CVE-2018-5407

MediumCVSS 4.7/10Last modified Oct 8, 2026

Description

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200CWE-203

Affected software

No affected versions have been published.

Timeline

Published
Nov 15, 2018
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-54087.4The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterCVE-2018-54099.8The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifCVE-2018-54107.8Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker canCVE-2018-54115.4Pixar's Tractor software, versions 2.2 and earlier, contain a stored cross-site scripting vulnerability in the field that allows a user to aCVE-2018-54127.8Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode.CVE-2018-54138.8Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilCVE-2018-54288.8The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities thCVE-2018-54298.8A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community CVE-2018-54308.8The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports CVE-2018-54315.4The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JaspeCVE-2018-54325.4The TIBCO Administrator server component of of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - EntCVE-2018-54336.5The TIBCO Administrator server component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterp
CVE-2018-5407: Medium severity, CVSS 4.7 | Vulnix