CVE-2018-5407
Published Nov 15, 2018Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
- evidence mentions
- 3
- Buzz score
- 25.4
Vendor/product archive
2 CVEs tagged to oracle / mysql_enterprise_backup — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the priva…