{
  "threat_severity" : "Important",
  "public_date" : "2018-05-21T21:00:00Z",
  "bugzilla" : {
    "description" : "hw: cpu: speculative store bypass",
    "id" : "1566890",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1566890"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.6",
    "cvss3_scoring_vector" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
    "status" : "verified"
  },
  "cwe" : "CWE-226->CWE-200",
  "details" : [ "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.", "An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks." ],
  "statement" : "Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/security/vulnerabilities/ssbd",
  "acknowledgement" : "Red Hat would like to thank Jann Horn (Google Project Zero) and Ken Johnson (Microsoft Security Response Center) for reporting this issue.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 5.9 Long Life",
    "release_date" : "2018-07-11T00:00:00Z",
    "advisory" : "RHSA-2018:2171",
    "cpe" : "cpe:/o:redhat:rhel_aus:5.9",
    "package" : "kernel-0:2.6.18-348.40.1.el5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 5 Extended Lifecycle Support",
    "release_date" : "2018-07-11T00:00:00Z",
    "advisory" : "RHSA-2018:2172",
    "cpe" : "cpe:/o:redhat:rhel_els:5",
    "package" : "kernel-0:2.6.18-433.el5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-05-21T00:00:00Z",
    "advisory" : "RHSA-2018:1647",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el6_9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-05-21T00:00:00Z",
    "advisory" : "RHSA-2018:1650",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "java-1.8.0-openjdk-1:1.8.0.171-8.b10.el6_9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-05-21T00:00:00Z",
    "advisory" : "RHSA-2018:1651",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "kernel-0:2.6.32-696.30.1.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-05-21T00:00:00Z",
    "advisory" : "RHSA-2018:1660",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "qemu-kvm-2:0.12.1.2-2.503.el6_9.6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1669",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "libvirt-0:0.10.2-62.el6_9.2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-06-19T00:00:00Z",
    "advisory" : "RHSA-2018:1854",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "kernel-0:2.6.32-754.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-07-10T00:00:00Z",
    "advisory" : "RHSA-2018:2162",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "qemu-kvm-2:0.12.1.2-2.506.el6_10.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "release_date" : "2018-07-10T00:00:00Z",
    "advisory" : "RHSA-2018:2164",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6",
    "package" : "kernel-0:2.6.32-754.2.1.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.4 Advanced Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1641",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.4",
    "package" : "kernel-0:2.6.32-358.88.4.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.4 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1656",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.4",
    "package" : "qemu-kvm-2:0.12.1.2-2.355.el6_4.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.4 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1664",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.4",
    "package" : "libvirt-0:0.10.2-18.el6_4.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.4 Advanced Update Support",
    "release_date" : "2018-08-14T00:00:00Z",
    "advisory" : "RHSA-2018:2394",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.4",
    "package" : "kernel-0:2.6.32-358.91.4.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.4 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3399",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.4",
    "package" : "libvirt-0:0.10.2-18.el6_4.18"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.4 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3401",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.4",
    "package" : "qemu-kvm-2:0.12.1.2-2.355.el6_4.12"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.5 Advanced Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1640",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.5",
    "package" : "kernel-0:2.6.32-431.89.4.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.5 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1657",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.5",
    "package" : "qemu-kvm-2:0.12.1.2-2.415.el6_5.18"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.5 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1665",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.5",
    "package" : "libvirt-0:0.10.2-29.el6_5.16"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.5 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3396",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.5",
    "package" : "libvirt-0:0.10.2-29.el6_5.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.5 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3397",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.5",
    "package" : "qemu-kvm-2:0.12.1.2-2.415.el6_5.19"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Advanced Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1639",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.6",
    "package" : "kernel-0:2.6.32-504.69.3.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1658",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.6",
    "package" : "qemu-kvm-2:0.12.1.2-2.448.el6_6.6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1666",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.6",
    "package" : "libvirt-0:0.10.2-46.el6_6.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Advanced Update Support",
    "release_date" : "2018-07-31T00:00:00Z",
    "advisory" : "RHSA-2018:2309",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.6",
    "package" : "kernel-0:2.6.32-504.72.1.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3400",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.6",
    "package" : "libvirt-0:0.10.2-46.el6_6.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3425",
    "cpe" : "cpe:/o:redhat:rhel_aus:6.6",
    "package" : "qemu-kvm-2:0.12.1.2-2.448.el6_6.7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Telco Extended Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1639",
    "cpe" : "cpe:/o:redhat:rhel_tus:6.6",
    "package" : "kernel-0:2.6.32-504.69.3.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Telco Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1658",
    "cpe" : "cpe:/o:redhat:rhel_tus:6.6",
    "package" : "qemu-kvm-2:0.12.1.2-2.448.el6_6.6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Telco Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1666",
    "cpe" : "cpe:/o:redhat:rhel_tus:6.6",
    "package" : "libvirt-0:0.10.2-46.el6_6.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Telco Extended Update Support",
    "release_date" : "2018-07-31T00:00:00Z",
    "advisory" : "RHSA-2018:2309",
    "cpe" : "cpe:/o:redhat:rhel_tus:6.6",
    "package" : "kernel-0:2.6.32-504.72.1.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Telco Extended Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3400",
    "cpe" : "cpe:/o:redhat:rhel_tus:6.6",
    "package" : "libvirt-0:0.10.2-46.el6_6.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.6 Telco Extended Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3425",
    "cpe" : "cpe:/o:redhat:rhel_tus:6.6",
    "package" : "qemu-kvm-2:0.12.1.2-2.448.el6_6.7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.7 Extended Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1638",
    "cpe" : "cpe:/o:redhat:rhel_eus:6.7",
    "package" : "kernel-0:2.6.32-573.55.4.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.7 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1659",
    "cpe" : "cpe:/o:redhat:rhel_eus:6.7",
    "package" : "qemu-kvm-2:0.12.1.2-2.479.el6_7.7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.7 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1667",
    "cpe" : "cpe:/o:redhat:rhel_eus:6.7",
    "package" : "libvirt-0:0.10.2-54.el6_7.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.7 Extended Update Support",
    "release_date" : "2018-06-12T00:00:00Z",
    "advisory" : "RHSA-2018:1826",
    "cpe" : "cpe:/o:redhat:rhel_eus:6.7",
    "package" : "kernel-0:2.6.32-573.59.1.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.7 Extended Update Support",
    "release_date" : "2018-07-24T00:00:00Z",
    "advisory" : "RHSA-2018:2250",
    "cpe" : "cpe:/o:redhat:rhel_eus:6.7",
    "package" : "kernel-0:2.6.32-573.60.1.el6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.7 Extended Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3402",
    "cpe" : "cpe:/o:redhat:rhel_eus:6.7",
    "package" : "libvirt-0:0.10.2-54.el6_7.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6.7 Extended Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3424",
    "cpe" : "cpe:/o:redhat:rhel_eus:6.7",
    "package" : "qemu-kvm-2:0.12.1.2-2.479.el6_7.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-21T00:00:00Z",
    "advisory" : "RHSA-2018:1630",
    "cpe" : "cpe:/a:redhat:rhel_extras_rt:7",
    "package" : "kernel-rt-0:3.10.0-862.3.2.rt56.808.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-06-26T00:00:00Z",
    "advisory" : "RHSA-2018:2003",
    "cpe" : "cpe:/a:redhat:rhel_extras_rt:7",
    "package" : "kernel-rt-0:3.10.0-862.6.3.rt56.811.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1629",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "kernel-0:3.10.0-862.3.2.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1632",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "libvirt-0:3.9.0-14.el7_5.5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1633",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "qemu-kvm-10:1.5.3-156.el7_5.2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1648",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "java-1.7.0-openjdk-1:1.7.0.181-2.6.14.8.el7_5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1649",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "java-1.8.0-openjdk-1:1.8.0.171-8.b10.el7_5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-06-26T00:00:00Z",
    "advisory" : "RHSA-2018:1965",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "kernel-0:3.10.0-862.6.3.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-06-26T00:00:00Z",
    "advisory" : "RHSA-2018:1967",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "kernel-alt-0:4.14.0-49.8.1.el7a"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-06-26T00:00:00Z",
    "advisory" : "RHSA-2018:1997",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "libvirt-0:3.9.0-14.el7_5.6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-06-26T00:00:00Z",
    "advisory" : "RHSA-2018:2001",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "qemu-kvm-10:1.5.3-156.el7_5.3"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:2948",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "kernel-alt-0:4.14.0-115.el7a"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Advanced Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1637",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.2",
    "package" : "kernel-0:3.10.0-327.66.5.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1661",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.2",
    "package" : "qemu-kvm-10:1.5.3-105.el7_2.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Advanced Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1668",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.2",
    "package" : "libvirt-0:1.2.17-13.el7_2.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Advanced Update Support",
    "release_date" : "2018-07-17T00:00:00Z",
    "advisory" : "RHSA-2018:2216",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.2",
    "package" : "kernel-0:3.10.0-327.71.1.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3407",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.2",
    "package" : "libvirt-0:1.2.17-13.el7_2.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Advanced Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3423",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.2",
    "package" : "qemu-kvm-10:1.5.3-105.el7_2.18"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Telco Extended Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1637",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.2",
    "package" : "kernel-0:3.10.0-327.66.5.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Telco Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1661",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.2",
    "package" : "qemu-kvm-10:1.5.3-105.el7_2.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Telco Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1668",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.2",
    "package" : "libvirt-0:1.2.17-13.el7_2.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Telco Extended Update Support",
    "release_date" : "2018-07-17T00:00:00Z",
    "advisory" : "RHSA-2018:2216",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.2",
    "package" : "kernel-0:3.10.0-327.71.1.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Telco Extended Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3407",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.2",
    "package" : "libvirt-0:1.2.17-13.el7_2.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Telco Extended Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3423",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.2",
    "package" : "qemu-kvm-10:1.5.3-105.el7_2.18"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1637",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.2",
    "package" : "kernel-0:3.10.0-327.66.5.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1661",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.2",
    "package" : "qemu-kvm-10:1.5.3-105.el7_2.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1668",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.2",
    "package" : "libvirt-0:1.2.17-13.el7_2.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions",
    "release_date" : "2018-07-17T00:00:00Z",
    "advisory" : "RHSA-2018:2216",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.2",
    "package" : "kernel-0:3.10.0-327.71.1.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3407",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.2",
    "package" : "libvirt-0:1.2.17-13.el7_2.9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3423",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.2",
    "package" : "qemu-kvm-10:1.5.3-105.el7_2.18"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.3 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1636",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.3",
    "package" : "kernel-0:3.10.0-514.48.5.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.3 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1653",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.3",
    "package" : "libvirt-0:2.0.0-10.el7_3.12"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.3 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1662",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.3",
    "package" : "qemu-kvm-10:1.5.3-126.el7_3.14"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.3 Extended Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1737",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.3",
    "package" : "kernel-0:3.10.0-514.51.1.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.3 Extended Update Support",
    "release_date" : "2018-07-10T00:00:00Z",
    "advisory" : "RHSA-2018:2161",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.3",
    "package" : "kernel-0:3.10.0-514.53.1.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.3 Extended Update Support",
    "release_date" : "2018-10-30T00:00:00Z",
    "advisory" : "RHSA-2018:3398",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.3",
    "package" : "libvirt-0:2.0.0-10.el7_3.13"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.4 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1635",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.4",
    "package" : "kernel-0:3.10.0-693.25.7.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.4 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1652",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.4",
    "package" : "libvirt-0:3.2.0-14.el7_4.10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.4 Extended Update Support",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1663",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.4",
    "package" : "qemu-kvm-10:1.5.3-141.el7_4.7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.4 Extended Update Support",
    "release_date" : "2018-05-29T00:00:00Z",
    "advisory" : "RHSA-2018:1738",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.4",
    "package" : "kernel-0:3.10.0-693.33.1.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.4 Extended Update Support",
    "release_date" : "2018-06-26T00:00:00Z",
    "advisory" : "RHSA-2018:2006",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.4",
    "package" : "libvirt-0:3.2.0-14.el7_4.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.4 Extended Update Support",
    "release_date" : "2018-08-14T00:00:00Z",
    "advisory" : "RHSA-2018:2387",
    "cpe" : "cpe:/o:redhat:rhel_eus:7.4",
    "package" : "kernel-0:3.10.0-693.37.4.el7"
  }, {
    "product_name" : "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1686",
    "cpe" : "cpe:/a:redhat:openstack:7::el7",
    "package" : "qemu-kvm-rhev-10:2.9.0-16.el7_4.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.4 EUS",
    "release_date" : "2019-01-23T00:00:00Z",
    "advisory" : "RHSA-2019:0148",
    "cpe" : "cpe:/a:redhat:openstack_els:7::el7.4",
    "package" : "qemu-kvm-rhev-10:2.9.0-16.el7_4.18"
  }, {
    "product_name" : "Red Hat Enterprise MRG 2",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1642",
    "cpe" : "cpe:/a:redhat:enterprise_mrg:2:server:el6",
    "package" : "kernel-rt-1:3.10.0-693.25.7.rt56.615.el6rt"
  }, {
    "product_name" : "Red Hat Enterprise MRG 2",
    "release_date" : "2018-08-14T00:00:00Z",
    "advisory" : "RHSA-2018:2396",
    "cpe" : "cpe:/a:redhat:enterprise_mrg:2:server:el6",
    "package" : "kernel-rt-1:3.10.0-693.37.4.rt56.629.el6rt"
  }, {
    "product_name" : "Red Hat OpenStack Platform 10.0 (Newton)",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1644",
    "cpe" : "cpe:/a:redhat:openstack:10::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.3"
  }, {
    "product_name" : "Red Hat OpenStack Platform 10.0 (Newton)",
    "release_date" : "2018-07-30T00:00:00Z",
    "advisory" : "RHSA-2018:2289",
    "cpe" : "cpe:/a:redhat:openstack:10::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 12.0 (Pike)",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1643",
    "cpe" : "cpe:/a:redhat:openstack:12::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.3"
  }, {
    "product_name" : "Red Hat OpenStack Platform 12.0 (Pike)",
    "release_date" : "2018-07-25T00:00:00Z",
    "advisory" : "RHSA-2018:2258",
    "cpe" : "cpe:/a:redhat:openstack:12::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 13.0 (Queens)",
    "release_date" : "2018-07-19T00:00:00Z",
    "advisory" : "RHSA-2018:2228",
    "cpe" : "cpe:/a:redhat:openstack:13::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 8.0 (Liberty)",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1646",
    "cpe" : "cpe:/a:redhat:openstack:8::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.3"
  }, {
    "product_name" : "Red Hat OpenStack Platform 8.0 (Liberty)",
    "release_date" : "2018-08-07T00:00:00Z",
    "advisory" : "RHSA-2018:2364",
    "cpe" : "cpe:/a:redhat:openstack:8::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 9.0 (Mitaka)",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1645",
    "cpe" : "cpe:/a:redhat:openstack:9::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.3"
  }, {
    "product_name" : "Red Hat OpenStack Platform 9.0 (Mitaka)",
    "release_date" : "2018-08-07T00:00:00Z",
    "advisory" : "RHSA-2018:2363",
    "cpe" : "cpe:/a:redhat:openstack:9::el7",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.4"
  }, {
    "product_name" : "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-21T00:00:00Z",
    "advisory" : "RHSA-2018:1655",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.3"
  }, {
    "product_name" : "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1675",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "vdsm-0:4.20.27.2-1.el7ev"
  }, {
    "product_name" : "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7",
    "release_date" : "2018-05-23T00:00:00Z",
    "advisory" : "RHSA-2018:1696",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "redhat-virtualization-host-0:4.2-20180518.2"
  }, {
    "product_name" : "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7",
    "release_date" : "2018-06-27T00:00:00Z",
    "advisory" : "RHSA-2018:2060",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "qemu-kvm-rhev-10:2.10.0-21.el7_5.4"
  }, {
    "product_name" : "Red Hat Virtualization Engine 4.2",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1674",
    "cpe" : "cpe:/a:redhat:rhev_manager:4.2",
    "package" : "rhvm-setup-plugins-0:4.2.9-1.el7ev"
  }, {
    "product_name" : "Red Hat Virtualization Engine 4.2",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1676",
    "cpe" : "cpe:/a:redhat:rhev_manager:4.2",
    "package" : "org.ovirt.engine-root-0:4.2.3.6-1"
  }, {
    "product_name" : "Red Hat Virtualization Engine 4.2",
    "release_date" : "2018-07-31T00:00:00Z",
    "advisory" : "RHSA-2018:2328",
    "cpe" : "cpe:/a:redhat:rhev_manager:4.2",
    "package" : "rhvm-setup-plugins-0:4.2.10-1.el7ev"
  }, {
    "product_name" : "Red Hat Virtualization Engine 4.3",
    "release_date" : "2019-05-08T00:00:00Z",
    "advisory" : "RHSA-2019:1046",
    "cpe" : "cpe:/a:redhat:rhev_manager:4.3",
    "package" : "rhvm-setup-plugins-0:4.3.0-1.el7ev"
  }, {
    "product_name" : "RHEV 3.X Hypervisor and Agents for RHEL-6",
    "release_date" : "2018-05-23T00:00:00Z",
    "advisory" : "RHSA-2018:1711",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6::hypervisor",
    "package" : "rhev-hypervisor7-0:7.3-20180521.1.el6ev"
  }, {
    "product_name" : "RHEV 3.X Hypervisor and Agents for RHEL-6",
    "release_date" : "2018-07-24T00:00:00Z",
    "advisory" : "RHSA-2018:2246",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6::hypervisor",
    "package" : "rhev-hypervisor7-0:7.3-20180710.1.el6ev"
  }, {
    "product_name" : "RHEV 3.X Hypervisor and Agents for RHEL-7 ELS",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1654",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "qemu-kvm-rhev-10:2.6.0-28.el7_3.17"
  }, {
    "product_name" : "RHEV 3.X Hypervisor and Agents for RHEL-7 ELS",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1690",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "vdsm-0:4.17.45-1.el7ev"
  }, {
    "product_name" : "RHEV 3.X Hypervisor and Agents for RHEL-7 ELS",
    "release_date" : "2018-05-23T00:00:00Z",
    "advisory" : "RHSA-2018:1710",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "redhat-virtualization-host-0:3.6-20180521.0"
  }, {
    "product_name" : "RHEV 3.X Hypervisor and Agents for RHEL-7 ELS",
    "release_date" : "2018-05-23T00:00:00Z",
    "advisory" : "RHSA-2018:1711",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "rhev-hypervisor7-0:7.3-20180521.1.el7ev"
  }, {
    "product_name" : "RHEV 3.X Hypervisor and Agents for RHEL-7 ELS",
    "release_date" : "2018-07-24T00:00:00Z",
    "advisory" : "RHSA-2018:2246",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "rhev-hypervisor7-0:7.3-20180710.1.el7ev"
  }, {
    "product_name" : "RHEV Manager version 3.6",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1688",
    "cpe" : "cpe:/a:redhat:rhev_manager:3",
    "package" : "org.ovirt.engine-root-0:3.6.13.2-1"
  }, {
    "product_name" : "RHEV Manager version 3.6",
    "release_date" : "2018-05-22T00:00:00Z",
    "advisory" : "RHSA-2018:1689",
    "cpe" : "cpe:/a:redhat:rhev_manager:3",
    "package" : "rhevm-setup-plugins-0:3.6.7-1.el6ev"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Affected",
    "package_name" : "qemu-kvm-ma",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "libvirt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "qemu-kvm",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Virtualization 3",
    "fix_state" : "Affected",
    "package_name" : "ovirt-engine",
    "cpe" : "cpe:/a:redhat:enterprise_linux:7::hypervisor"
  }, {
    "product_name" : "Red Hat Enterprise Virtualization 3",
    "fix_state" : "Affected",
    "package_name" : "rhev-hypervisor-ng",
    "cpe" : "cpe:/a:redhat:enterprise_linux:7::hypervisor"
  }, {
    "product_name" : "Red Hat OpenStack Platform 11 (Ocata)",
    "fix_state" : "Will not fix",
    "package_name" : "qemu-kvm-rhev",
    "cpe" : "cpe:/a:redhat:openstack:11"
  }, {
    "product_name" : "Red Hat Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "ovirt-guest-agent",
    "cpe" : "cpe:/o:redhat:rhev_hypervisor:4"
  }, {
    "product_name" : "Red Hat Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "rhev-hypervisor-ng",
    "cpe" : "cpe:/o:redhat:rhev_hypervisor:4"
  }, {
    "product_name" : "Red Hat Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "rhevm-setup-plugins",
    "cpe" : "cpe:/o:redhat:rhev_hypervisor:4"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2018-3639\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-3639\nhttps://access.redhat.com/security/vulnerabilities/ssbd\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1528\nhttps://software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf\nhttps://software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-Execution-Side-Channel-Mitigations.pdf\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html" ],
  "csaw" : true,
  "name" : "CVE-2018-3639"
}