1 Nodejs Node.Js 6.10.2 Nodejs Node.Js 6.10.3 Nodejs Node.Js 6.11.0 Nodejs Node.Js 6.11.1 Nodejs Node.Js 6.11.2 Nodejs Node.Js 6.11.3 Nodejs Node.Js 6.11.4 Nodejs Node.Js 6.11.5 Nodejs Node.Js 6.12.0 Nodejs Node.Js 6.12.1 Nodejs Node.Js 6.12.2 Nodejs Node.Js 6.12.3 Nodejs Node.Js 6.13.0 Nodejs Node.Js 6.13.1 Nodejs Node.Js 6.14.0 Nodejs Node.Js 6.14.1 Nodejs Node.Js 6.14.2 Nodejs Node.Js 6.14.3	1038
Application	Openssl Openssl Openssl 1.0.2 Openssl Openssl 1.0.2A Openssl Openssl 1.0.2B Openssl Openssl 1.0.2C Openssl Openssl 1.0.2D Openssl Openssl 1.0.2E Openssl Openssl 1.0.2F Openssl Openssl 1.0.2G Openssl Openssl 1.0.2H Openssl Openssl 1.0.2I Openssl Openssl 1.0.2J Openssl Openssl 1.0.2K Openssl Openssl 1.0.2L Openssl Openssl 1.0.2M Openssl Openssl 1.0.2N Openssl Openssl 1.0.2O Openssl Openssl 1.0.2P Openssl Openssl 1.1.0 Openssl Openssl 1.1.0A Openssl Openssl 1.1.0B Openssl Openssl 1.1.0C Openssl Openssl 1.1.0D Openssl Openssl 1.1.0E Openssl Openssl 1.1.0F Openssl Openssl 1.1.0G Openssl Openssl 1.1.0H Openssl Openssl 1.1.0I	38
Application	Tenable Tenable Nessus - Tenable Nessus 4.4.1.15078 Tenable Nessus 5.2.0 Tenable Nessus 5.2.1 Tenable Nessus 5.2.2 Tenable Nessus 5.2.3 Tenable Nessus 5.2.4 Tenable Nessus 5.2.5 Tenable Nessus 5.2.6 Tenable Nessus 5.2.7 Tenable Nessus 5.2.8 Tenable Nessus 5.2.9 Tenable Nessus 5.2.10 Tenable Nessus 5.2.11 Tenable Nessus 5.2.12 Tenable Nessus 6.0.0 Tenable Nessus 6.0.1 Tenable Nessus 6.0.2 Tenable Nessus 6.1.0 Tenable Nessus 6.1.1 Tenable Nessus 6.1.2 Tenable Nessus 6.2.0 Tenable Nessus 6.2.1 Tenable Nessus 6.3.0 Tenable Nessus 6.3.1 Tenable Nessus 6.3.2 Tenable Nessus 6.3.3 Tenable Nessus 6.3.4 Tenable Nessus 6.3.5 Tenable Nessus 6.3.6 Tenable Nessus 6.3.7 Tenable Nessus 6.4.0 Tenable Nessus 6.4.1 Tenable Nessus 6.4.2 Tenable Nessus 6.4.3 Tenable Nessus 6.5.0 Tenable Nessus 6.5.1 Tenable Nessus 6.5.2 Tenable Nessus 6.5.3 Tenable Nessus 6.5.4 Tenable Nessus 6.5.5 Tenable Nessus 6.5.6 Tenable Nessus 6.6.0 Tenable Nessus 6.6.1 Tenable Nessus 6.6.2 Tenable Nessus 6.7 Tenable Nessus 6.7.0 Tenable Nessus 6.8 Tenable Nessus 6.8.0 Tenable Nessus 6.8.1 Tenable Nessus 6.8.2 Tenable Nessus 6.9 Tenable Nessus 6.9.0 Tenable Nessus 6.9.1 Tenable Nessus 6.9.2 Tenable Nessus 6.9.3 Tenable Nessus 6.10.0 Tenable Nessus 6.10.1 Tenable Nessus 6.10.2 Tenable Nessus 6.10.3 Tenable Nessus 6.10.4 Tenable Nessus 6.10.5 Tenable Nessus 6.10.6 Tenable Nessus 6.10.7 Tenable Nessus 6.10.8 Tenable Nessus 6.10.9 Tenable Nessus 6.11.0 Tenable Nessus 6.11.1 Tenable Nessus 6.11.2 Tenable Nessus 6.11.3 Tenable Nessus 6.12.0 Tenable Nessus 6.12.1 Tenable Nessus 7.0.0 Tenable Nessus 7.0.1 Tenable Nessus 7.0.2 Tenable Nessus 7.0.3 Tenable Nessus 7.1.0 Tenable Nessus 7.1.1 Tenable Nessus 7.1.2 Tenable Nessus 7.1.3 Tenable Nessus 7.1.4 Tenable Nessus 7.1.5 Tenable Nessus 7.2.0 Tenable Nessus 7.2.1 Tenable Nessus 7.2.2 Tenable Nessus 7.2.3 Tenable Nessus 8.0.0 Tenable Nessus 8.0.1 Tenable Nessus 8.1.0	89
Application	Oracle Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Primavera P6 Enterprise Project Portfolio Management 8.4 Oracle Primavera P6 Enterprise Project Portfolio Management 17.7 Oracle Primavera P6 Enterprise Project Portfolio Management 17.8 Oracle Primavera P6 Enterprise Project Portfolio Management 17.9 Oracle Primavera P6 Enterprise Project Portfolio Management 17.10 Oracle Primavera P6 Enterprise Project Portfolio Management 17.11 Oracle Primavera P6 Enterprise Project Portfolio Management 17.12 Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle API Gateway 11.1.2.4.0 Oracle Peoplesoft Enterprise Peopletools 8.55 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Enterprise Manager OPS Center 12.3.3 Oracle VM Virtualbox 1.6 Oracle VM Virtualbox 1.6.0 Oracle VM Virtualbox 1.6.2 Oracle VM Virtualbox 1.6.4 Oracle VM Virtualbox 1.6.6 Oracle VM Virtualbox 2.0 Oracle VM Virtualbox 2.0.0 Oracle VM Virtualbox 2.0.2 Oracle VM Virtualbox 2.0.4 Oracle VM Virtualbox 2.0.6 Oracle VM Virtualbox 2.0.8 Oracle VM Virtualbox 2.0.10 Oracle VM Virtualbox 2.0.12 Oracle VM Virtualbox 2.1 Oracle VM Virtualbox 2.1.0 Oracle VM Virtualbox 2.1.2 Oracle VM Virtualbox 2.1.4 Oracle VM Virtualbox 2.2 Oracle VM Virtualbox 2.2.0 Oracle VM Virtualbox 2.2.2 Oracle VM Virtualbox 2.2.4 Oracle VM Virtualbox 3.0 Oracle VM Virtualbox 3.0.0 Oracle VM Virtualbox 3.0.2 Oracle VM Virtualbox 3.0.4 Oracle VM Virtualbox 3.0.6 Oracle VM Virtualbox 3.0.8 Oracle VM Virtualbox 3.0.10 Oracle VM Virtualbox 3.0.12 Oracle VM Virtualbox 3.0.14 Oracle VM Virtualbox 3.1 Oracle VM Virtualbox 3.1.0 Oracle VM Virtualbox 3.1.2 Oracle VM Virtualbox 3.1.4 Oracle VM Virtualbox 3.1.6 Oracle VM Virtualbox 3.1.8 Oracle VM Virtualbox 3.2 Oracle VM Virtualbox 3.2.0 Oracle VM Virtualbox 3.2.2 Oracle VM Virtualbox 3.2.4 Oracle VM Virtualbox 3.2.6 Oracle VM Virtualbox 3.2.8 Oracle VM Virtualbox 3.2.10 Oracle VM Virtualbox 3.2.12 Oracle VM Virtualbox 3.2.14 Oracle VM Virtualbox 3.2.16 Oracle VM Virtualbox 3.2.18 Oracle VM Virtualbox 3.2.20 Oracle VM Virtualbox 3.2.22 Oracle VM Virtualbox 3.2.24 Oracle VM Virtualbox 4.0 Oracle VM Virtualbox 4.0.0 Oracle VM Virtualbox 4.0.2 Oracle VM Virtualbox 4.0.4 Oracle VM Virtualbox 4.0.6 Oracle VM Virtualbox 4.0.8 Oracle VM Virtualbox 4.0.10 Oracle VM Virtualbox 4.0.12 Oracle VM Virtualbox 4.0.14 Oracle VM Virtualbox 4.0.16 Oracle VM Virtualbox 4.0.18 Oracle VM Virtualbox 4.0.20 Oracle VM Virtualbox 4.0.22 Oracle VM Virtualbox 4.0.24 Oracle VM Virtualbox 4.0.26 Oracle VM Virtualbox 4.0.31 Oracle VM Virtualbox 4.0.32 Oracle VM Virtualbox 4.0.34 Oracle VM Virtualbox 4.0.36 Oracle VM Virtualbox 4.1.0 Oracle VM Virtualbox 4.1.2 Oracle VM Virtualbox 4.1.4 Oracle VM Virtualbox 4.1.6 Oracle VM Virtualbox 4.1.8 Oracle VM Virtualbox 4.1.10 Oracle VM Virtualbox 4.1.12 Oracle VM Virtualbox 4.1.14 Oracle VM Virtualbox 4.1.16 Oracle VM Virtualbox 4.1.18 Oracle VM Virtualbox 4.1.20 Oracle VM Virtualbox 4.1.22 Oracle VM Virtualbox 4.1.24 Oracle VM Virtualbox 4.1.26 Oracle VM Virtualbox 4.1.28 Oracle VM Virtualbox 4.1.30 Oracle VM Virtualbox 4.1.32 Oracle VM Virtualbox 4.1.34 Oracle VM Virtualbox 4.1.39 Oracle VM Virtualbox 4.1.40 Oracle VM Virtualbox 4.1.42 Oracle VM Virtualbox 4.1.44 Oracle VM Virtualbox 4.2.0 Oracle VM Virtualbox 4.2.2 Oracle VM Virtualbox 4.2.4 Oracle VM Virtualbox 4.2.6 Oracle VM Virtualbox 4.2.8 Oracle VM Virtualbox 4.2.10 Oracle VM Virtualbox 4.2.12 Oracle VM Virtualbox 4.2.14 Oracle VM Virtualbox 4.2.16 Oracle VM Virtualbox 4.2.18 Oracle VM Virtualbox 4.2.20 Oracle VM Virtualbox 4.2.22 Oracle VM Virtualbox 4.2.24 Oracle VM Virtualbox 4.2.26 Oracle VM Virtualbox 4.2.28 Oracle VM Virtualbox 4.2.30 Oracle VM Virtualbox 4.2.31 Oracle VM Virtualbox 4.2.32 Oracle VM Virtualbox 4.2.34 Oracle VM Virtualbox 4.2.36 Oracle VM Virtualbox 4.3.0 Oracle VM Virtualbox 4.3.2 Oracle VM Virtualbox 4.3.4 Oracle VM Virtualbox 4.3.6 Oracle VM Virtualbox 4.3.8 Oracle VM Virtualbox 4.3.10 Oracle VM Virtualbox 4.3.12 Oracle VM Virtualbox 4.3.14 Oracle VM Virtualbox 4.3.16 Oracle VM Virtualbox 4.3.18 Oracle VM Virtualbox 4.3.22 Oracle VM Virtualbox 4.3.24 Oracle VM Virtualbox 4.3.26 Oracle VM Virtualbox 4.3.28 Oracle VM Virtualbox 4.3.29 Oracle VM Virtualbox 4.3.30 Oracle VM Virtualbox 4.3.32 Oracle VM Virtualbox 4.3.34 Oracle VM Virtualbox 4.3.35 Oracle VM Virtualbox 4.3.36 Oracle VM Virtualbox 4.3.38 Oracle VM Virtualbox 5.0.0 Oracle VM Virtualbox 5.0.2 Oracle VM Virtualbox 5.0.4 Oracle VM Virtualbox 5.0.6 Oracle VM Virtualbox 5.0.8 Oracle VM Virtualbox 5.0.10 Oracle VM Virtualbox 5.0.12 Oracle VM Virtualbox 5.0.13 Oracle VM Virtualbox 5.0.14 Oracle VM Virtualbox 5.0.16 Oracle VM Virtualbox 5.0.18 Oracle VM Virtualbox 5.0.20 Oracle VM Virtualbox 5.0.22 Oracle VM Virtualbox 5.0.24 Oracle VM Virtualbox 5.0.26 Oracle VM Virtualbox 5.0.27 Oracle VM Virtualbox 5.0.28 Oracle VM Virtualbox 5.0.30 Oracle VM Virtualbox 5.0.32 Oracle VM Virtualbox 5.0.34 Oracle VM Virtualbox 5.0.36 Oracle VM Virtualbox 5.0.38 Oracle VM Virtualbox 5.0.40 Oracle VM Virtualbox 5.1.0 Oracle VM Virtualbox 5.1.2 Oracle VM Virtualbox 5.1.4 Oracle VM Virtualbox 5.1.6 Oracle VM Virtualbox 5.1.7 Oracle VM Virtualbox 5.1.8 Oracle VM Virtualbox 5.1.10 Oracle VM Virtualbox 5.1.12 Oracle VM Virtualbox 5.1.14 Oracle VM Virtualbox 5.1.16 Oracle VM Virtualbox 5.1.18 Oracle VM Virtualbox 5.1.20 Oracle VM Virtualbox 5.1.22 Oracle VM Virtualbox 5.1.24 Oracle VM Virtualbox 5.1.26 Oracle VM Virtualbox 5.1.28 Oracle VM Virtualbox 5.1.30 Oracle VM Virtualbox 5.1.32 Oracle VM Virtualbox 5.1.34 Oracle VM Virtualbox 5.1.36 Oracle VM Virtualbox 5.1.38 Oracle VM Virtualbox 5.2.0 Oracle VM Virtualbox 5.2.2 Oracle VM Virtualbox 5.2.4 Oracle VM Virtualbox 5.2.6 Oracle VM Virtualbox 5.2.8 Oracle VM Virtualbox 5.2.10 Oracle VM Virtualbox 5.2.12 Oracle VM Virtualbox 5.2.14 Oracle VM Virtualbox 5.2.16 Oracle VM Virtualbox 5.2.18 Oracle VM Virtualbox 5.2.20 Oracle VM Virtualbox 5.2.22 Oracle VM Virtualbox 5.2.24 Oracle VM Virtualbox 5.2.26 Oracle VM Virtualbox 5.2.28 Oracle VM Virtualbox 5.2.30 Oracle VM Virtualbox 5.2.32 Oracle VM Virtualbox 5.2.34 Oracle VM Virtualbox 5.2.36 Oracle VM Virtualbox 5.2.38 Oracle VM Virtualbox 5.2.40 Oracle VM Virtualbox 5.2.44 Oracle Enterprise Manager Base Platform 13.2.0.0.0 Oracle Enterprise Manager Base Platform 12.1.0.5.0 Oracle Enterprise Manager Base Platform 13.3.0.0.0 Oracle Tuxedo 12.1.1.0.0 Oracle Application Server 0.9.8 Oracle Application Server 1.0.0 Oracle Application Server 1.0.1 Oracle Mysql Enterprise Backup 3.11.0 Oracle Mysql Enterprise Backup 3.11.1 Oracle Mysql Enterprise Backup 3.12.0 Oracle Mysql Enterprise Backup 3.12.1 Oracle Mysql Enterprise Backup 3.12.2 Oracle Mysql Enterprise Backup 3.12.3 Oracle Mysql Enterprise Backup 3.12.4 Oracle Mysql Enterprise Backup 4.0.0 Oracle Mysql Enterprise Backup 4.0.1 Oracle Mysql Enterprise Backup 4.0.2 Oracle Mysql Enterprise Backup 4.0.3 Oracle Mysql Enterprise Backup 4.1.0 Oracle Mysql Enterprise Backup 4.1.1 Oracle Mysql Enterprise Backup 4.1.2	236

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

Exploit-Db

file	exploits/hardware/local/45785.md
id	EDB-ID:45785
last seen	2018-11-30
modified	2018-11-02
platform	hardware
port
published	2018-11-02
reporter	Exploit-DB
source	https://www.exploit-db.com/download/45785
title	Intel (Skylake / Kaby Lake) - 'PortSmash' CPU SMT Side-Channel
type	local

Nessus

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2019-2430.NASL
description	According to the versions of the openssl110f packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).(CVE-2018-0734) - Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on
last seen	2020-05-08
modified	2019-12-04
plugin id	131584
published	2019-12-04
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/131584
title	EulerOS 2.0 SP2 : openssl110f (EulerOS-SA-2019-2430)
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(131584); script_version("1.3"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/07"); script_cve_id( "CVE-2018-0734", "CVE-2018-5407", "CVE-2019-1547", "CVE-2019-1563" ); script_name(english:"EulerOS 2.0 SP2 : openssl110f (EulerOS-SA-2019-2430)"); script_summary(english:"Checks the rpm output for the updated packages."); script_set_attribute(attribute:"synopsis", value: "The remote EulerOS host is missing multiple security updates."); script_set_attribute(attribute:"description", value: "According to the versions of the openssl110f packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).(CVE-2018-0734) - Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.(CVE-2018-5407) - Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).(CVE-2019-1547) - In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).(CVE-2019-1563) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues."); # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2019-2430 script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c75fc767"); script_set_attribute(attribute:"solution", value: "Update the affected openssl110f packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-1563"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"patch_publication_date", value:"2019/12/04"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/12/04"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:openssl110f"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:openssl110f-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:openssl110f-libs"); script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:2.0"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Huawei Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/sp"); script_exclude_keys("Host/EulerOS/uvp_version"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/EulerOS/release"); if (isnull(release) \|\| release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS"); if (release !~ "^EulerOS release 2\.0(\D\|$)") audit(AUDIT_OS_NOT, "EulerOS 2.0"); sp = get_kb_item("Host/EulerOS/sp"); if (isnull(sp) \|\| sp !~ "^(2)$") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP2"); uvp = get_kb_item("Host/EulerOS/uvp_version"); if (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, "EulerOS 2.0 SP2", "EulerOS UVP " + uvp); if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_ARCH_NOT, "i686 / x86_64", cpu); flag = 0; pkgs = ["openssl110f-1.1.0f-5.h11", "openssl110f-devel-1.1.0f-5.h11", "openssl110f-libs-1.1.0f-5.h11"]; foreach (pkg in pkgs) if (rpm_check(release:"EulerOS-2.0", sp:"2", reference:pkg)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openssl110f"); }

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2019-0117-1.NASL
description	This update for nodejs4 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka
last seen	2020-06-01
modified	2020-06-02
plugin id	121292
published	2019-01-22
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121292
title	SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2019:0117-1)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from SUSE update advisory SUSE-SU-2019:0117-1. # The text itself is copyright (C) SUSE. # include("compat.inc"); if (description) { script_id(121292); script_version("1.3"); script_cvs_date("Date: 2019/09/10 13:51:50"); script_cve_id("CVE-2018-0734", "CVE-2018-12116", "CVE-2018-12120", "CVE-2018-12121", "CVE-2018-12122", "CVE-2018-12123", "CVE-2018-5407"); script_name(english:"SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2019:0117-1)"); script_summary(english:"Checks rpm output for the updated packages."); script_set_attribute( attribute:"synopsis", value:"The remote SUSE host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "This update for nodejs4 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka 'PortSmash') (bsc#1113534) CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625) CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626) CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627) CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630) CVE-2018-12123: Fixed hostname spoofing in URL parser for JavaScript protocol (bsc#1117629) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1113534" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1113652" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1117625" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1117626" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1117627" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1117629" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1117630" ); script_set_attribute( attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-0734/" ); script_set_attribute( attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-12116/" ); script_set_attribute( attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-12120/" ); script_set_attribute( attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-12121/" ); script_set_attribute( attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-12122/" ); script_set_attribute( attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-12123/" ); script_set_attribute( attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-5407/" ); # https://www.suse.com/support/update/announcement/2019/suse-su-20190117-1/ script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?55bbd6c4" ); script_set_attribute( attribute:"solution", value: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or 'zypper patch'. Alternatively you can run the command listed for your product : SUSE Linux Enterprise Module for Web Scripting 12:zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2019-117=1 SUSE Enterprise Storage 4:zypper in -t patch SUSE-Storage-4-2019-117=1" ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:nodejs4"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:nodejs4-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:nodejs4-debugsource"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:nodejs4-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:npm4"); script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/10/30"); script_set_attribute(attribute:"patch_publication_date", value:"2019/01/18"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/01/22"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"SuSE Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/SuSE/release"); if (isnull(release) \|\| release !~ "^(SLED\|SLES)") audit(AUDIT_OS_NOT, "SUSE"); os_ver = pregmatch(pattern: "^(SLE(S\|D)\d+)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE"); os_ver = os_ver[1]; if (! preg(pattern:"^(SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLES12", "SUSE " + os_ver); if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu); if (cpu >!< "x86_64") audit(AUDIT_ARCH_NOT, "x86_64", cpu); sp = get_kb_item("Host/SuSE/patchlevel"); if (isnull(sp)) sp = "0"; if (os_ver == "SLES12" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP0", os_ver + " SP" + sp); flag = 0; if (rpm_check(release:"SLES12", sp:"0", cpu:"x86_64", reference:"nodejs4-4.9.1-15.17.1")) flag++; if (rpm_check(release:"SLES12", sp:"0", cpu:"x86_64", reference:"nodejs4-debuginfo-4.9.1-15.17.1")) flag++; if (rpm_check(release:"SLES12", sp:"0", cpu:"x86_64", reference:"nodejs4-debugsource-4.9.1-15.17.1")) flag++; if (rpm_check(release:"SLES12", sp:"0", cpu:"x86_64", reference:"nodejs4-devel-4.9.1-15.17.1")) flag++; if (rpm_check(release:"SLES12", sp:"0", cpu:"x86_64", reference:"npm4-4.9.1-15.17.1")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "nodejs4"); }

NASL family	Amazon Linux Local Security Checks
NASL id	AL2_ALAS-2019-1188.NASL
description	A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.(CVE-2018-5407) If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable
last seen	2020-06-01
modified	2020-06-02
plugin id	124124
published	2019-04-18
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/124124
title	Amazon Linux 2 : openssl (ALAS-2019-1188)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Amazon Linux 2 Security Advisory ALAS-2019-1188. # include("compat.inc"); if (description) { script_id(124124); script_version("1.2"); script_cvs_date("Date: 2019/04/30 14:30:16"); script_cve_id("CVE-2018-5407", "CVE-2019-1559"); script_xref(name:"ALAS", value:"2019-1188"); script_name(english:"Amazon Linux 2 : openssl (ALAS-2019-1188)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Amazon Linux 2 host is missing a security update." ); script_set_attribute( attribute:"description", value: "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.(CVE-2018-5407) If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable 'non-stitched' ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway).(CVE-2019-1559)" ); script_set_attribute( attribute:"see_also", value:"https://alas.aws.amazon.com/AL2/ALAS-2019-1188.html" ); script_set_attribute( attribute:"solution", value:"Run 'yum update openssl' to update your system." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:openssl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:openssl-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:openssl-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:openssl-libs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:openssl-perl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:openssl-static"); script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/11/15"); script_set_attribute(attribute:"patch_publication_date", value:"2019/04/17"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/04/18"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Amazon Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/AmazonLinux/release"); if (isnull(release) \|\| !strlen(release)) audit(AUDIT_OS_NOT, "Amazon Linux"); os_ver = pregmatch(pattern: "^AL(A\|\d)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux"); os_ver = os_ver[1]; if (os_ver != "2") { if (os_ver == 'A') os_ver = 'AMI'; audit(AUDIT_OS_NOT, "Amazon Linux 2", "Amazon Linux " + os_ver); } if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (rpm_check(release:"AL2", reference:"openssl-1.0.2k-16.amzn2.1.1")) flag++; if (rpm_check(release:"AL2", reference:"openssl-debuginfo-1.0.2k-16.amzn2.1.1")) flag++; if (rpm_check(release:"AL2", reference:"openssl-devel-1.0.2k-16.amzn2.1.1")) flag++; if (rpm_check(release:"AL2", reference:"openssl-libs-1.0.2k-16.amzn2.1.1")) flag++; if (rpm_check(release:"AL2", reference:"openssl-perl-1.0.2k-16.amzn2.1.1")) flag++; if (rpm_check(release:"AL2", reference:"openssl-static-1.0.2k-16.amzn2.1.1")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openssl / openssl-debuginfo / openssl-devel / openssl-libs / etc"); }

NASL family	PhotonOS Local Security Checks
NASL id	PHOTONOS_PHSA-2018-1_0-0199_OPENSSL.NASL
description	An update of the openssl package has been released.
last seen	2020-06-01
modified	2020-06-02
plugin id	121899
published	2019-02-07
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121899
title	Photon OS 1.0: Openssl PHSA-2018-1.0-0199
code	# # (C) Tenable Network Security, Inc.` # # The descriptive text and package checks in this plugin were # extracted from VMware Security Advisory PHSA-2018-1.0-0199. The text # itself is copyright (C) VMware, Inc. include("compat.inc"); if (description) { script_id(121899); script_version("1.2"); script_cvs_date("Date: 2019/04/02 21:54:17"); script_cve_id("CVE-2018-0734", "CVE-2018-0735", "CVE-2018-5407"); script_name(english:"Photon OS 1.0: Openssl PHSA-2018-1.0-0199"); script_summary(english:"Checks the rpm output for the updated packages."); script_set_attribute(attribute:"synopsis", value: "The remote PhotonOS host is missing multiple security updates."); script_set_attribute(attribute:"description", value: "An update of the openssl package has been released."); script_set_attribute(attribute:"see_also", value:"https://github.com/vmware/photon/wiki/Security-Updates-1.0-199.md"); script_set_attribute(attribute:"solution", value: "Update the affected Linux packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-0735"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/12/14"); script_set_attribute(attribute:"patch_publication_date", value:"2018/12/14"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/02/07"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:vmware:photonos:openssl"); script_set_attribute(attribute:"cpe", value:"cpe:/o:vmware:photonos:1.0"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"PhotonOS Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/PhotonOS/release", "Host/PhotonOS/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/PhotonOS/release"); if (isnull(release) \|\| release !~ "^VMware Photon") audit(AUDIT_OS_NOT, "PhotonOS"); if (release !~ "^VMware Photon (?:Linux\|OS) 1\.0(\D\|$)") audit(AUDIT_OS_NOT, "PhotonOS 1.0"); if (!get_kb_item("Host/PhotonOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "PhotonOS", cpu); flag = 0; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-debuginfo-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-debuginfo-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-debuginfo-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-devel-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-devel-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-devel-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-perl-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-perl-1.0.2q-1.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", reference:"openssl-perl-1.0.2q-1.ph1")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "openssl"); }

NASL family	F5 Networks Local Security Checks
NASL id	F5_BIGIP_SOL49711130.NASL
description	Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on
last seen	2020-06-01
modified	2020-06-02
plugin id	125481
published	2019-05-29
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/125481
title	F5 Networks BIG-IP : OpenSSL and Intel processor SMT side-channel vulnerability (PortSmash) (K49711130)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from F5 Networks BIG-IP Solution K49711130. # # The text description of this plugin is (C) F5 Networks. # include("compat.inc"); if (description) { script_id(125481); script_version("1.3"); script_cvs_date("Date: 2019/09/25 17:12:07"); script_cve_id("CVE-2018-5407"); script_name(english:"F5 Networks BIG-IP : OpenSSL and Intel processor SMT side-channel vulnerability (PortSmash) (K49711130)"); script_summary(english:"Checks the BIG-IP version."); script_set_attribute( attribute:"synopsis", value:"The remote device is missing a vendor-supplied security patch." ); script_set_attribute( attribute:"description", value: "Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention.'(CVE-2018-5407also known as PortSmash) Impact The vulnerability allows an attacker who can provideand runbinary code of their choosing on the F5platform to steal secret cryptographic information. Processes running on hyperthread-enabled cores are subject to a side-channel attack by other processes running on the same core, if their program control flow is impacted by private data. A common case for this behavior is encryption, where the secret key can influence program flow. While high-security contexts typically guard against this known behavior, a flaw in OpenSSL's protection of elliptic curve processing is vulnerable to this class of attack. Other encryption algorithms (RSA) are not affected, so configurations that do not install EC keys are not impacted. Note : Hyper-threading is Intel's implementation of SMT." ); script_set_attribute( attribute:"see_also", value:"https://support.f5.com/csp/article/K49711130" ); script_set_attribute( attribute:"solution", value: "Upgrade to one of the non-vulnerable versions listed in the F5 Solution K49711130." ); script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:N"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"potential_vulnerability", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_access_policy_manager"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_advanced_firewall_manager"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_application_acceleration_manager"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_application_security_manager"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_application_visibility_and_reporting"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_global_traffic_manager"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_link_controller"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_local_traffic_manager"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_policy_enforcement_manager"); script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_webaccelerator"); script_set_attribute(attribute:"cpe", value:"cpe:/h:f5:big-ip"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/11/15"); script_set_attribute(attribute:"patch_publication_date", value:"2018/11/29"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/05/29"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"F5 Networks Local Security Checks"); script_dependencies("f5_bigip_detect.nbin"); script_require_keys("Host/local_checks_enabled", "Host/BIG-IP/hotfix", "Host/BIG-IP/modules", "Host/BIG-IP/version", "Settings/ParanoidReport"); exit(0); } include("f5_func.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); version = get_kb_item("Host/BIG-IP/version"); if ( ! version ) audit(AUDIT_OS_NOT, "F5 Networks BIG-IP"); if ( isnull(get_kb_item("Host/BIG-IP/hotfix")) ) audit(AUDIT_KB_MISSING, "Host/BIG-IP/hotfix"); if ( ! get_kb_item("Host/BIG-IP/modules") ) audit(AUDIT_KB_MISSING, "Host/BIG-IP/modules"); sol = "K49711130"; vmatrix = make_array(); if (report_paranoia < 2) audit(AUDIT_PARANOID); # AFM vmatrix["AFM"] = make_array(); vmatrix["AFM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["AFM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # AM vmatrix["AM"] = make_array(); vmatrix["AM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["AM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # APM vmatrix["APM"] = make_array(); vmatrix["APM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["APM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # ASM vmatrix["ASM"] = make_array(); vmatrix["ASM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["ASM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # AVR vmatrix["AVR"] = make_array(); vmatrix["AVR"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["AVR"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # GTM vmatrix["GTM"] = make_array(); vmatrix["GTM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["GTM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # LC vmatrix["LC"] = make_array(); vmatrix["LC"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["LC"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # LTM vmatrix["LTM"] = make_array(); vmatrix["LTM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["LTM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # PEM vmatrix["PEM"] = make_array(); vmatrix["PEM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["PEM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); # WAM vmatrix["WAM"] = make_array(); vmatrix["WAM"]["affected" ] = make_list("14.0.0-14.1.2","13.0.0-13.1.3","12.1.0-12.1.5","11.2.1-11.6.5"); vmatrix["WAM"]["unaffected"] = make_list("15.0.0","14.1.2.1"); if (bigip_is_affected(vmatrix:vmatrix, sol:sol)) { if (report_verbosity > 0) security_note(port:0, extra:bigip_report_get()); else security_note(0); exit(0); } else { tested = bigip_get_tested_modules(); audit_extra = "For BIG-IP module(s) " + tested + ","; if (tested) audit(AUDIT_INST_VER_NOT_VULN, audit_extra, version); else audit(AUDIT_HOST_NOT, "running any of the affected modules"); }

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2018-1529.NASL
description	This update for compat-openssl098 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). - CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). - CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018). - Fixed the
last seen	2020-06-05
modified	2018-12-13
plugin id	119641
published	2018-12-13
reporter	This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119641
title	openSUSE Security Update : compat-openssl098 (openSUSE-2018-1529)
code	#%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from openSUSE Security Update openSUSE-2018-1529. # # The text description of this plugin is (C) SUSE LLC. # include("compat.inc"); if (description) { script_id(119641); script_version("1.4"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04"); script_cve_id("CVE-2016-8610", "CVE-2018-0734", "CVE-2018-5407"); script_name(english:"openSUSE Security Update : compat-openssl098 (openSUSE-2018-1529)"); script_summary(english:"Check for the openSUSE-2018-1529 patch"); script_set_attribute( attribute:"synopsis", value:"The remote openSUSE host is missing a security update." ); script_set_attribute( attribute:"description", value: "This update for compat-openssl098 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). - CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). - CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018). - Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789). This update was imported from the SUSE:SLE-12:Update update project." ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1104789" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1110018" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1113534" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1113652" ); script_set_attribute( attribute:"solution", value:"Update the affected compat-openssl098 packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-0734"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:compat-openssl098-debugsource"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libopenssl0_9_8"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libopenssl0_9_8-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libopenssl0_9_8-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libopenssl0_9_8-debuginfo-32bit"); script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:42.3"); script_set_attribute(attribute:"vuln_publication_date", value:"2017/11/13"); script_set_attribute(attribute:"patch_publication_date", value:"2018/12/12"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/12/13"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"SuSE Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/SuSE/release"); if (isnull(release) \|\| release =~ "^(SLED\|SLES)") audit(AUDIT_OS_NOT, "openSUSE"); if (release !~ "^(SUSE42\.3)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "42.3", release); if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); ourarch = get_kb_item("Host/cpu"); if (!ourarch) audit(AUDIT_UNKNOWN_ARCH); if (ourarch !~ "^(i586\|i686\|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch); flag = 0; if ( rpm_check(release:"SUSE42.3", reference:"compat-openssl098-debugsource-0.9.8j-27.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"libopenssl0_9_8-0.9.8j-27.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"libopenssl0_9_8-debuginfo-0.9.8j-27.1") ) flag++; if ( rpm_check(release:"SUSE42.3", cpu:"x86_64", reference:"libopenssl0_9_8-32bit-0.9.8j-27.1") ) flag++; if ( rpm_check(release:"SUSE42.3", cpu:"x86_64", reference:"libopenssl0_9_8-debuginfo-32bit-0.9.8j-27.1") ) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get()); else security_warning(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "compat-openssl098-debugsource / libopenssl0_9_8 / etc"); }

NASL family	Misc.
NASL id	ORACLE_ENTERPRISE_MANAGER_APR_2019_CPU.NASL
description	The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - Networking component of Enterprise Manager Base Platform (Spring Framework) is easily exploited and may allow an unauthenticated, remote attacker to takeover the Enterprise Manager Base Platform. (CVE-2018-1258, CVE-2018-11039, CVE-2018-11040, CVE-2018-1257, CVE-2018-15756) - Agent Next Gen (IBM Java) vulnerability allows unauthenticated, remote attacker unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data. (CVE-2018-1656, CVE-2018-12539) - An information disclosure vulnerability exists in OpenSSL due to the potential for a side-channel timing attack. An unauthenticated attacker can exploit this to disclose potentially sensitive information. (CVE-2018-0734, CVE-2018-0735, CVE-2018-5407)
last seen	2020-06-01
modified	2020-06-02
plugin id	124157
published	2019-04-18
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/124157
title	Oracle Enterprise Manager Cloud Control (Apr 2019 CPU)
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(124157); script_version("1.3"); script_cvs_date("Date: 2019/04/30 14:30:16"); script_cve_id( "CVE-2018-0734", "CVE-2018-0735", "CVE-2018-11039", "CVE-2018-11040", "CVE-2018-12539", "CVE-2018-1257", "CVE-2018-1258", "CVE-2018-15756", "CVE-2018-1656", "CVE-2018-5407" ); script_bugtraq_id( 104222, 104260, 105118, 105126, 105703, 105750, 105758, 105897 ); script_xref(name:"IAVA", value:"2019-A-0130"); script_name(english:"Oracle Enterprise Manager Cloud Control (Apr 2019 CPU)"); script_summary(english:"Checks for the patch ID."); script_set_attribute(attribute:"synopsis", value: "An enterprise management application installed on the remote host is affected by multiple vulnerabilities."); script_set_attribute(attribute:"description", value: "The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - Networking component of Enterprise Manager Base Platform (Spring Framework) is easily exploited and may allow an unauthenticated, remote attacker to takeover the Enterprise Manager Base Platform. (CVE-2018-1258, CVE-2018-11039, CVE-2018-11040, CVE-2018-1257, CVE-2018-15756) - Agent Next Gen (IBM Java) vulnerability allows unauthenticated, remote attacker unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data. (CVE-2018-1656, CVE-2018-12539) - An information disclosure vulnerability exists in OpenSSL due to the potential for a side-channel timing attack. An unauthenticated attacker can exploit this to disclose potentially sensitive information. (CVE-2018-0734, CVE-2018-0735, CVE-2018-5407) "); # https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?9166970d"); # https://support.oracle.com/rs?type=doc&id=2498664.1 script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?ba7181fa"); script_set_attribute(attribute:"solution", value: "Apply the appropriate patch according to the April 2019 Oracle Critical Patch Update advisory."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-1258"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"vuln_publication_date", value:"2019/04/16"); script_set_attribute(attribute:"patch_publication_date", value:"2019/04/16"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/04/18"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:enterprise_manager"); script_set_attribute(attribute:"stig_severity", value:"I"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Misc."); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("oracle_enterprise_manager_installed.nbin"); script_require_keys("installed_sw/Oracle Enterprise Manager Cloud Control"); exit(0); } include('global_settings.inc'); include('misc_func.inc'); include('oracle_rdbms_cpu_func.inc'); include('install_func.inc'); product = 'Oracle Enterprise Manager Cloud Control'; install = get_single_install(app_name:product, exit_if_unknown_ver:TRUE); version = install['version']; emchome = install['path']; patchid = NULL; missing = NULL; patched = FALSE; fix = NULL; if (version =~ '^13\\.3\\.0\\.0(\\.[0-9]+)?$') { patchid = '29433931'; fix = '13.3.0.0.190416'; } else if (version =~ '^13\\.2\\.0\\.0(\\.[0-9]+)?$') { patchid = '29433916'; fix = '13.2.0.0.190416'; } else if (version =~ '^12\\.1\\.0\\.5(\\.[0-9]+)?$') { patchid = '29433895'; fix = '12.1.0.5.190416'; } if (isnull(patchid)) audit(AUDIT_HOST_NOT, 'affected'); # compare version to check if we've already adjusted for patch level during detection if (ver_compare(ver:version, fix:fix, strict:FALSE) >= 0) audit(AUDIT_INST_PATH_NOT_VULN, product, version, emchome); # Now look for the affected components patchesinstalled = find_patches_in_ohomes(ohomes:make_list(emchome)); if (isnull(patchesinstalled)) missing = patchid; else { foreach applied (keys(patchesinstalled[emchome])) { if (applied == patchid) { patched = TRUE; break; } else { foreach bugid (patchesinstalled[emchome][applied]['bugs']) { if (bugid == patchid) { patched = TRUE; break; } } if (patched) break; } } if (!patched) missing = patchid; } if (empty_or_null(missing)) audit(AUDIT_HOST_NOT, 'affected'); order = make_list('Product', 'Version', 'Missing patch'); report = make_array( order[0], product, order[1], version, order[2], patchid ); report = report_items_str(report_items:report, ordered_fields:order); security_report_v4(port:0, extra:report, severity:SECURITY_WARNING);

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20190806_OVMF_ON_SL7_X.NASL
description	Security Fix(es) : - edk2: Privilege escalation via processing of malformed files in TianoCompress.c (CVE-2017-5731) - edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (CVE-2017-5732) - edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function (CVE-2017-5733) - edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function (CVE-2017-5734) - edk2: Privilege escalation via heap-based buffer overflow in Decode() function (CVE-2017-5735) - edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users (CVE-2018-3613) - openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) - edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181) - edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media (CVE-2019-0160) - edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161)
last seen	2020-03-18
modified	2019-08-27
plugin id	128248
published	2019-08-27
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/128248
title	Scientific Linux Security Update : ovmf on SL7.x x86_64 (20190806)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2019-1145.NASL
description	According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.(CVE-2018-5407) - If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable
last seen	2020-05-06
modified	2019-04-02
plugin id	123619
published	2019-04-02
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/123619
title	EulerOS 2.0 SP5 : openssl (EulerOS-SA-2019-1145)

NASL family	Oracle Linux Local Security Checks
NASL id	ORACLELINUX_ELSA-2019-0483.NASL
description	From Red Hat Security Advisory 2019:0483 : An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es) : * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es) : * Perform the RSA signature self-tests with SHA-256 (BZ#1673914)
last seen	2020-06-01
modified	2020-06-02
plugin id	122838
published	2019-03-14
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/122838
title	Oracle Linux 7 : openssl (ELSA-2019-0483)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2019-88.NASL
description	This update for nodejs4 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) - CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka
last seen	2020-06-01
modified	2020-06-02
plugin id	121415
published	2019-01-28
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121415
title	openSUSE Security Update : nodejs4 (openSUSE-2019-88)

NASL family	CentOS Local Security Checks
NASL id	CENTOS_RHSA-2019-0483.NASL
description	An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es) : * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es) : * Perform the RSA signature self-tests with SHA-256 (BZ#1673914)
last seen	2020-06-01
modified	2020-06-02
plugin id	122952
published	2019-03-20
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/122952
title	CentOS 7 : openssl (CESA-2019:0483)

NASL family	NewStart CGSL Local Security Checks
NASL id	NEWSTART_CGSL_NS-SA-2019-0239_OVMF.NASL
description	The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ovmf packages installed that are affected by multiple vulnerabilities: - Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. (CVE-2018-12181) - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access. (CVE-2019-0160) - Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on
last seen	2020-06-01
modified	2020-06-02
plugin id	132479
published	2019-12-31
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/132479
title	NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2019-0239)

NASL family	Amazon Linux Local Security Checks
NASL id	ALA_ALAS-2019-1188.NASL
description	A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information. (CVE-2018-5407) If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable
last seen	2020-06-01
modified	2020-06-02
plugin id	123957
published	2019-04-10
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/123957
title	Amazon Linux AMI : openssl (ALAS-2019-1188)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2018-4274-1.NASL
description	This update for openssl fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018). Fixed the
last seen	2020-03-24
modified	2018-12-28
plugin id	119937
published	2018-12-28
reporter	This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119937
title	SUSE SLES11 Security Update : openssl (SUSE-SU-2018:4274-1)

NASL family	NewStart CGSL Local Security Checks
NASL id	NEWSTART_CGSL_NS-SA-2019-0065_OPENSSL.NASL
description	The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssl packages installed that are affected by multiple vulnerabilities: - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g. (CVE-2017-3735) - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. (CVE-2018-0495) - OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key. (CVE-2018-0737) - Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n). (CVE-2018-0739) - A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information. (CVE-2018-5407) - During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o). (CVE-2018-0732) Note that Nessus has not tested for this issue but has instead relied only on the application
last seen	2020-06-01
modified	2020-06-02
plugin id	127262
published	2019-08-12
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/127262
title	NewStart CGSL CORE 5.04 / MAIN 5.04 : openssl Multiple Vulnerabilities (NS-SA-2019-0065)

NASL family	Web Servers
NASL id	IBM_TEM_9_5_12.NASL
description	According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.5.x prior to 9.5.12. It is, therefore, affected by multiple vulnerabilities : - An arbitrary file upload vulnerability exists in IBM BigFix Platform. An authenticated, remote attacker can exploit this to upload arbitrary files on the remote host as the root user. (CVE-2019-4013) - An information disclosure vulnerability exists in IBM BigFix Platform due to the PortSmash side-channel attack against processors leveraging SMT/Hyper-Threading. An authenticated, local attacker can exploit this to disclose potentially sensitive information. (CVE-2018-5407) - A cross-site scripting (XSS) vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user
last seen	2020-06-01
modified	2020-06-02
plugin id	124565
published	2019-05-03
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/124565
title	IBM BigFix Platform 9.5.x < 9.5.12 Multiple Vulnerabilities

NASL family	Misc.
NASL id	ORACLE_ENTERPRISE_MANAGER_OPS_CENTER_APR_2019_CPU.NASL
description	The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - A deserialization vulnerability in Apache Commons FileUpload allows for remote code execution. (CVE-2016-1000031) - An information disclosure vulnerability exists in OpenSSL due to the potential for a side-channel timing attack. An unauthenticated attacker can exploit this to disclose potentially sensitive information. (CVE-2018-0734) - A denial of service (DoS) vulnerability exists in Apache HTTP Server 2.4.17 to 2.4.34, due to a design error. An unauthenticated, remote attacker can exploit this issue by sending continuous, large SETTINGS frames to cause a client to occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol. (CVE-2018-11763). - Networking component of Enterprise Manager Base Platform (Spring Framework) is easily exploited and may allow an unauthenticated, remote attacker to takeover the Enterprise Manager Base Platform. (CVE-2018-1258)
last seen	2020-06-01
modified	2020-06-02
plugin id	125147
published	2019-05-15
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/125147
title	Oracle Enterprise Manager Ops Center (Apr 2019 CPU)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2019-1828.NASL
description	According to the version of the compat-openssl10 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.(CVE-2018-5407) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-05-03
modified	2019-08-27
plugin id	128197
published	2019-08-27
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/128197
title	EulerOS 2.0 SP8 : compat-openssl10 (EulerOS-SA-2019-1828)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2019-1732.NASL
description	According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. (CVE-2018-0734) - A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.(CVE-2018-5407) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-05-06
modified	2019-07-22
plugin id	126859
published	2019-07-22
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/126859
title	EulerOS 2.0 SP2 : openssl (EulerOS-SA-2019-1732)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2018-1518.NASL
description	This update for openssl-1_0_0 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). - CVE-2018-5407: Added elliptic curve scalar multiplication timing attack defenses that fixes
last seen	2020-06-05
modified	2018-12-10
plugin id	119547
published	2018-12-10
reporter	This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119547
title	openSUSE Security Update : openssl-1_0_0 (openSUSE-2018-1518)

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20190313_OPENSSL_ON_SL7_X.NASL
description	Security Fix(es) : - openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) Bug Fix(es) : - Perform the RSA signature self-tests with SHA-256
last seen	2020-03-18
modified	2019-03-14
plugin id	122845
published	2019-03-14
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/122845
title	Scientific Linux Security Update : openssl on SL7.x x86_64 (20190313)

NASL family	Web Servers
NASL id	OPENSSL_1_1_0I.NASL
description	According to its banner, the version of OpenSSL running on the remote host is 1.1.0 prior to 1.1.0i. It is, therefore, affected by a denial of service vulnerability, a cache timing side channel vulnerability, and a microarchitecture timing side channel attack.
last seen	2020-06-01
modified	2020-06-02
plugin id	112120
published	2018-08-27
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/112120
title	OpenSSL 1.1.0 < 1.1.0i Multiple Vulnerabilities

NASL family	Misc.
NASL id	NESSUS_TNS_2018_17.NASL
description	According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 7.1.4. It is, therefore, affected by multiple vulnerabilities: - Tenable Nessus contains a flaw in the bundled third-party component OpenSSL library
last seen	2020-06-01
modified	2020-06-02
plugin id	120198
published	2019-01-02
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/120198
title	Tenable Nessus < 7.1.4 Multiple Vulnerabilities (TNS-2018-17)

NASL family	Misc.
NASL id	NODEJS_2018_NOV.NASL
description	The version of Node.js installed on the remote host is 6.x prior to 6.15.0, 8.x prior to 8.14.0 or 10.x prior to 10.14.0 or 11.x prior to 11.3.0. Therefore, it is affected by multiple vulnerabilities. - OpenSSL Timing vulnerability in DSA signature generation (CVE-2018-0734). - OpenSSL Timing vulnerability in ECDSA signature generation (CVE-2018-0735). - OpenSSL Microarchitecture timing vulnerability in ECC scalar multiplication (CVE-2018-5407). - Debugger port 5858 listens on any interface by default CVE-2018-12120). - Denial of Service with large HTTP headers (CVE-2018-12121). - Slowloris HTTP Denial of Service (CVE-2018-12122). - Hostname spoofing in URL parser for javascript protocol (CVE-2018-12123). - HTTP request splitting (CVE-2018-12116). Note that Nessus has not tested for these issues but has instead relied only on the application
last seen	2020-06-01
modified	2020-06-02
plugin id	119938
published	2018-12-28
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119938
title	Node.js multiple vulnerabilities (November 2018 Security Releases).

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2018-4068-1.NASL
description	This update for compat-openssl098 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018). Fixed the
last seen	2020-04-30
modified	2018-12-13
plugin id	119646
published	2018-12-13
reporter	This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119646
title	SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2018:4068-1)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2018-3864-1.NASL
description	This update for openssl fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197). CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018). Add missing timing side channel patch for DSA signature generation (bsc#1113742). Fixed the
last seen	2020-06-01
modified	2020-06-02
plugin id	119116
published	2018-11-23
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119116
title	SUSE SLES12 Security Update : openssl (SUSE-SU-2018:3864-1)

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-3840-1.NASL
description	Samuel Weiser discovered that OpenSSL incorrectly handled DSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private DSA keys. (CVE-2018-0734) Samuel Weiser discovered that OpenSSL incorrectly handled ECDSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private ECDSA keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-0735) Billy Bob Brumley, Cesar Pereida Garcia, Sohaib ul Hassan, Nicola Tuveri, and Alejandro Cabrera Aldaya discovered that Simultaneous Multithreading (SMT) architectures are vulnerable to side-channel leakage. This issue is known as
last seen	2020-06-01
modified	2020-06-02
plugin id	119497
published	2018-12-07
reporter	Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119497
title	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : openssl, openssl1.0 vulnerabilities (USN-3840-1)

NASL family	Web Servers
NASL id	OPENSSL_1_0_2Q.NASL
description	According to its banner, the version of OpenSSL running on the remote host is 1.0.x prior to 1.0.2q. It is, therefore, affected by a denial of service vulnerability and a cache timing side channel vulnerability.
last seen	2020-06-01
modified	2020-06-02
plugin id	121383
published	2019-01-25
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121383
title	OpenSSL 1.0.x < 1.0.2q Multiple Vulnerabilities

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-3929.NASL
description	Updated Red Hat JBoss Web Server 5.2.0 packages are now available for Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library. This release of Red Hat JBoss Web Server 5.2 serves as a replacement for Red Hat JBoss Web Server 5.1, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References. Security Fix(es) : * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * openssl: 0-byte record padding oracle (CVE-2019-1559) * tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199 (CVE-2019-10072) * tomcat: XSS in SSI printenv (CVE-2019-0221) * tomcat: Apache Tomcat HTTP/2 DoS (CVE-2019-0199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-03-18
modified	2019-11-22
plugin id	131214
published	2019-11-22
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/131214
title	RHEL 6 / 7 / 8 : JBoss Web Server (RHSA-2019:3929)

NASL family	AIX Local Security Checks
NASL id	AIX_OPENSSL_ADVISORY29.NASL
description	The version of OpenSSL installed on the remote AIX host is affected by a side channel attack information disclosure vulnerability.
last seen	2020-06-01
modified	2020-06-02
plugin id	125707
published	2019-06-05
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/125707
title	AIX OpenSSL Advisory : openssl_advisory29.asc

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2019-0395-1.NASL
description	This update for nodejs6 to version 6.16.0 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka
last seen	2020-06-01
modified	2020-06-02
plugin id	122230
published	2019-02-15
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/122230
title	SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2019:0395-1)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2019-985.NASL
description	This update for openssl-1_0_0 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). - CVE-2018-5407: Added elliptic curve scalar multiplication timing attack defenses that fixes
last seen	2020-06-01
modified	2020-06-02
plugin id	123402
published	2019-03-27
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/123402
title	openSUSE Security Update : openssl-1_0_0 (openSUSE-2019-985)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2018-3989-1.NASL
description	This update for openssl-1_0_0 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). Add missing timing side channel patch for DSA signature generation (bsc#1113742). Non-security issues fixed: Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209). Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	119457
published	2018-12-06
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119457
title	SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2018:3989-1)

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DSA-4355.NASL
description	Several local side channel attacks and a denial of service via large Diffie-Hellman parameters were discovered in OpenSSL, a Secure Sockets Layer toolkit.
last seen	2020-03-28
modified	2018-12-20
plugin id	119792
published	2018-12-20
reporter	This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119792
title	Debian DSA-4355-1 : openssl1.0 - security update

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2019-1553-1.NASL
description	This update for openssl fixes the following issues : CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158) CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652) CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039) CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes
last seen	2020-06-01
modified	2020-06-02
plugin id	126046
published	2019-06-19
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/126046
title	SUSE SLES12 Security Update : openssl (SUSE-SU-2019:1553-1)

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DLA-1586.NASL
description	CVE-2018-0735 Samuel Weiser reported a timing vulnerability in the OpenSSL ECDSA signature generation, which might leak information to recover the private key. CVE-2018-5407 Alejandro Cabrera Aldaya, Billy Brumley, Sohaib ul Hassan, Cesar Pereida Garcia and Nicola Tuveri reported a vulnerability to a timing side channel attack, which might be used to recover the private key. For Debian 8
last seen	2020-06-01
modified	2020-06-02
plugin id	119103
published	2018-11-23
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119103
title	Debian DLA-1586-1 : openssl security update

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-0483.NASL
description	An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es) : * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es) : * Perform the RSA signature self-tests with SHA-256 (BZ#1673914)
last seen	2020-06-01
modified	2020-06-02
plugin id	122840
published	2019-03-14
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/122840
title	RHEL 7 : openssl (RHSA-2019:0483)

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DSA-4348.NASL
description	Several local side channel attacks and a denial of service via large Diffie-Hellman parameters were discovered in OpenSSL, a Secure Sockets Layer toolkit.
last seen	2020-06-01
modified	2020-06-02
plugin id	119313
published	2018-12-01
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119313
title	Debian DSA-4348-1 : openssl - security update

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2018-1434.NASL
description	According to the version of the openssl110f packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.(CVE-2018-5407) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-05-06
modified	2018-12-28
plugin id	119923
published	2018-12-28
reporter	This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119923
title	EulerOS 2.0 SP3 : openssl110f (EulerOS-SA-2018-1434)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2018-4001-1.NASL
description	This update for openssl-1_0_0 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). CVE-2018-5407: Added elliptic curve scalar multiplication timing attack defenses that fixes
last seen	2020-06-01
modified	2020-06-02
plugin id	120180
published	2019-01-02
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/120180
title	SUSE SLED15 / SLES15 Security Update : openssl-1_0_0 (SUSE-SU-2018:4001-1)

NASL family	Misc.
NASL id	NESSUS_TNS_2018_16.NASL
description	According to its self-reported version, the Tenable Nessus application running on the remote host is 8.x prior to 8.1.1. It is, therefore, affected by multiple vulnerabilities: - Tenable Nessus contains a flaw in the bundled third-party component OpenSSL library
last seen	2020-06-01
modified	2020-06-02
plugin id	120197
published	2019-01-02
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/120197
title	Tenable Nessus < 8.1.1 Multiple Vulnerabilities (TNS-2018-16)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2019-1267.NASL
description	According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).(CVE-2018-0734) - A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.(CVE-2018-5407) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	123735
published	2019-04-04
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/123735
title	EulerOS Virtualization 2.5.3 : openssl (EulerOS-SA-2019-1267)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2018-1464.NASL
description	This update for openssl fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). - CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). - Add missing timing side channel patch for DSA signature generation (bsc#1113742). Non-security issues fixed : - Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209). This update was imported from the SUSE:SLE-12-SP2:Update update project.
last seen	2020-06-05
modified	2018-11-26
plugin id	119139
published	2018-11-26
reporter	This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119139
title	openSUSE Security Update : openssl (openSUSE-2018-1464)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2019-234.NASL
description	This update for nodejs6 to version 6.16.0 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652) - CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka
last seen	2020-06-01
modified	2020-06-02
plugin id	122418
published	2019-02-25
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/122418
title	openSUSE Security Update : nodejs6 (openSUSE-2019-234)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-201903-10.NASL
description	The remote host is affected by the vulnerability described in GLSA-201903-10 (OpenSSL: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. A local attacker could run a malicious process next to legitimate processes using the architecture’s parallel thread running capabilities to leak encrypted data from the CPU’s internal processes. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	122832
published	2019-03-14
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/122832
title	GLSA-201903-10 : OpenSSL: Multiple vulnerabilities

NASL family	Slackware Local Security Checks
NASL id	SLACKWARE_SSA_2018-325-01.NASL
description	New openssl packages are available for Slackware 14.2 and -current to fix security issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	119113
published	2018-11-23
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119113
title	Slackware 14.0 / 14.1 / 14.2 / current : openssl (SSA:2018-325-01)

NASL family	NewStart CGSL Local Security Checks
NASL id	NEWSTART_CGSL_NS-SA-2019-0218_OVMF.NASL
description	The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ovmf packages installed that are affected by multiple vulnerabilities: - Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. (CVE-2018-12181) - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access. (CVE-2019-0160) - Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on
last seen	2020-06-01
modified	2020-06-02
plugin id	131425
published	2019-12-02
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/131425
title	NewStart CGSL CORE 5.04 / MAIN 5.04 : ovmf Multiple Vulnerabilities (NS-SA-2019-0218)

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2019-1326.NASL
description	According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable
last seen	2020-05-06
modified	2019-05-06
plugin id	124612
published	2019-05-06
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/124612
title	EulerOS 2.0 SP3 : openssl (EulerOS-SA-2019-1326)

NASL family	CentOS Local Security Checks
NASL id	CENTOS_RHSA-2019-2125.NASL
description	An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. OVMF (Open Virtual Machine Firmware) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es) : * edk2: Privilege escalation via processing of malformed files in TianoCompress.c (CVE-2017-5731) * edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (CVE-2017-5732) * edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function (CVE-2017-5733) * edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function (CVE-2017-5734) * edk2: Privilege escalation via heap-based buffer overflow in Decode() function (CVE-2017-5735) * edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users (CVE-2018-3613) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181) * edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media (CVE-2019-0160) * edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes : For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
last seen	2020-06-01
modified	2020-06-02
plugin id	128356
published	2019-08-30
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/128356
title	CentOS 7 : ovmf (CESA-2019:2125)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-3932.NASL
description	Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering. This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release. Security Fix(es) : * openssl: RSA key generation cache timing vulnerability in crypto/rsa/ rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/ Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-06-01
modified	2020-06-02
plugin id	131215
published	2019-11-22
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/131215
title	RHEL 6 : JBoss Core Services (RHSA-2019:3932) (0-Length Headers Leak) (Data Dribble) (Internal Data Buffering) (Resource Loop)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-3933.NASL
description	An update is now available for JBoss Core Services on RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering. This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release. Security Fix(es) : * openssl: RSA key generation cache timing vulnerability in crypto/rsa/ rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
last seen	2020-06-01
modified	2020-06-02
plugin id	131216
published	2019-11-22
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/131216
title	RHEL 7 : JBoss Core Services (RHSA-2019:3933) (0-Length Headers Leak) (Data Dribble) (Internal Data Buffering) (Resource Loop)

NASL family	CGI abuses
NASL id	ORACLE_PRIMAVERA_P6_EPPM_CPU_APR_2019.NASL
description	According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) installation running on the remote web server is 8.4 prior to 8.4.15.10, 15.x prior to 15.2.18.4, 16.x prior to 16.2.17.2, 17.x prior to 17.12.12.0, or 18.x prior to 18.8.8.0. It is, therefore, affected by multiple vulnerabilities: - A deserialization vulnerability in Apache Commons FileUpload allows for remote code execution. (CVE-2016-1000031) - A denial of service vulnerability in the bundled third-party component OpenSSL library
last seen	2020-06-01
modified	2020-06-02
plugin id	124169
published	2019-04-19
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/124169
title	Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (Apr 2019 CPU)

NASL family	FreeBSD Local Security Checks
NASL id	FREEBSD_PKG_2A86F45AFC3C11E8A41400155D006B02.NASL
description	Node.js reports : Updates are now available for all active Node.js release lines. These include fixes for the vulnerabilities identified in the initial announcement. They also include upgrades of Node.js 6 and 8 to OpenSSL 1.0.2q, and upgrades of Node.js 10 and 11 to OpenSSL 1.1.0j. We recommend that all Node.js users upgrade to a version listed below as soon as possible. Debugger port 5858 listens on any interface by default (CVE-2018-12120) All versions of Node.js 6 are vulnerable and the severity is HIGH. When the debugger is enabled with node --debug or node debug, it listens to port 5858 on all interfaces by default. This may allow remote computers to attach to the debug port and evaluate arbitrary JavaScript. The default interface is now localhost. It has always been possible to start the debugger on a specific interface, such as node --debug=localhost. The debugger was removed in Node.js 8 and replaced with the inspector, so no versions from 8 and later are vulnerable. Denial of Service with large HTTP headers (CVE-2018-12121) All versions of 6 and later are vulnerable and the severity is HIGH. By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer. The total size of HTTP headers received by Node.js now must not exceed 8192 bytes.
last seen	2020-06-01
modified	2020-06-02
plugin id	119511
published	2018-12-10
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119511
title	FreeBSD : node.js -- multiple vulnerabilities (2a86f45a-fc3c-11e8-a414-00155d006b02)

NASL family	Misc.
NASL id	VIRTUALBOX_JAN_2019_CPU.NASL
description	The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.24 or 6.0.x prior to 6.0.2. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory : - A denial of service vulnerability in the bundled third-party component OpenSSL library
last seen	2020-06-01
modified	2020-06-02
plugin id	121247
published	2019-01-18
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121247
title	Oracle VM VirtualBox 5.2.x < 5.2.24 / 6.0.x < 6.0.2 (Jan 2019 CPU)

NASL family	FreeBSD Local Security Checks
NASL id	FREEBSD_PKG_6F170CF2E6B711E8A9A8B499BAEBFEAF.NASL
description	The OpenSSL project reports : Microarchitecture timing vulnerability in ECC scalar multiplication. Severity: Low OpenSSL ECC scalar multiplication, used in e.g. ECDSA and ECDH, has been shown to be vulnerable to a microarchitecture timing side channel attack. An attacker with sufficient access to mount local timing attacks during ECDSA signature generation could recover the private key.
last seen	2020-06-01
modified	2020-06-02
plugin id	118901
published	2018-11-13
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/118901
title	FreeBSD : OpenSSL -- timing vulnerability (6f170cf2-e6b7-11e8-a9a8-b499baebfeaf)

NASL family	Misc.
NASL id	ORACLE_TUXEDO_CPU_APR_2019.NASL
description	The version of Oracle Tuxedo installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists in OpenSSL due to the potential for a side-channel timing attack. An unauthenticated attacker can exploit this to disclose potentially sensitive information. (CVE-2018-0734, CVE-2018-0735, CVE-2018-5407)
last seen	2020-06-01
modified	2020-06-02
plugin id	124171
published	2019-04-19
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/124171
title	Oracle Tuxedo Multiple Vulnerabilities (Apr 2019 CPU)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2019-2125.NASL
description	An update for ovmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. OVMF (Open Virtual Machine Firmware) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es) : * edk2: Privilege escalation via processing of malformed files in TianoCompress.c (CVE-2017-5731) * edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (CVE-2017-5732) * edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function (CVE-2017-5733) * edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function (CVE-2017-5734) * edk2: Privilege escalation via heap-based buffer overflow in Decode() function (CVE-2017-5735) * edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users (CVE-2018-3613) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181) * edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media (CVE-2019-0160) * edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes : For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
last seen	2020-06-01
modified	2020-06-02
plugin id	127676
published	2019-08-12
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/127676
title	RHEL 7 : ovmf (RHSA-2019:2125)

NASL family	SuSE Local Security Checks
NASL id	SUSE_SU-2018-3866-1.NASL
description	This update for openssl fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652). CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534). Add missing timing side channel patch for DSA signature generation (bsc#1113742). Non-security issues fixed: Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	119117
published	2018-11-23
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/119117
title	SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:3866-1)

Redhat

advisories

bugzilla

id	1645695
title	CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND
comment openssl-perl is earlier than 1:1.0.2k-16.el7_6.1
oval oval:com.redhat.rhsa:tst:20190483001
comment openssl-perl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20171929004

AND

comment openssl-devel is earlier than 1:1.0.2k-16.el7_6.1
oval oval:com.redhat.rhsa:tst:20190483003
comment openssl-devel is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20171929002

AND

comment openssl-static is earlier than 1:1.0.2k-16.el7_6.1
oval oval:com.redhat.rhsa:tst:20190483005
comment openssl-static is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20171929006

AND
comment openssl is earlier than 1:1.0.2k-16.el7_6.1
oval oval:com.redhat.rhsa:tst:20190483007
comment openssl is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20171929008
AND
comment openssl-libs is earlier than 1:1.0.2k-16.el7_6.1
oval oval:com.redhat.rhsa:tst:20190483009
comment openssl-libs is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhba:tst:20171929010

rhsa

id	RHSA-2019:0483
released	2019-03-13
severity	Moderate
title	RHSA-2019:0483: openssl security and bug fix update (Moderate)

rhsa
id RHSA-2019:0651
rhsa
id RHSA-2019:0652
rhsa
id RHSA-2019:2125
rhsa
id RHSA-2019:3929
rhsa
id RHSA-2019:3931
rhsa
id RHSA-2019:3932
rhsa
id RHSA-2019:3933
rhsa
id RHSA-2019:3935

rpms

openssl-1:1.0.2k-16.el7_6.1
openssl-debuginfo-1:1.0.2k-16.el7_6.1
openssl-devel-1:1.0.2k-16.el7_6.1
openssl-libs-1:1.0.2k-16.el7_6.1
openssl-perl-1:1.0.2k-16.el7_6.1
openssl-static-1:1.0.2k-16.el7_6.1
OVMF-0:20180508-6.gitee3198e672e2.el7
jws5-ecj-0:4.12.0-1.redhat_1.1.el6jws
jws5-ecj-0:4.12.0-1.redhat_1.1.el7jws
jws5-ecj-0:4.12.0-1.redhat_1.1.el8jws
jws5-javapackages-tools-0:3.4.1-5.15.11.el6jws
jws5-javapackages-tools-0:3.4.1-5.15.11.el7jws
jws5-javapackages-tools-0:3.4.1-5.15.11.el8jws
jws5-jboss-logging-0:3.3.2-1.Final_redhat_00001.1.el6jws
jws5-jboss-logging-0:3.3.2-1.Final_redhat_00001.1.el7jws
jws5-jboss-logging-0:3.3.2-1.Final_redhat_00001.1.el8jws
jws5-mod_cluster-0:1.4.1-1.Final_redhat_00001.2.el6jws
jws5-mod_cluster-0:1.4.1-1.Final_redhat_00001.2.el7jws
jws5-mod_cluster-0:1.4.1-1.Final_redhat_00001.2.el8jws
jws5-mod_cluster-tomcat-0:1.4.1-1.Final_redhat_00001.2.el6jws
jws5-mod_cluster-tomcat-0:1.4.1-1.Final_redhat_00001.2.el7jws
jws5-mod_cluster-tomcat-0:1.4.1-1.Final_redhat_00001.2.el8jws
jws5-python-javapackages-0:3.4.1-5.15.11.el6jws
jws5-python-javapackages-0:3.4.1-5.15.11.el7jws
jws5-python-javapackages-0:3.4.1-5.15.11.el8jws
jws5-tomcat-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-admin-webapps-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-admin-webapps-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-admin-webapps-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-docs-webapp-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-docs-webapp-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-docs-webapp-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-el-3.0-api-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-el-3.0-api-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-el-3.0-api-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-javadoc-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-javadoc-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-javadoc-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-jsp-2.3-api-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-jsp-2.3-api-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-jsp-2.3-api-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-lib-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-lib-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-lib-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-native-0:1.2.21-34.redhat_34.el6jws
jws5-tomcat-native-0:1.2.21-34.redhat_34.el7jws
jws5-tomcat-native-0:1.2.21-34.redhat_34.el8jws
jws5-tomcat-native-debuginfo-0:1.2.21-34.redhat_34.el6jws
jws5-tomcat-native-debuginfo-0:1.2.21-34.redhat_34.el7jws
jws5-tomcat-native-debuginfo-0:1.2.21-34.redhat_34.el8jws
jws5-tomcat-selinux-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-selinux-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-selinux-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-servlet-4.0-api-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-servlet-4.0-api-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-servlet-4.0-api-0:9.0.21-10.redhat_4.1.el8jws
jws5-tomcat-vault-0:1.1.8-1.Final_redhat_1.1.el6jws
jws5-tomcat-vault-0:1.1.8-1.Final_redhat_1.1.el7jws
jws5-tomcat-vault-0:1.1.8-1.Final_redhat_1.1.el8jws
jws5-tomcat-vault-javadoc-0:1.1.8-1.Final_redhat_1.1.el6jws
jws5-tomcat-vault-javadoc-0:1.1.8-1.Final_redhat_1.1.el7jws
jws5-tomcat-vault-javadoc-0:1.1.8-1.Final_redhat_1.1.el8jws
jws5-tomcat-webapps-0:9.0.21-10.redhat_4.1.el6jws
jws5-tomcat-webapps-0:9.0.21-10.redhat_4.1.el7jws
jws5-tomcat-webapps-0:9.0.21-10.redhat_4.1.el8jws
jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6
jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6
jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6
jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6
jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6
jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6
jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6
jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6
jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6
jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6
jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6
jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6
jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6
jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6
jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6
jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6
jbcs-httpd24-jansson-0:2.11-20.jbcs.el6
jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6
jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6
jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6
jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6
jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6
jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6
jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6
jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6
jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6
jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6
jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6
jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6
jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6
jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6
jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6
jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6
jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6
jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6
jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6
jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6
jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6
jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6
jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6
jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6
jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6
jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7
jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7
jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7
jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7
jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7
jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7
jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7
jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7
jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7
jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7
jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7
jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7
jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7
jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7
jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7
jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7
jbcs-httpd24-jansson-0:2.11-20.jbcs.el7
jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7
jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7
jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7
jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7
jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7
jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7
jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7
jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7
jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7
jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7
jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7
jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7
jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7
jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7
jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7
jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7
jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7
jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7
jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7
jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7
jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7
jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7
jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7
jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7
jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7

The Hacker News

id	THN:ED6AA651CF0924A51404298103765C4C
last seen	2018-11-04
modified	2018-11-04
published	2018-11-04
reporter	The Hacker News
source	https://thehackernews.com/2018/11/portsmash-intel-vulnerability.html
title	New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Exploit-Db

Nessus

Redhat

The Hacker News

Related news

References