AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2018-5407.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSMEDIUM / 4.7CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Source-reported weakness categories

CWE-200, CWE-203

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2018-5407

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
canonicalubuntu_linux14.04
canonicalubuntu_linux16.04
canonicalubuntu_linux18.04
canonicalubuntu_linux18.10
debiandebian_linux8.0
debiandebian_linux9.0
nodejsnode.js* {"versionStartIncluding":"10.0.0","versionEndExcluding":"10.9.0"}
opensslopenssl* {"versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.0i"}
tenablenessus* {"versionEndExcluding":"8.1.1"}
oracleapi_gateway11.1.2.4.0
oracleapplication_server0.9.8
oracleapplication_server1.0.0
oracleapplication_server1.0.1
oracleenterprise_manager_base_platform12.1.0.5.0
oracleenterprise_manager_base_platform13.2.0.0.0
oracleenterprise_manager_base_platform13.3.0.0.0
oracleenterprise_manager_ops_center12.3.3
oraclemysql_enterprise_backup* {"versionStartIncluding":"3.12.4","versionEndIncluding":"4.1.2"}
oraclepeoplesoft_enterprise_peopletools8.55
oraclepeoplesoft_enterprise_peopletools8.56
oraclepeoplesoft_enterprise_peopletools8.57
oracleprimavera_p6_enterprise_project_portfolio_management* {"versionStartIncluding":"17.7","versionEndIncluding":"17.12"}
oracleprimavera_p6_enterprise_project_portfolio_management8.4
oracleprimavera_p6_enterprise_project_portfolio_management15.1
oracleprimavera_p6_enterprise_project_portfolio_management15.2
oracleprimavera_p6_enterprise_project_portfolio_management16.1
oracleprimavera_p6_enterprise_project_portfolio_management16.2
oracleprimavera_p6_enterprise_project_portfolio_management18.8
oracletuxedo12.1.1.0.0
oraclevm_virtualbox* {"versionEndExcluding":"6.0.0"}
redhatenterprise_linux_desktop7.0
redhatenterprise_linux_server7.0
redhatenterprise_linux_server7.6
redhatenterprise_linux_server_aus7.6
redhatenterprise_linux_server_eus7.6
redhatenterprise_linux_server_tus7.6
redhatenterprise_linux_workstation7.0

Original records & references

PUBLISHED 2018-11-15T16:29:00-05:00
MODIFIED 2026-10-08T18:16:46-04:00
INGESTED 2026-10-10T20:50:18-04:00