Fluid Attacks Database

Description

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	openssl	>=0 <1.1.1~~pre9-1	1.1.1~~pre9-1
alpine v3.3	openssl	>=1.0.2 <1.0.2q-r0	1.0.2q-r0
alpine v3.7	openssl	>=1.0.2 <1.0.2q-r0	1.0.2q-r0
alpine v3.8	openssl	>=1.0.2 <1.0.2q-r0	1.0.2q-r0
debian 11	openssl	>=0 <1.1.1~~pre9-1	1.1.1~~pre9-1
debian 12	openssl	>=0 <1.1.1~~pre9-1	1.1.1~~pre9-1
debian 14	openssl	>=0 <1.1.1~~pre9-1	1.1.1~~pre9-1
alpine v3.4	openssl	>=1.0.2 <1.0.2q-r0	1.0.2q-r0
alpine v3.5	openssl	>=1.0.2 <1.0.2q-r0	1.0.2q-r0
alpine v3.6	openssl	>=1.0.2 <1.0.2q-r0	1.0.2q-r0

1-10 of 19

References

1. https://support.f5.com/csp/article/K49711130?utm_source=f5support&amp%3Butm_medium=RSS2. https://www.oracle.com/security-alerts/cpuapr2020.html3. https://www.oracle.com/security-alerts/cpujan2020.html4. https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html5. https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html6. https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.