Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-5407

29
FAUCET Score

CVE-2018-5407 describes a side-channel timing attack, dubbed 'PortSmash', that exploits Simultaneous Multi-threading (SMT) in processors to enable local users to extract sensitive data from software vulnerable to timing attacks. This vulnerability impacts various products including Canonical, Debian, Node.js, OpenSSL, Oracle, Red Hat, and Tenable. With a CVSS score of 4.7 (Medium), it requires local access and high attack complexity, but can lead to a complete compromise of confidentiality. While not on the KEV catalog and lacking Metasploit or Nuclei exploits, an ExploitDB entry exists, and it has garnered significant community discussion and media coverage, indicating awareness despite no confirmed active exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
14.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
16.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
18.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
18.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.7MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.0
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
3.42%
Probability of exploitation in next 30 days
EPSS Percentile
87.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
ExploitDB: EDB-45785 · Nov 2, 2018
This CVE's current EPSS score of 0.0342 is in the 97th percentile among its peer group of 1,296 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (63)

oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-jansson-0:2.11-20.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-jansson-0:2.11-20.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.2k-16.el7_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: ovmf-0:20180508-6.gitee3198e672e2.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5Fixed in: openssl
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 6Fixed in: jws5-ecj-0:4.12.0-1.redhat_1.1.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 6Fixed in: jws5-javapackages-tools-0:3.4.1-5.15.11.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 6Fixed in: jws5-jboss-logging-0:3.3.2-1.Final_redhat_00001.1.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 6Fixed in: jws5-mod_cluster-0:1.4.1-1.Final_redhat_00001.2.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 6Fixed in: jws5-tomcat-0:9.0.21-10.redhat_4.1.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 6Fixed in: jws5-tomcat-native-0:1.2.21-34.redhat_34.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 6Fixed in: jws5-tomcat-vault-0:1.1.8-1.Final_redhat_1.1.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 7Fixed in: jws5-ecj-0:4.12.0-1.redhat_1.1.el7jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 7Fixed in: jws5-javapackages-tools-0:3.4.1-5.15.11.el7jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 7Fixed in: jws5-jboss-logging-0:3.3.2-1.Final_redhat_00001.1.el7jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 7Fixed in: jws5-mod_cluster-0:1.4.1-1.Final_redhat_00001.2.el7jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 7Fixed in: jws5-tomcat-0:9.0.21-10.redhat_4.1.el7jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 7Fixed in: jws5-tomcat-native-0:1.2.21-34.redhat_34.el7jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 7Fixed in: jws5-tomcat-vault-0:1.1.8-1.Final_redhat_1.1.el7jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 8Fixed in: jws5-ecj-0:4.12.0-1.redhat_1.1.el8jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 8Fixed in: jws5-javapackages-tools-0:3.4.1-5.15.11.el8jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 8Fixed in: jws5-jboss-logging-0:3.3.2-1.Final_redhat_00001.1.el8jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 8Fixed in: jws5-mod_cluster-0:1.4.1-1.Final_redhat_00001.2.el8jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 8Fixed in: jws5-tomcat-0:9.0.21-10.redhat_4.1.el8jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 8Fixed in: jws5-tomcat-native-0:1.2.21-34.redhat_34.el8jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.2 on RHEL 8Fixed in: jws5-tomcat-vault-0:1.1.8-1.Final_redhat_1.1.el8jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: imgbased-0:1.1.7-0.1.el7ev
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: ovirt-node-ng-0:4.3.0-0.20181213.0.el7ev
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: redhat-release-virtualization-host-0:4.3-0.5.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: redhat-virtualization-host-0:4.3-20190409.0.el7_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: rhvm-appliance-0:4.3-20190409.0.el7
View patch
redhatpatch availablevia redhat_api
Product: Text-Only JBCSFixed in: openssl
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssl
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssl097a
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: openssl
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: openssl098e
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: openssl098e
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: compat-openssl10
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 5Fixed in: openssl
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: openssl
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Web Server 2Fixed in: openssl
redhatend of lifevia redhat_api
Product: Red Hat JBoss Web Server 3Fixed in: openssl

Vendor Advisories (2)

microsoft2018-Nov/CVE-2018-5407Moderate

CVE-2018-5407

Nov 13, 2018
redhatCVE-2018-5407Moderate

openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

Oct 30, 2018

References

access.redhat.com / errata/RHSA-2019:0483
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0651
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0652
Third Party Advisory
access.redhat.com / errata/RHSA-2019:2125
Third Party Advisory
access.redhat.com / errata/RHSA-2019:3929
Third Party Advisory
access.redhat.com / errata/RHSA-2019:3931
Third Party Advisory
access.redhat.com / errata/RHSA-2019:3932
Third Party Advisory
access.redhat.com / errata/RHSA-2019:3933
Third Party Advisory
access.redhat.com / errata/RHSA-2019:3935
Third Party Advisory
eprint.iacr.org / 2018/1060.pdf
Technical DescriptionThird Party Advisory
github.com / bbbrumley/portsmash
ExploitThird Party Advisory
lists.debian.org / debian-lts-announce/2018/11/msg00024.html
Mailing ListThird Party Advisory
nodejs.org / en/blog/vulnerability/november-2018-security-releases
Third Party Advisory
security.gentoo.org / glsa/201903-10
Third Party Advisory
security.netapp.com / advisory/ntap-20181126-0001
Third Party Advisory
support.f5.com / csp/article/K49711130
usn.ubuntu.com / 3840-1
Third Party Advisory
debian.org / security/2018/dsa-4348
Third Party Advisory
debian.org / security/2018/dsa-4355
Third Party Advisory
exploit-db.com / exploits/45785
ExploitThird Party AdvisoryVDB Entry
oracle.com / security-alerts/cpuapr2020.html
PatchThird Party Advisory
oracle.com / security-alerts/cpujan2020.html
PatchThird Party Advisory
oracle.com / technetwork/security-advisory/cpuapr2019-5072813.html
PatchThird Party Advisory
oracle.com / technetwork/security-advisory/cpujan2019-5072801.html
PatchVendor Advisory
oracle.com / technetwork/security-advisory/cpujul2019-5072835.html
PatchThird Party Advisory
tenable.com / security/tns-2018-16
Third Party Advisory
tenable.com / security/tns-2018-17
Third Party Advisory
securityfocus.com / bid/105897
Third Party AdvisoryVDB Entry