What’s Vulnerable › Vulnerabilities

CVE-2018-3639

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 60.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-05-22 · updated 2026-06-17
• Weakness: CWE-203

Description

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Affected products

• Arm Cortex-A: 15, 57, 72
• Canonical Ubuntu Linux: 12.04, 14.04, 16.04, 17.10, 18.04
• Debian Linux: 8.0, 9.0
• Intel Atom C: c2308, c3308, c3338, c3508, c3538, c3558 (+10)
• Intel Atom E: e3805, e3815, e3825, e3826, e3827, e3845
• Intel Atom X5-E3930: all versions
• Intel Atom X5-E3940: all versions
• Intel Atom X7-E3950: all versions
• Intel Atom Z: z2420, z2460, z2480, z2520, z2560, z2580 (+24)
• Intel Celeron J: j3455, j4005, j4105
• Intel Celeron N: n3450
• Intel Core I3: 32nm, 45nm
• Intel Core I5: 32nm, 45nm
• Intel Core I7: 32nm, 45nm
• Intel Core M: 32nm, 45nm
• Intel Pentium: n4000, n4100, n4200
• Intel Pentium J: j4205
• Intel Pentium Silver: j5005, n5000
• Intel Xeon E-1105C: all versions
• Intel Xeon E3: 125c_, 1220_, 1275_, 1505m_v6, 1515m_v5, 1535m_v5 (+41)
• Intel Xeon E3 1105C V2: all versions
• Intel Xeon E3 1125C V2: all versions
• Intel Xeon E3 12201: all versions
• Intel Xeon E3 12201 V2: all versions
• Intel Xeon E3 1220 V2: all versions
• Intel Xeon E3 1220 V3: all versions
• Intel Xeon E3 1220 V5: all versions
• Intel Xeon E3 1220 V6: all versions
• Intel Xeon E3 1220L V3: all versions
• Intel Xeon E3 1225: all versions

References

• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html
• http://support.lenovo.com/us/en/solutions/LEN-22133
• http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html
• http://www.openwall.com/lists/oss-security/2020/06/10/1
• http://www.openwall.com/lists/oss-security/2020/06/10/2
• http://www.openwall.com/lists/oss-security/2020/06/10/5
• http://www.securityfocus.com/bid/104232
• http://www.securitytracker.com/id/1040949
• http://www.securitytracker.com/id/1042004
• http://xenbits.xen.org/xsa/advisory-263.html

Get alerted when CVE-2018-3639 or the next vulnerability affects your stack