CVE-2018-12126
Medium
Description
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
SeverityMedium
CVSS5.6
Exploit probability—
Product
Intel Microarchitectural Store Buffer Data Sampling Firmware
PublishedMay 30, 2019
First seenMay 30, 2019
Weakness typeCWE-200Sensitive information exposure
How to fix
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/
- access.redhat.com/errata/RHSA-2019:1455
- usn.ubuntu.com/3977-3/
- freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc
- access.redhat.com/errata/RHSA-2019:2553
- security.freebsd.org/advisories/FreeBSD-SA-19:26.mcu.asc
- debian.org/security/2020/dsa-4602
- security.gentoo.org/glsa/202003-56
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel microarchitectural_store_buffer_data_sampling_firmware | No range specified | — |
| fedoraproject fedora | 29 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.