CVE-2018-5407

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

References

Affected packages

Git / github.com/nodejs/node

Affected ranges

Type

GIT

Repo

https://github.com/nodejs/node

Events

Introduced

Last affected

bdf069ba0f6ee63056628af20d95cd82ca5ea736

Introduced

Last affected

0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba

Introduced

Last affected

fa9990f3fb5b06fe94e294925246d2c136deb2c2

Introduced

Fixed

1cb5aed5f596a9cb5b68e3a676222c0c35501a5e

Introduced

0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba

Fixed

0cae3c3fe5e3f4c275701446a4baf1f2727344f6

Introduced

cf41627411886000429bde058a6594fb7f6d6d47

Fixed

03b825811ed4af0addcdf6e75bacb3dc1c4c5940

Introduced

Fixed

3e1492ad3b7dd37ecc134bc46a7ed4f04d84070f

Introduced

Last affected

85df6ada477715020dbd22e2fb5e687d84d663ff

Introduced

Last affected

56a0577b2ebf111346779cf790a1f54e0e464078

Introduced

Last affected

2291e079f22e6df1f7683a05d17364b2ab3bfdab

Introduced

Last affected

5ecd1c93d88c7637c76e3d2108061623efdc5e4e

Introduced

Last affected

79c57d0cc55db834177d2f8ce4b4d83109a23dc9

Introduced

Last affected

6e69f8452efa0631bfbefd8ddbd41a813a864645

Introduced

Last affected

c200106305f4367ba9ad8987af5139979c6cc40c

Introduced

Fixed

ce3e3c5fe15479475c068482c48eb9cbf1ac9df5

Introduced

Last affected

362fe010fe8f6feb0030e1e02c689b501e11ddb7

Introduced

Last affected

362fe010fe8f6feb0030e1e02c689b501e11ddb7

Introduced

Last affected

bebda6df68c71f233a2ee212b2569ae6e70b48a9

Introduced

Last affected

bebda6df68c71f233a2ee212b2569ae6e70b48a9

Introduced

Last affected

bebda6df68c71f233a2ee212b2569ae6e70b48a9

Introduced

Last affected

bebda6df68c71f233a2ee212b2569ae6e70b48a9

Introduced

Last affected

362fe010fe8f6feb0030e1e02c689b501e11ddb7

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "18.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "6.14.4"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.11.4"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.9.0"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "8.1.1"
        },
        {
            "introduced": "3.12.4"
        },
        {
            "last_affected": "4.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "18.8"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "6.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0"
        }
    ]
}

Type

GIT

Repo

https://github.com/openssl/openssl

Events

Introduced

e818b74be2170fbe957a07b0da4401c2b694b3b8

Fixed

e818b74be2170fbe957a07b0da4401c2b694b3b8

Introduced

7ea5bd2b52d0e81eaef3d109b3b12545306f201c

Fixed

7ea5bd2b52d0e81eaef3d109b3b12545306f201c

Introduced

Last affected

c2ef67100cd0ca2321b5f1a437abb93fc7e11e37

Introduced

Last affected

ce052c8437fb97cbc57f034fa94b5bcd749dbf52

Introduced

Last affected

888759a1d38197f29de7227876c3b58fbff8549f

Database specific

{
    "versions": [
        {
            "introduced": "1.0.2"
        },
        {
            "fixed": "1.0.2q"
        },
        {
            "introduced": "1.1.0"
        },
        {
            "fixed": "1.1.0i"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        }
    ]
}

Affected versions

Other

BEFORE_engine

OpenSSL_0_9_1c

OpenSSL_0_9_2b

OpenSSL_0_9_3

OpenSSL_0_9_3a

OpenSSL_0_9_3beta2

OpenSSL_0_9_4

OpenSSL_0_9_5a

OpenSSL_0_9_5a-beta1

OpenSSL_0_9_5a-beta2

OpenSSL_0_9_5beta1

OpenSSL_0_9_5beta2

OpenSSL_0_9_6-beta3

OpenSSL_0_9_8

OpenSSL_0_9_8-beta1

OpenSSL_0_9_8-beta2

OpenSSL_0_9_8-beta4

OpenSSL_0_9_8-beta5

OpenSSL_0_9_8-beta6

OpenSSL_0_9_8-post-auto-reformat

OpenSSL_0_9_8-post-reformat

OpenSSL_0_9_8-pre-auto-reformat

OpenSSL_0_9_8-pre-reformat

OpenSSL_0_9_8a

OpenSSL_0_9_8b

OpenSSL_0_9_8c

OpenSSL_0_9_8d

OpenSSL_0_9_8e

OpenSSL_0_9_8h

OpenSSL_0_9_8i

OpenSSL_0_9_8j

OpenSSL_0_9_8m

OpenSSL_0_9_8m-beta1

OpenSSL_0_9_8n

OpenSSL_0_9_8o

OpenSSL_0_9_8p

OpenSSL_0_9_8q

OpenSSL_0_9_8r

OpenSSL_0_9_8s

OpenSSL_0_9_8t

OpenSSL_0_9_8u

OpenSSL_0_9_8v

OpenSSL_0_9_8w

OpenSSL_0_9_8x

OpenSSL_0_9_8y

OpenSSL_0_9_8za

OpenSSL_0_9_8zb

OpenSSL_0_9_8zc

OpenSSL_0_9_8zd

OpenSSL_0_9_8ze

OpenSSL_0_9_8zf

OpenSSL_0_9_8zg

OpenSSL_0_9_8zh

OpenSSL_1_0_0

OpenSSL_1_0_0-beta1

OpenSSL_1_0_0-beta2

OpenSSL_1_0_0-beta3

OpenSSL_1_0_0-beta4

OpenSSL_1_0_0-beta5

OpenSSL_1_0_0-post-auto-reformat

OpenSSL_1_0_0-post-reformat

OpenSSL_1_0_0-pre-auto-reformat

OpenSSL_1_0_0-pre-reformat

OpenSSL_1_0_0a

OpenSSL_1_0_0b

OpenSSL_1_0_0c

OpenSSL_1_0_0d

OpenSSL_1_0_0e

OpenSSL_1_0_0f

OpenSSL_1_0_0g

OpenSSL_1_0_0h

OpenSSL_1_0_0i

OpenSSL_1_0_0j

OpenSSL_1_0_0k

OpenSSL_1_0_0l

OpenSSL_1_0_0m

OpenSSL_1_0_0n

OpenSSL_1_0_0o

OpenSSL_1_0_0p

OpenSSL_1_0_0q

OpenSSL_1_0_0r

OpenSSL_1_0_0s

OpenSSL_1_0_0t

OpenSSL_1_0_1

OpenSSL_1_0_1-beta1

OpenSSL_1_0_1-beta2

OpenSSL_1_0_1-beta3

OpenSSL_1_0_1-post-auto-reformat

OpenSSL_1_0_1-post-reformat

OpenSSL_1_0_1-pre-auto-reformat

OpenSSL_1_0_1-pre-reformat

OpenSSL_1_0_1a

OpenSSL_1_0_1b

OpenSSL_1_0_1c

OpenSSL_1_0_1d

OpenSSL_1_0_1e

OpenSSL_1_0_1f

OpenSSL_1_0_1g

OpenSSL_1_0_1h

OpenSSL_1_0_1i

OpenSSL_1_0_1j

OpenSSL_1_0_1k

OpenSSL_1_0_1l

OpenSSL_1_0_1m

OpenSSL_1_0_1n

OpenSSL_1_0_1o

OpenSSL_1_0_1p

OpenSSL_1_0_1q

OpenSSL_1_0_1r

OpenSSL_1_0_1s

OpenSSL_1_0_1t

OpenSSL_1_0_1u

OpenSSL_1_0_2

OpenSSL_1_0_2-beta1

OpenSSL_1_0_2-beta2

OpenSSL_1_0_2-beta3

OpenSSL_1_0_2-post-auto-reformat

OpenSSL_1_0_2-post-reformat

OpenSSL_1_0_2-pre-auto-reformat

OpenSSL_1_0_2-pre-reformat

OpenSSL_1_0_2a

OpenSSL_1_0_2b

OpenSSL_1_0_2c

OpenSSL_1_0_2d

OpenSSL_1_0_2e

OpenSSL_1_0_2f

OpenSSL_1_0_2g

OpenSSL_1_0_2h

OpenSSL_1_0_2i

OpenSSL_1_0_2j

OpenSSL_1_0_2k

OpenSSL_1_0_2l

OpenSSL_1_0_2m

OpenSSL_1_0_2n

OpenSSL_1_0_2o

OpenSSL_1_0_2p

OpenSSL_1_0_2q

OpenSSL_1_0_2r

OpenSSL_1_0_2s

OpenSSL_1_0_2t

OpenSSL_1_1_0

OpenSSL_1_1_0-pre1

OpenSSL_1_1_0-pre2

OpenSSL_1_1_0-pre3

OpenSSL_1_1_0-pre4

OpenSSL_1_1_0-pre5

OpenSSL_1_1_0-pre6

OpenSSL_1_1_0a

OpenSSL_1_1_0b

OpenSSL_1_1_0c

OpenSSL_1_1_0d

OpenSSL_1_1_0e

OpenSSL_1_1_0f

OpenSSL_1_1_0g

OpenSSL_1_1_0h

OpenSSL_1_1_0i

OpenSSL_1_1_0j

OpenSSL_1_1_0k

master-post-auto-reformat

master-post-reformat

master-pre-auto-reformat

master-pre-reformat

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.6

v0.1.0

v0.1.1

v0.1.10

v0.1.100

v0.1.101

v0.1.102

v0.1.103

v0.1.104

v0.1.11

v0.1.12

v0.1.13

v0.1.14

v0.1.15

v0.1.16

v0.1.17

v0.1.18

v0.1.19

v0.1.2

v0.1.20

v0.1.21

v0.1.22

v0.1.23

v0.1.24

v0.1.25

v0.1.26

v0.1.27

v0.1.28

v0.1.29

v0.1.3

v0.1.30

v0.1.31

v0.1.32

v0.1.33

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.1.9

v0.1.92

v0.1.93

v0.1.94

v0.1.95

v0.1.96

v0.1.97

v0.1.98

v0.1.99

v0.2.0

v0.3.0

v0.3.1

v0.3.2

v0.3.4

v0.3.5

v0.3.6

v0.3.7

v0.3.8

v0.4.0

v0.5.0

v0.5.1

v0.5.10

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.5-rc1

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.1

v0.7.0

v0.7.2

v0.7.3

v1.*

v1.0.1

v1.0.1-release

v1.0.2

v1.0.2-release

v1.0.3

v1.0.4

v1.1.0

v1.2.0

v1.3.0

v1.4.1

v1.4.2

v1.4.3

v1.5.0

v1.5.1

v1.6.0

v1.6.1

v1.6.2

v1.6.3

v1.6.4

v1.7.0

v1.7.1

v10.*

v10.0.0

v10.1.0

v10.2.0

v10.2.1

v10.3.0

v10.4.0

v10.4.1

v10.5.0

v10.6.0

v10.7.0

v10.8.0

v15.*

v15.0.0

v15.0.1

v15.1.0

v15.2.0

v16.*

v16.0.0

v16.1.0

v16.2.0

v18.*

v18.0.0

v18.1.0

v18.10.0

v18.2.0

v18.3.0

v18.4.0

v18.5.0

v18.6.0

v18.7.0

v18.8.0

v18.9.0

v18.9.1

v2.*

v2.0.0

v2.0.1

v2.0.2

v2.1.0

v2.2.0

v2.2.1

v2.3.0

v2.3.1

v2.3.2

v2.3.3

v2.3.4

v2.4.0

v2.5.0

v3.*

v3.0.0

v4.*

v4.0.0

v4.1.0

v4.1.1

v4.1.2

v6.*

v6.0.0

v6.1.0

v6.10.0

v6.10.1

v6.10.2

v6.10.3

v6.11.0

v6.11.1

v6.11.2

v6.11.3

v6.11.4

v6.11.5

v6.12.0

v6.12.1

v6.12.2

v6.12.3

v6.13.0

v6.13.1

v6.14.0

v6.14.1

v6.14.2

v6.14.3

v6.2.0

v6.2.1

v6.2.2

v6.3.0

v6.3.1

v6.4.0

v6.5.0

v6.6.0

v6.7.0

v6.8.0

v6.8.1

v6.9.0

v6.9.1

v6.9.2

v6.9.3

v6.9.4

v6.9.5

v7.*

v7.0.0

v7.1.0

v7.2.0

v7.2.1

v7.3.0

v7.4.0

v7.5.0

v7.6.0

v8.*

v8.0.0

v8.1.0

v8.1.1

v8.1.2

v8.1.3

v8.1.4

v8.10.0

v8.11.0

v8.11.1

v8.11.2

v8.11.3

v8.2.0

v8.2.1

v8.3.0

v8.4.0

v8.5.0

v8.6.0

v8.7.0

v8.8.0

v8.8.1

v8.9.0

v8.9.1

v8.9.2

v8.9.3

v8.9.4

v9.*

v9.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5407.json"

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "227788886913935889032703558012047812302",
                "50491541398146363716796660912620610979",
                "269421547081420290782835078680106598455",
                "1907100557939212133144652077112450142",
                "5242489482972689247408035301976916379",
                "293500484184004759882319173711457008915",
                "22352102879530286438426240576046215259",
                "227623751601783881855048171227667533607"
            ]
        },
        "id": "CVE-2018-5407-a8883bd8",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/7ea5bd2b52d0e81eaef3d109b3b12545306f201c",
        "signature_type": "Line",
        "target": {
            "file": "include/openssl/opensslv.h"
        },
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "251633914150035957322733061977107206211",
                "338514574181828579838011565939158652696",
                "76638288692106140328510055542557597351",
                "142922657400765574308962710386922248045",
                "71649992455794854055653842592139575350",
                "65527166711110472566013424527579064967",
                "253196866009476977787139000804413898733",
                "172177136897997206866313011107384691461"
            ]
        },
        "id": "CVE-2018-5407-e051451f",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
        "target": {
            "file": "crypto/opensslv.h"
        }
    }
]

vanir_signatures_modified

"2026-04-11T08:05:17Z"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "16.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.1.2.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.0.5.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.2.0.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.3.0.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.3.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.12.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.55"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.56"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.57"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "17.7"
            },
            {
                "last_affected": "17.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.1.0.0"
            }
        ]
    }
]