CVE-2018-3639

Medium

Description

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

SeverityMedium
CVSS5.5
Exploit probability—
ProductOracle Local Service Management System
PublishedMay 22, 2018
First seenMay 22, 2018
Weakness typeCWE-203CWE-203

How to fix

Affected products

ProductAffected versionsFixed in
intel atom_cc2308, c3308, c3338, c3508, c3538, c3558, c3708, c3750, c3758, c3808, c3830, c3850, c3858, c3950, c3955, c3958—
intel atom_ee3805, e3815, e3825, e3826, e3827, e3845—
intel atom_x5-e3930No range specified—
intel atom_x5-e3940No range specified—
intel atom_x7-e3950No range specified—
intel atom_zz2420, z2460, z2480, z2520, z2560, z2580, z2760, z3460, z3480, z3530, z3560, z3570, z3580, z3590, z3735d, z3735e, z3735f, z3735g, z3736f, z3736g, z3740, z3740d, z3745, z3745d, z3770, z3770d, z3775, z3775d, z3785, z3795—
intel celeron_jj3455, j4005, j4105—
intel celeron_nn3450—
intel core_i332nm, 45nm—
intel core_i532nm, 45nm—
intel core_i732nm, 45nm—
intel core_m32nm, 45nm—
intel pentiumn4000, n4100, n4200—
intel pentium_jj4205—
intel pentium_silverj5005, n5000—
intel xeon_e-1105cNo range specified—
intel xeon_e3125c_, 1220_, 1275_, 1505m_v6, 1515m_v5, 1535m_v5, 1535m_v6, 1545m_v5, 1558l_v5, 1565l_v5, 1575m_v5, 1578l_v5, 1585_v5, 1585l_v5, 3600, 5600, 7500, e5502, e5503, e5504, e5506, e5507, e5520, e5530, e5540, e6510, e6540, e6550, l3403, l3406, l3426, l5506, l5508_, l5518_, l5520, l5530, w5580, w5590, x3430, x3440, x3450, x3460, x3470, x3480, x5550, x5560, x5570—
intel xeon_e3_1105c_v2No range specified—
intel xeon_e3_1125c_v2No range specified—
intel xeon_e3_1220_v2No range specified—
intel xeon_e3_1220_v3No range specified—
intel xeon_e3_1220_v5No range specified—
intel xeon_e3_1220_v6No range specified—
intel xeon_e3_12201No range specified—
intel xeon_e3_12201_v2No range specified—
intel xeon_e3_1220l_v3No range specified—
intel xeon_e3_1225No range specified—
intel xeon_e3_1225_v2No range specified—
intel xeon_e3_1225_v3No range specified—
intel xeon_e3_1225_v5No range specified—
intel xeon_e3_1225_v6No range specified—
intel xeon_e3_1226_v3No range specified—
intel xeon_e3_1230No range specified—
intel xeon_e3_1230_v2No range specified—
intel xeon_e3_1230_v3No range specified—
intel xeon_e3_1230_v5No range specified—
intel xeon_e3_1230_v6No range specified—
intel xeon_e3_1230l_v3No range specified—
intel xeon_e3_1231_v3No range specified—
intel xeon_e3_1235No range specified—
intel xeon_e3_1235l_v5No range specified—
intel xeon_e3_1240No range specified—
intel xeon_e3_1240_v2No range specified—
intel xeon_e3_1240_v3No range specified—
intel xeon_e3_1240_v5No range specified—
intel xeon_e3_1240_v6No range specified—
intel xeon_e3_1240l_v3No range specified—
intel xeon_e3_1240l_v5No range specified—
intel xeon_e3_1241_v3No range specified—
intel xeon_e3_1245No range specified—
intel xeon_e3_1245_v2No range specified—
intel xeon_e3_1245_v3No range specified—
intel xeon_e3_1245_v5No range specified—
intel xeon_e3_1245_v6No range specified—
intel xeon_e3_1246_v3No range specified—
intel xeon_e3_1258l_v4No range specified—
intel xeon_e3_1260lNo range specified—
intel xeon_e3_1260l_v5No range specified—
intel xeon_e3_1265l_v2No range specified—
intel xeon_e3_1265l_v3No range specified—
intel xeon_e3_1265l_v4No range specified—
intel xeon_e3_1268l_v3No range specified—
intel xeon_e3_1268l_v5No range specified—
intel xeon_e3_1270No range specified—
intel xeon_e3_1270_v2No range specified—
intel xeon_e3_1270_v3No range specified—
intel xeon_e3_1270_v5No range specified—
intel xeon_e3_1270_v6No range specified—
intel xeon_e3_1271_v3No range specified—
intel xeon_e3_1275_v2No range specified—
intel xeon_e3_1275_v3No range specified—
intel xeon_e3_1275_v5No range specified—
intel xeon_e3_1275_v6No range specified—
intel xeon_e3_1275l_v3No range specified—
intel xeon_e3_1276_v3No range specified—
intel xeon_e3_1278l_v4No range specified—
intel xeon_e3_1280No range specified—
intel xeon_e3_1280_v2No range specified—
intel xeon_e3_1280_v3No range specified—
intel xeon_e3_1280_v5No range specified—
intel xeon_e3_1280_v6No range specified—
intel xeon_e3_1281_v3No range specified—
intel xeon_e3_1285_v3No range specified—
intel xeon_e3_1285_v4No range specified—
intel xeon_e3_1285_v6No range specified—
intel xeon_e3_1285l_v3No range specified—
intel xeon_e3_1285l_v4No range specified—
intel xeon_e3_1286_v3No range specified—
intel xeon_e3_1286l_v3No range specified—
intel xeon_e3_1290No range specified—
intel xeon_e3_1290_v2No range specified—
intel xeon_e3_1501l_v6No range specified—
intel xeon_e3_1501m_v6No range specified—
intel xeon_e3_1505l_v5No range specified—
intel xeon_e3_1505l_v6No range specified—
intel xeon_e3_1505m_v5No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2018-3639 · Oracle Local Service Management System · Dark Radar