CVE-2018-5407
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
Does this matter?
A public exploit is published in Exploit-DB, so the technical barrier is gone even though the severity is medium and EPSS is 3.4%. Treat it as high on anything reachable from the internet.
Description
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
- CVSS 3.1
- 4.7 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 3.42% probability · 89th percentile
- Public exploits
- 1 in Exploit-DB · first 2 November 2018
- CISA KEV
- Not listed
- Weakness
- CWE-200, CWE-203
- Affected
- canonical/ubuntu linux · debian/debian linux · nodejs/node.js · openssl/openssl · tenable/nessus · oracle/api gateway · oracle/application server · oracle/enterprise manager base platform · oracle/enterprise manager ops center · oracle/mysql enterprise backup · oracle/peoplesoft enterprise peopletools · oracle/primavera p6 enterprise project portfolio management · oracle/tuxedo · oracle/vm virtualbox · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation
- Source
- cret@cert.org
EPSS 3.4% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
Public exploits (1)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
References
- http://www.securityfocus.com/bid/105897Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2019:0483Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:0651Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:0652Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2125Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3929Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3931Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3932Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3933Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3935Third Party Advisory
- https://eprint.iacr.org/2018/1060.pdfTechnical Description, Third Party Advisory
- https://github.com/bbbrumley/portsmashExploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/11/msg00024.htmlMailing List, Third Party Advisory
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/Third Party Advisory
- https://security.gentoo.org/glsa/201903-10Third Party Advisory
- https://security.netapp.com/advisory/ntap-20181126-0001/Third Party Advisory
- https://support.f5.com/csp/article/K49711130?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/3840-1/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4348Third Party Advisory
- https://www.debian.org/security/2018/dsa-4355Third Party Advisory
- https://www.exploit-db.com/exploits/45785/Exploit, Third Party Advisory, VDB Entry
- https://www.oracle.com/security-alerts/cpuapr2020.htmlPatch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch, Vendor Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlPatch, Third Party Advisory
- https://www.tenable.com/security/tns-2018-16Third Party Advisory
- https://www.tenable.com/security/tns-2018-17Third Party Advisory
- http://www.securityfocus.com/bid/105897Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2019:0483Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.