Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-release-virtualization-host | 0:4.2-5.2.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-virtualization-host | 0:4.2-20180813.0.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-virtualization-host-image-update | 0:4.2-20180813.0.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-virtualization-host-image-update-placeholder | 0:4.2-5.2.el7 |
Vulnerabilities 3
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…
-
Unscored —CVE-2018-5390 EPSS 72%
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/security/vulnerabilities/L1TF
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1585005
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1601704
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1614067
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2403.json
-
report
https://access.redhat.com/security/cve/CVE-2018-3620
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3620
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3620
-
article
https://access.redhat.com/articles/3562741
-
article
https://foreshadowattack.eu/
-
article
https://software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
-
article
https://www.redhat.com/en/blog/deeper-look-l1-terminal-fault-aka-foreshadow
-
article
https://www.redhat.com/en/blog/understanding-l1-terminal-fault-aka-foreshadow-what-you-need-know
-
report
https://access.redhat.com/security/cve/CVE-2018-3646
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3646
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3646
-
report
https://access.redhat.com/security/cve/CVE-2018-5390
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-5390
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-5390
-
article
https://access.redhat.com/articles/3553061
-
advisory
https://www.kb.cert.org/vuls/id/962459
-
article
https://www.spinics.net/lists/netdev/msg514742.html