SUSE: CVE-2018-12126: SUSE Linux Security Advisory
5
(AV:L/AC:M/Au:N/C:C/I:N/A:N)
05/14/2019
05/17/2019
05/15/2019
02/04/2022
Description
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
Solution(s)
- suse-upgrade-kernel-azure-base
- suse-upgrade-kernel-default
- suse-upgrade-kernel-default-extra
- suse-upgrade-kernel-default-man
- suse-upgrade-kernel-devel-azure
- suse-upgrade-kernel-docs
- suse-upgrade-kernel-ec2
- suse-upgrade-kernel-ec2-devel
- suse-upgrade-kernel-ec2-extra
- suse-upgrade-kernel-obs-build
- suse-upgrade-kernel-source-azure
- suse-upgrade-libvirt
- suse-upgrade-libvirt-admin
- suse-upgrade-libvirt-bash-completion
- suse-upgrade-libvirt-client
- suse-upgrade-libvirt-daemon
- suse-upgrade-libvirt-daemon-config-network
- suse-upgrade-libvirt-daemon-config-nwfilter
- suse-upgrade-libvirt-daemon-driver-interface
- suse-upgrade-libvirt-daemon-driver-libxl
- suse-upgrade-libvirt-daemon-driver-lxc
- suse-upgrade-libvirt-daemon-driver-network
- suse-upgrade-libvirt-daemon-driver-nodedev
- suse-upgrade-libvirt-daemon-driver-nwfilter
- suse-upgrade-libvirt-daemon-driver-qemu
- suse-upgrade-libvirt-daemon-driver-secret
- suse-upgrade-libvirt-daemon-driver-storage
- suse-upgrade-libvirt-daemon-driver-storage-core
- suse-upgrade-libvirt-daemon-driver-storage-disk
- suse-upgrade-libvirt-daemon-driver-storage-iscsi
- suse-upgrade-libvirt-daemon-driver-storage-iscsi-direct
- suse-upgrade-libvirt-daemon-driver-storage-logical
- suse-upgrade-libvirt-daemon-driver-storage-mpath
- suse-upgrade-libvirt-daemon-driver-storage-rbd
- suse-upgrade-libvirt-daemon-driver-storage-scsi
- suse-upgrade-libvirt-daemon-hooks
- suse-upgrade-libvirt-daemon-lxc
- suse-upgrade-libvirt-daemon-qemu
- suse-upgrade-libvirt-daemon-xen
- suse-upgrade-libvirt-devel
- suse-upgrade-libvirt-doc
- suse-upgrade-libvirt-libs
- suse-upgrade-libvirt-lock-sanlock
- suse-upgrade-libvirt-nss
- suse-upgrade-qemu
- suse-upgrade-qemu-arm
- suse-upgrade-qemu-audio-alsa
- suse-upgrade-qemu-audio-oss
- suse-upgrade-qemu-audio-pa
- suse-upgrade-qemu-audio-spice
- suse-upgrade-qemu-block-curl
- suse-upgrade-qemu-block-iscsi
- suse-upgrade-qemu-block-rbd
- suse-upgrade-qemu-block-ssh
- suse-upgrade-qemu-chardev-baum
- suse-upgrade-qemu-chardev-spice
- suse-upgrade-qemu-guest-agent
- suse-upgrade-qemu-hw-display-qxl
- suse-upgrade-qemu-hw-display-virtio-gpu
- suse-upgrade-qemu-hw-display-virtio-gpu-pci
- suse-upgrade-qemu-hw-display-virtio-vga
- suse-upgrade-qemu-hw-s390x-virtio-gpu-ccw
- suse-upgrade-qemu-hw-usb-redirect
- suse-upgrade-qemu-ipxe
- suse-upgrade-qemu-ksm
- suse-upgrade-qemu-kvm
- suse-upgrade-qemu-lang
- suse-upgrade-qemu-microvm
- suse-upgrade-qemu-ppc
- suse-upgrade-qemu-s390
- suse-upgrade-qemu-s390x
- suse-upgrade-qemu-seabios
- suse-upgrade-qemu-sgabios
- suse-upgrade-qemu-skiboot
- suse-upgrade-qemu-tools
- suse-upgrade-qemu-ui-curses
- suse-upgrade-qemu-ui-gtk
- suse-upgrade-qemu-ui-opengl
- suse-upgrade-qemu-ui-spice-app
- suse-upgrade-qemu-ui-spice-core
- suse-upgrade-qemu-vgabios
- suse-upgrade-qemu-x86
- suse-upgrade-ucode-intel
- suse-upgrade-xen
- suse-upgrade-xen-devel
- suse-upgrade-xen-doc-html
- suse-upgrade-xen-kmp-default
- suse-upgrade-xen-libs
- suse-upgrade-xen-libs-32bit
- suse-upgrade-xen-tools
- suse-upgrade-xen-tools-domu
- suse-upgrade-xen-tools-xendomains-wait-disk
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center