CVE-2018-12130

Published: May 30, 2019Modified: May 29, 2026

5.6

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 1.1 / Impact: 4.0

Source: NVD

Description

Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Affected (2)

Products: Intel: Microarchitectural Fill Buffer Data Sampling Firmware · Fedoraproject: Fedora

1 product

Microarchitectural Fill Buffer Data Sampling Firmware

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Microarchitectural Fill Buffer Data Sampling Firmware	All versions

Running on/with	Platform Versions
Intel Microarchitectural Fill Buffer Data Sampling	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 29

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (50)

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html

Source: secure@intel.com

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html

Source: secure@intel.com

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html

Source: secure@intel.com

http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html

Source: secure@intel.com

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt

Source: secure@intel.com

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2019:1455

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2019:2553

Source: secure@intel.com

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

Source: secure@intel.com

https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf

Source: secure@intel.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10292

Source: secure@intel.com

https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html

Source: secure@intel.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/

Source: secure@intel.com

https://seclists.org/bugtraq/2019/Jun/28

Source: secure@intel.com

https://seclists.org/bugtraq/2019/Jun/36

Source: secure@intel.com

https://seclists.org/bugtraq/2019/Nov/15

Source: secure@intel.com

https://seclists.org/bugtraq/2019/Nov/16

Source: secure@intel.com

https://seclists.org/bugtraq/2020/Jan/21

Source: secure@intel.com

https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc

Source: secure@intel.com

https://security.gentoo.org/glsa/202003-56

Source: secure@intel.com

https://usn.ubuntu.com/3977-3/

Source: secure@intel.com

https://www.debian.org/security/2020/dsa-4602

Source: secure@intel.com

https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc

Source: secure@intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html

Source: secure@intel.com

Vendor Advisory

https://www.synology.com/security/advisory/Synology_SA_19_24

Source: secure@intel.com

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2019:1455

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2019:2553

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://kc.mcafee.com/corporate/index?page=content&id=SB10292

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Jun/28

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Jun/36

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Nov/15

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Nov/16

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2020/Jan/21

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202003-56

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/3977-3/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2020/dsa-4602

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.synology.com/security/advisory/Synology_SA_19_24

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.