CVE-2018-12207

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-14 · updated 2026-06-17
Weakness: CWE-20

Description

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.

Affected products

Canonical Ubuntu Linux: 14.04
Debian Linux: 9.0
F5 BIG-IP APM: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
BIG-IP: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 Big-Ip Analytics: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 Networks, Inc. BIG-IP (AAM): from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
BIG-IP ASM: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 BIG-IP DNS: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 Big-Ip Fraud Protection Service: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 Big-Ip Global Traffic Manager: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 Big-Ip Link Controller: from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 BIG-IP (LTM): from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 Networks, Inc. BIG-IP (PEM): from 11.5.2 through 11.6.5; from 12.1.0 through 12.1.5; from 13.1.0 through 13.1.3; from 14.1.0 through 14.1.2; from 15.0.0 through 15.0.1
F5 BIG-IQ: from 5.2.0 through 5.4.0; from 6.0.0 through 6.1.0; 7.0.0
F5 Networks, Inc. Enterprise Manager: 3.1.1
Fedoraproject Fedora: 30, 31
Intel Celeron G1610 Firmware: all versions
Intel Celeron G1610T Firmware: all versions
Intel Celeron G1620 Firmware: all versions
Intel Celeron G1620T Firmware: all versions
Intel Celeron G1630 Firmware: all versions
Intel Celeron G1820 Firmware: all versions
Intel Celeron G1820T Firmware: all versions
Intel Celeron G1820Te Firmware: all versions
Intel Celeron G1830 Firmware: all versions
Intel Celeron G1840 Firmware: all versions
Intel Celeron G1840T Firmware: all versions
Intel Celeron G1850 Firmware: all versions
Intel Celeron G3900 Firmware: all versions
Intel Celeron G3900E Firmware: all versions

References

Get alerted when CVE-2018-12207 or the next vulnerability affects your stack