CVE-2005-0109
Fixed in a distro release EPSS <1%
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
Products: freebsd, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, sco openserver, sco unixware, sun solaris, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | openssl | 0:0.9.7a-33.17 |
| Red Hat Enterprise Linux 3 | openssl | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl-debuginfo | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl-debuginfo | 0:0.9.7a-33.17 |
| Red Hat Enterprise Linux 3 | openssl-devel | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl-devel | 0:0.9.7a-33.17 |
| Red Hat Enterprise Linux 3 | openssl-perl | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl-perl | 0:0.9.7a-33.17 |
| Red Hat Enterprise Linux 3 | openssl096b | 0:0.9.6b-16.22.3 |
| Red Hat Enterprise Linux 3 | openssl096b | 0:0.9.6b-16.22.4 |
| Red Hat Enterprise Linux 3 | openssl096b-debuginfo | 0:0.9.6b-16.22.3 |
| Red Hat Enterprise Linux 3 | openssl096b-debuginfo | 0:0.9.6b-16.22.4 |
| Red Hat Enterprise Linux 4 | openssl | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl | 0:0.9.7a-43.4 |
| Red Hat Enterprise Linux 4 | openssl-debuginfo | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl-debuginfo | 0:0.9.7a-43.4 |
| Red Hat Enterprise Linux 4 | openssl-devel | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl-devel | 0:0.9.7a-43.4 |
| Red Hat Enterprise Linux 4 | openssl-perl | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl-perl | 0:0.9.7a-43.4 |
| Red Hat Enterprise Linux 4 | openssl096b | 0:0.9.6b-22.3 |
| Red Hat Enterprise Linux 4 | openssl096b | 0:0.9.6b-22.4 |
| Red Hat Enterprise Linux 4 | openssl096b-debuginfo | 0:0.9.6b-22.3 |
| Red Hat Enterprise Linux 4 | openssl096b-debuginfo | 0:0.9.6b-22.4 |