Vulnerability-Lookup

RHSA-2019_1175

Vulnerability from csaf_redhat - Published: 2019-05-14 18:15 - Updated: 2024-11-15 03:08

Summary

Red Hat Security Advisory: virt:rhel security update

Severity

Important

Notes

Topic: An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer while the data is fetched from higher level caches. This response time can be measured to infer data in the fill buffer. (CVE-2018-12130) * Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA (STore Address) and STD (STore Data) sub-operations. These sub-operations allow the processor to hand-off address generation logic into these sub-operations for optimized writes. Both of these sub-operations write to a shared distributed processor structure called the 'processor store buffer'. As a result, an unprivileged attacker could use this flaw to read private data resident within the CPU's processor store buffer. (CVE-2018-12126) * Microprocessors use a ‘load port’ subcomponent to perform load operations from memory or IO. During a load operation, the load port receives data from the memory or IO subsystem and then provides the data to the CPU registers and operations in the CPU’s pipelines. Stale load operations results are stored in the 'load port' table until overwritten by newer operations. Certain load-port operations triggered by an attacker can be used to reveal data about previous stale requests leaking data back to the attacker via a timing side-channel. (CVE-2018-12127) * Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. (CVE-2019-11091) * QEMU: device_tree: heap buffer overflow while loading device tree blob (CVE-2018-20815) * libssh2: Integer overflow in transport read resulting in out of bounds write (CVE-2019-3855) * libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856) * libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857) * libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes (CVE-2019-3863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2018-12126

Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA (STore Address) and STD (STore Data) sub-operations. These sub-operations allow the processor to hand-off address generation logic into these sub-operations for optimized writes. Both of these sub-operations write to a shared distributed processor structure called the 'processor store buffer'. As a result, an unprivileged attacker could use this flaw to read private data resident within the CPU's processor store buffer.

6.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-385 - Covert Timing Channel

Affected products

Fixed 633 products

Product	Version	Remediation
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:SLOF-0:20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:SLOF-0:20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-bash-completion-1:1.38.4-10.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-benchmarking-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-benchmarking-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-benchmarking-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-benchmarking-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debugsource-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debugsource-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debugsource-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-debugsource-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gfs2-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gfs2-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gfs2-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gfs2-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-gobject-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-inspect-icons-1:1.38.4-10.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-java-devel-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-javadoc-1:1.38.4-10.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-man-pages-ja-1:1.38.4-10.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-man-pages-uk-1:1.38.4-10.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rescue-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rescue-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rescue-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rescue-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rsync-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rsync-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rsync-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-rsync-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-1:1.38.4-10.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-tools-c-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-winsupport-0:8.0-2.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-winsupport-0:8.0-2.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-winsupport-0:8.0-2.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-winsupport-0:8.0-2.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-winsupport-0:8.0-2.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-xfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-xfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-xfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libguestfs-xfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-0:1.18.0-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-0:1.18.0-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-0:1.18.0-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-0:1.18.0-6.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-0:1.18.0-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debugsource-0:1.18.0-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debugsource-0:1.18.0-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debugsource-0:1.18.0-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-debugsource-0:1.18.0-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-devel-0:1.18.0-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-devel-0:1.18.0-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-devel-0:1.18.0-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-devel-0:1.18.0-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-0:1.18.0-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-0:1.18.0-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-0:1.18.0-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-0:1.18.0-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libiscsi-utils-debuginfo-0:1.18.0-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debuginfo-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debuginfo-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debuginfo-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debuginfo-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debugsource-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debugsource-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debugsource-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libssh2-debugsource-0:1.8.0-7.module+el8.0.0+3075+09be6b65.1.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-admin-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-bash-completion-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-bash-completion-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-bash-completion-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-bash-completion-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-client-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-config-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-interface-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-network-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nodedev-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-nwfilter-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-qemu-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-secret-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-core-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-disk-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-gluster-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-iscsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-logical-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-mpath-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-rbd-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-driver-storage-scsi-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-kvm-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-kvm-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-kvm-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-daemon-kvm-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-0:1.2.0-2.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-0:1.2.0-2.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-0:1.2.0-2.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-0:1.2.0-2.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-0:1.2.0-2.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debuginfo-0:1.2.0-2.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debuginfo-0:1.2.0-2.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debuginfo-0:1.2.0-2.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debuginfo-0:1.2.0-2.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debugsource-0:1.2.0-2.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debugsource-0:1.2.0-2.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debugsource-0:1.2.0-2.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-dbus-debugsource-0:1.2.0-2.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debugsource-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debugsource-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debugsource-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-debugsource-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-devel-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-devel-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-devel-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-devel-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-docs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-docs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-docs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-docs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-libs-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-lock-sanlock-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-nss-debuginfo-0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:libvirt-python-0:4.5.0-1.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:lua-guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-0:1.4.2-4.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-bash-completion-0:1.4.2-4.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-basic-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debugsource-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debugsource-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debugsource-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-debugsource-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-devel-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-devel-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-devel-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-devel-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-example-plugins-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-gzip-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python-common-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python-common-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python-common-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python-common-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-python3-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-vddk-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-vddk-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:nbdkit-plugin-xz-debuginfo-0:1.4.2-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-0:0.2.8-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-0:0.2.8-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-0:0.2.8-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-0:0.2.8-10.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-0:0.2.8-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debugsource-0:0.2.8-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debugsource-0:0.2.8-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debugsource-0:0.2.8-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-debugsource-0:0.2.8-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-devel-0:0.2.8-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-devel-0:0.2.8-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-devel-0:0.2.8-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-devel-0:0.2.8-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-0:0.2.8-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-0:0.2.8-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-0:0.2.8-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-0:0.2.8-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:netcf-libs-debuginfo-0:0.2.8-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Guestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-0:4.5.0-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-0:4.5.0-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-0:4.5.0-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-0:4.5.0-4.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-0:4.5.0-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debuginfo-0:4.5.0-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debuginfo-0:4.5.0-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debuginfo-0:4.5.0-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debuginfo-0:4.5.0-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debugsource-0:4.5.0-4.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debugsource-0:4.5.0-4.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debugsource-0:4.5.0-4.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-Sys-Virt-debugsource-0:4.5.0-4.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:perl-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-0:4.5.0-1.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-0:4.5.0-1.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-0:4.5.0-1.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-0:4.5.0-1.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-debuginfo-0:4.5.0-1.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-debuginfo-0:4.5.0-1.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-debuginfo-0:4.5.0-1.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:python3-libvirt-debuginfo-0:4.5.0-1.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-guest-agent-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-img-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-curl-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-gluster-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-gluster-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-iscsi-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-rbd-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-block-ssh-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-common-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-core-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debuginfo-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debugsource-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debugsource-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debugsource-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:qemu-kvm-debugsource-15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:ruby-libguestfs-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:seabios-0:1.11.1-3.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:seabios-0:1.11.1-3.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:seabios-bin-0:1.11.1-3.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:seavgabios-bin-0:1.11.1-3.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:sgabios-1:0.20170427git-2.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:sgabios-1:0.20170427git-2.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:sgabios-bin-1:0.20170427git-2.module+el8.0.0+3075+09be6b65.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-0:5.1.19-8.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-0:5.1.19-8.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-0:5.1.19-8.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-0:5.1.19-8.module+el8.0.0+3075+09be6b65.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-0:5.1.19-8.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debuginfo-0:5.1.19-8.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debuginfo-0:5.1.19-8.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debuginfo-0:5.1.19-8.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debuginfo-0:5.1.19-8.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debugsource-0:5.1.19-8.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debugsource-0:5.1.19-8.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debugsource-0:5.1.19-8.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-debugsource-0:5.1.19-8.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-devel-0:5.1.19-8.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-devel-0:5.1.19-8.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-devel-0:5.1.19-8.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:supermin-devel-0:5.1.19-8.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-dib-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-p2v-maker-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-v2v-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z:virt:rhel:8000020190510171727:55190bc5:virt-v2v-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2018-12127

Microprocessors use a ‘load port’ subcomponent to perform load operations from memory or IO. During a load operation, the load port receives data from the memory or IO subsystem and then provides the data to the CPU registers and operations in the CPU’s pipelines. Stale load operations results are stored in the 'load port' table until overwritten by newer operations. Certain load-port operations triggered by an attacker can be used to reveal data about previous stale requests leaking data back to the attacker via a timing side-channel.

6.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-385 - Covert Timing Channel

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Moderate

CVE-2018-12130

A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer while the data is fetched from higher level caches. This response time can be measured to infer data in the fill buffer.

6.2 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-226 - Sensitive Information in Resource Not Removed Before Reuse

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Important

CVE-2018-20815

A heap buffer overflow issue was found in the load_device_tree() function of QEMU, which is invoked to load a device tree blob at boot time. It occurs due to device tree size manipulation before buffer allocation, which could overflow a signed int type. A user/process could use this flaw to potentially execute arbitrary code on a host system with privileges of the QEMU process.

7.0 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Important

CVE-2019-3855

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Important

CVE-2019-3856

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Important

CVE-2019-3857

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Important

CVE-2019-3863

A flaw was found in libssh2. A server could send a multiple keyboard interactive response messages, whose total length are greater than the unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error. The highest threat from this vulnerability is to data confidentiality and integrity and system availability.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Important

CVE-2019-11091

Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

3.8 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-385 - Covert Timing Channel

Affected products

Fixed 633 products, the same list as for CVE-2018-12126

Threats

Impact Moderate

References

54 references

URL	Category
https://access.redhat.com/errata/RHSA-2019:1175	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1646781	external
https://bugzilla.redhat.com/show_bug.cgi?id=1646784	external
https://bugzilla.redhat.com/show_bug.cgi?id=1667782	external
https://bugzilla.redhat.com/show_bug.cgi?id=1687303	external
https://bugzilla.redhat.com/show_bug.cgi?id=1687304	external
https://bugzilla.redhat.com/show_bug.cgi?id=1687305	external
https://bugzilla.redhat.com/show_bug.cgi?id=1687313	external
https://bugzilla.redhat.com/show_bug.cgi?id=1693101	external
https://bugzilla.redhat.com/show_bug.cgi?id=1705312	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2018-12126	self
https://bugzilla.redhat.com/show_bug.cgi?id=1646781	external
https://access.redhat.com/security/vulnerabilities/mds	external
https://www.cve.org/CVERecord?id=CVE-2018-12126	external
https://nvd.nist.gov/vuln/detail/CVE-2018-12126	external
https://www.intel.com/content/www/us/en/security-…	external
https://access.redhat.com/security/cve/CVE-2018-12127	self
https://bugzilla.redhat.com/show_bug.cgi?id=1667782	external
https://www.cve.org/CVERecord?id=CVE-2018-12127	external
https://nvd.nist.gov/vuln/detail/CVE-2018-12127	external
https://access.redhat.com/security/cve/CVE-2018-12130	self
https://bugzilla.redhat.com/show_bug.cgi?id=1646784	external
https://www.cve.org/CVERecord?id=CVE-2018-12130	external
https://nvd.nist.gov/vuln/detail/CVE-2018-12130	external
https://access.redhat.com/security/cve/CVE-2018-20815	self
https://bugzilla.redhat.com/show_bug.cgi?id=1693101	external
https://www.cve.org/CVERecord?id=CVE-2018-20815	external
https://nvd.nist.gov/vuln/detail/CVE-2018-20815	external
https://access.redhat.com/security/cve/CVE-2019-3855	self
https://bugzilla.redhat.com/show_bug.cgi?id=1687303	external
https://www.cve.org/CVERecord?id=CVE-2019-3855	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3855	external
https://www.libssh2.org/CVE-2019-3855.html	external
https://access.redhat.com/security/cve/CVE-2019-3856	self
https://bugzilla.redhat.com/show_bug.cgi?id=1687304	external
https://www.cve.org/CVERecord?id=CVE-2019-3856	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3856	external
https://www.libssh2.org/CVE-2019-3856.html	external
https://access.redhat.com/security/cve/CVE-2019-3857	self
https://bugzilla.redhat.com/show_bug.cgi?id=1687305	external
https://www.cve.org/CVERecord?id=CVE-2019-3857	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3857	external
https://www.libssh2.org/CVE-2019-3857.html	external
https://access.redhat.com/security/cve/CVE-2019-3863	self
https://bugzilla.redhat.com/show_bug.cgi?id=1687313	external
https://www.cve.org/CVERecord?id=CVE-2019-3863	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3863	external
https://www.libssh2.org/CVE-2019-3863.html	external
https://access.redhat.com/security/cve/CVE-2019-11091	self
https://bugzilla.redhat.com/show_bug.cgi?id=1705312	external
https://www.cve.org/CVERecord?id=CVE-2019-11091	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11091	external

Acknowledgments

nccgroup.com Kurtis Miller

the libssh2 project

Canonical Ltd. Chris Coulson

JSON

To clipboard

Loading 3.1 MB of JSON…

CVE-2018-12126 (GCVE-0-2018-12126)

Vulnerability from cvelistv5 – Published: 2019-05-30 15:36 – Updated: 2026-05-29 20:09

Summary

Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 20:09 UTC

CWE

Information Disclosure
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

intel mitre root

References

25 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
https://www.synology.com/security/advisory/Synolo…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:1455	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3977-3/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2019/Jun/28	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Jun/36	mailing-listx_refsource_BUGTRAQ
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.freebsd.org/security/advisories/FreeB…	vendor-advisoryx_refsource_FREEBSD
https://access.redhat.com/errata/RHSA-2019:2553	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://seclists.org/bugtraq/2019/Nov/16	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Nov/15	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155281/FreeB…	x_refsource_MISC
https://www.debian.org/security/2020/dsa-4602	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Jan/21	mailing-listx_refsource_BUGTRAQ
https://security.gentoo.org/glsa/202003-56	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Central ProcCVE-2018-12126essing Units (CPUs)	Affected: A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Date Public

2019-05-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:57.443Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
          },
          {
            "name": "FEDORA-2019-1f5832fc0e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
          },
          {
            "name": "openSUSE-SU-2019:1505",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
          },
          {
            "name": "RHSA-2019:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1455"
          },
          {
            "name": "USN-3977-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3977-3/"
          },
          {
            "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/28"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
          },
          {
            "name": "openSUSE-SU-2019:1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
          },
          {
            "name": "openSUSE-SU-2019:1806",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
          },
          {
            "name": "FreeBSD-SA-19:07",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
          },
          {
            "name": "RHSA-2019:2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "name": "FreeBSD-SA-19:26",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
          },
          {
            "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/16"
          },
          {
            "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
          },
          {
            "name": "DSA-4602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4602"
          },
          {
            "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/21"
          },
          {
            "name": "GLSA-202003-56",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-56"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2018-12126",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T20:09:45.505836Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T20:09:50.287Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Central ProcCVE-2018-12126essing Units (CPUs)",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        }
      ],
      "datePublic": "2019-05-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-26T14:06:17.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
        },
        {
          "name": "FEDORA-2019-1f5832fc0e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
        },
        {
          "name": "openSUSE-SU-2019:1505",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
        },
        {
          "name": "RHSA-2019:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1455"
        },
        {
          "name": "USN-3977-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3977-3/"
        },
        {
          "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/28"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
        },
        {
          "name": "openSUSE-SU-2019:1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
        },
        {
          "name": "openSUSE-SU-2019:1806",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
        },
        {
          "name": "FreeBSD-SA-19:07",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
        },
        {
          "name": "RHSA-2019:2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "name": "FreeBSD-SA-19:26",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
        },
        {
          "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/16"
        },
        {
          "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
        },
        {
          "name": "DSA-4602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4602"
        },
        {
          "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/21"
        },
        {
          "name": "GLSA-202003-56",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-56"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2018-12126",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Central ProcCVE-2018-12126essing Units (CPUs)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
            },
            {
              "name": "https://www.synology.com/security/advisory/Synology_SA_19_24",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
            },
            {
              "name": "FEDORA-2019-1f5832fc0e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
            },
            {
              "name": "openSUSE-SU-2019:1505",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
            },
            {
              "name": "RHSA-2019:1455",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1455"
            },
            {
              "name": "USN-3977-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3977-3/"
            },
            {
              "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/28"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/36"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
            },
            {
              "name": "openSUSE-SU-2019:1805",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
            },
            {
              "name": "openSUSE-SU-2019:1806",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
            },
            {
              "name": "FreeBSD-SA-19:07",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
            },
            {
              "name": "RHSA-2019:2553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2553"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "FreeBSD-SA-19:26",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
            },
            {
              "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/16"
            },
            {
              "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/15"
            },
            {
              "name": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
            },
            {
              "name": "DSA-4602",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4602"
            },
            {
              "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/21"
            },
            {
              "name": "GLSA-202003-56",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-56"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-12126",
    "datePublished": "2019-05-30T15:36:05.000Z",
    "dateReserved": "2018-06-11T00:00:00.000Z",
    "dateUpdated": "2026-05-29T20:09:50.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2018-12127 (GCVE-0-2018-12127)

Vulnerability from cvelistv5 – Published: 2019-05-30 15:38 – Updated: 2026-05-29 20:09

Summary

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 20:09 UTC

CWE

Information Disclosure
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

intel mitre root

References

25 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
https://www.synology.com/security/advisory/Synolo…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:1455	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3977-3/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2019/Jun/28	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Jun/36	mailing-listx_refsource_BUGTRAQ
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.freebsd.org/security/advisories/FreeB…	vendor-advisoryx_refsource_FREEBSD
https://access.redhat.com/errata/RHSA-2019:2553	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://seclists.org/bugtraq/2019/Nov/16	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Nov/15	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155281/FreeB…	x_refsource_MISC
https://www.debian.org/security/2020/dsa-4602	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Jan/21	mailing-listx_refsource_BUGTRAQ
https://security.gentoo.org/glsa/202003-56	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Central Processing Units (CPUs)	Affected: A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Date Public

2019-05-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:57.404Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
          },
          {
            "name": "FEDORA-2019-1f5832fc0e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
          },
          {
            "name": "openSUSE-SU-2019:1505",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
          },
          {
            "name": "RHSA-2019:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1455"
          },
          {
            "name": "USN-3977-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3977-3/"
          },
          {
            "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/28"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
          },
          {
            "name": "openSUSE-SU-2019:1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
          },
          {
            "name": "openSUSE-SU-2019:1806",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
          },
          {
            "name": "FreeBSD-SA-19:07",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
          },
          {
            "name": "RHSA-2019:2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "name": "FreeBSD-SA-19:26",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
          },
          {
            "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/16"
          },
          {
            "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
          },
          {
            "name": "DSA-4602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4602"
          },
          {
            "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/21"
          },
          {
            "name": "GLSA-202003-56",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-56"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2018-12127",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T20:09:05.387062Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T20:09:09.875Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Central Processing Units (CPUs)",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        }
      ],
      "datePublic": "2019-05-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-26T14:06:07.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
        },
        {
          "name": "FEDORA-2019-1f5832fc0e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
        },
        {
          "name": "openSUSE-SU-2019:1505",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
        },
        {
          "name": "RHSA-2019:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1455"
        },
        {
          "name": "USN-3977-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3977-3/"
        },
        {
          "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/28"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
        },
        {
          "name": "openSUSE-SU-2019:1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
        },
        {
          "name": "openSUSE-SU-2019:1806",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
        },
        {
          "name": "FreeBSD-SA-19:07",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
        },
        {
          "name": "RHSA-2019:2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "name": "FreeBSD-SA-19:26",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
        },
        {
          "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/16"
        },
        {
          "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
        },
        {
          "name": "DSA-4602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4602"
        },
        {
          "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/21"
        },
        {
          "name": "GLSA-202003-56",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-56"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2018-12127",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Central Processing Units (CPUs)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
            },
            {
              "name": "https://www.synology.com/security/advisory/Synology_SA_19_24",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
            },
            {
              "name": "FEDORA-2019-1f5832fc0e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
            },
            {
              "name": "openSUSE-SU-2019:1505",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
            },
            {
              "name": "RHSA-2019:1455",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1455"
            },
            {
              "name": "USN-3977-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3977-3/"
            },
            {
              "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/28"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/36"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
            },
            {
              "name": "openSUSE-SU-2019:1805",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
            },
            {
              "name": "openSUSE-SU-2019:1806",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
            },
            {
              "name": "FreeBSD-SA-19:07",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
            },
            {
              "name": "RHSA-2019:2553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2553"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "FreeBSD-SA-19:26",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
            },
            {
              "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/16"
            },
            {
              "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/15"
            },
            {
              "name": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
            },
            {
              "name": "DSA-4602",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4602"
            },
            {
              "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/21"
            },
            {
              "name": "GLSA-202003-56",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-56"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-12127",
    "datePublished": "2019-05-30T15:38:38.000Z",
    "dateReserved": "2018-06-11T00:00:00.000Z",
    "dateUpdated": "2026-05-29T20:09:09.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2018-12130 (GCVE-0-2018-12130)

Vulnerability from cvelistv5 – Published: 2019-05-30 15:40 – Updated: 2026-05-29 20:08

Summary

Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 20:08 UTC

CWE

Information Disclosure
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

intel mitre root

References

25 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
https://www.synology.com/security/advisory/Synolo…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:1455	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3977-3/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2019/Jun/28	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Jun/36	mailing-listx_refsource_BUGTRAQ
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.freebsd.org/security/advisories/FreeB…	vendor-advisoryx_refsource_FREEBSD
https://access.redhat.com/errata/RHSA-2019:2553	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://seclists.org/bugtraq/2019/Nov/16	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Nov/15	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155281/FreeB…	x_refsource_MISC
https://www.debian.org/security/2020/dsa-4602	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Jan/21	mailing-listx_refsource_BUGTRAQ
https://security.gentoo.org/glsa/202003-56	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Central Processing Units (CPUs)	Affected: A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Date Public

2019-05-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:57.431Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
          },
          {
            "name": "FEDORA-2019-1f5832fc0e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
          },
          {
            "name": "openSUSE-SU-2019:1505",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
          },
          {
            "name": "RHSA-2019:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1455"
          },
          {
            "name": "USN-3977-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3977-3/"
          },
          {
            "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/28"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
          },
          {
            "name": "openSUSE-SU-2019:1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
          },
          {
            "name": "openSUSE-SU-2019:1806",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
          },
          {
            "name": "FreeBSD-SA-19:07",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
          },
          {
            "name": "RHSA-2019:2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "name": "FreeBSD-SA-19:26",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
          },
          {
            "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/16"
          },
          {
            "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
          },
          {
            "name": "DSA-4602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4602"
          },
          {
            "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/21"
          },
          {
            "name": "GLSA-202003-56",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-56"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2018-12130",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T20:08:12.508655Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T20:08:15.935Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Central Processing Units (CPUs)",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        }
      ],
      "datePublic": "2019-05-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-26T14:06:15.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
        },
        {
          "name": "FEDORA-2019-1f5832fc0e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
        },
        {
          "name": "openSUSE-SU-2019:1505",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
        },
        {
          "name": "RHSA-2019:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1455"
        },
        {
          "name": "USN-3977-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3977-3/"
        },
        {
          "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/28"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
        },
        {
          "name": "openSUSE-SU-2019:1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
        },
        {
          "name": "openSUSE-SU-2019:1806",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
        },
        {
          "name": "FreeBSD-SA-19:07",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
        },
        {
          "name": "RHSA-2019:2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "name": "FreeBSD-SA-19:26",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
        },
        {
          "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/16"
        },
        {
          "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
        },
        {
          "name": "DSA-4602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4602"
        },
        {
          "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/21"
        },
        {
          "name": "GLSA-202003-56",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-56"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2018-12130",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Central Processing Units (CPUs)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
            },
            {
              "name": "https://www.synology.com/security/advisory/Synology_SA_19_24",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
            },
            {
              "name": "FEDORA-2019-1f5832fc0e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
            },
            {
              "name": "openSUSE-SU-2019:1505",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
            },
            {
              "name": "RHSA-2019:1455",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1455"
            },
            {
              "name": "USN-3977-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3977-3/"
            },
            {
              "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/28"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/36"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
            },
            {
              "name": "openSUSE-SU-2019:1805",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
            },
            {
              "name": "openSUSE-SU-2019:1806",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
            },
            {
              "name": "FreeBSD-SA-19:07",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
            },
            {
              "name": "RHSA-2019:2553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2553"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "FreeBSD-SA-19:26",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
            },
            {
              "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/16"
            },
            {
              "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/15"
            },
            {
              "name": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
            },
            {
              "name": "DSA-4602",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4602"
            },
            {
              "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/21"
            },
            {
              "name": "GLSA-202003-56",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-56"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-12130",
    "datePublished": "2019-05-30T15:40:44.000Z",
    "dateReserved": "2018-06-11T00:00:00.000Z",
    "dateUpdated": "2026-05-29T20:08:15.935Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2018-20815 (GCVE-0-2018-20815)

Vulnerability from cvelistv5 – Published: 2019-05-31 21:40 – Updated: 2024-08-05 12:12

Summary

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:1667	vendor-advisoryx_refsource_REDHAT
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2019:1723	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1743	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1881	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1968	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2507	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2553	vendor-advisoryx_refsource_REDHAT
https://seclists.org/bugtraq/2019/Aug/41	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4506	vendor-advisoryx_refsource_DEBIAN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T12:12:27.153Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17"
          },
          {
            "name": "RHSA-2019:1667",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1667"
          },
          {
            "name": "FEDORA-2019-52a8f5468e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"
          },
          {
            "name": "FEDORA-2019-e9de40d53f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"
          },
          {
            "name": "RHSA-2019:1723",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1723"
          },
          {
            "name": "RHSA-2019:1743",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1743"
          },
          {
            "name": "RHSA-2019:1881",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1881"
          },
          {
            "name": "RHSA-2019:1968",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1968"
          },
          {
            "name": "RHSA-2019:2507",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2507"
          },
          {
            "name": "RHSA-2019:2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2553"
          },
          {
            "name": "20190825 [SECURITY] [DSA 4506-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Aug/41"
          },
          {
            "name": "DSA-4506",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4506"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-26T14:06:15.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=da885fe1ee8b4589047484bd7fa05a4905b52b17"
        },
        {
          "name": "RHSA-2019:1667",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1667"
        },
        {
          "name": "FEDORA-2019-52a8f5468e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"
        },
        {
          "name": "FEDORA-2019-e9de40d53f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"
        },
        {
          "name": "RHSA-2019:1723",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1723"
        },
        {
          "name": "RHSA-2019:1743",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1743"
        },
        {
          "name": "RHSA-2019:1881",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1881"
        },
        {
          "name": "RHSA-2019:1968",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1968"
        },
        {
          "name": "RHSA-2019:2507",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2507"
        },
        {
          "name": "RHSA-2019:2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2553"
        },
        {
          "name": "20190825 [SECURITY] [DSA 4506-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Aug/41"
        },
        {
          "name": "DSA-4506",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4506"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-20815",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=da885fe1ee8b4589047484bd7fa05a4905b52b17",
              "refsource": "MISC",
              "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=da885fe1ee8b4589047484bd7fa05a4905b52b17"
            },
            {
              "name": "RHSA-2019:1667",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1667"
            },
            {
              "name": "FEDORA-2019-52a8f5468e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/"
            },
            {
              "name": "FEDORA-2019-e9de40d53f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/"
            },
            {
              "name": "RHSA-2019:1723",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1723"
            },
            {
              "name": "RHSA-2019:1743",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1743"
            },
            {
              "name": "RHSA-2019:1881",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1881"
            },
            {
              "name": "RHSA-2019:1968",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1968"
            },
            {
              "name": "RHSA-2019:2507",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2507"
            },
            {
              "name": "RHSA-2019:2553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2553"
            },
            {
              "name": "20190825 [SECURITY] [DSA 4506-1] qemu security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Aug/41"
            },
            {
              "name": "DSA-4506",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4506"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-20815",
    "datePublished": "2019-05-31T21:40:01.000Z",
    "dateReserved": "2019-03-26T00:00:00.000Z",
    "dateUpdated": "2024-08-05T12:12:27.153Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11091 (GCVE-0-2019-11091)

Vulnerability from cvelistv5 – Published: 2019-05-30 15:28 – Updated: 2026-05-28 18:17

Summary

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-28 18:16 UTC

CWE

Information Disclosure
CWE-noinfo Not enough information

Assigner

intel mitre root

References

22 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM
https://www.synology.com/security/advisory/Synolo…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:1455	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/3977-3/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2019/Jun/28	mailing-listx_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Jun/36	mailing-listx_refsource_BUGTRAQ
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisorie…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.freebsd.org/security/advisories/FreeB…	vendor-advisoryx_refsource_FREEBSD
https://access.redhat.com/errata/RHSA-2019:2553	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Nov/15	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2020/dsa-4602	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2020/Jan/21	mailing-listx_refsource_BUGTRAQ
https://security.gentoo.org/glsa/202003-56	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Central Processing Units (CPUs)	Affected: A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

Date Public

2019-05-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.292Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
          },
          {
            "name": "FEDORA-2019-1f5832fc0e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
          },
          {
            "name": "openSUSE-SU-2019:1505",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
          },
          {
            "name": "RHSA-2019:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1455"
          },
          {
            "name": "USN-3977-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3977-3/"
          },
          {
            "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/28"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
          },
          {
            "name": "openSUSE-SU-2019:1805",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
          },
          {
            "name": "openSUSE-SU-2019:1806",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
          },
          {
            "name": "FreeBSD-SA-19:07",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
          },
          {
            "name": "RHSA-2019:2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/15"
          },
          {
            "name": "DSA-4602",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4602"
          },
          {
            "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/21"
          },
          {
            "name": "GLSA-202003-56",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-56"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2019-11091",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T18:16:57.036809Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T18:17:01.249Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Central Processing Units (CPUs)",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        }
      ],
      "datePublic": "2019-05-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-26T14:06:10.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
        },
        {
          "name": "FEDORA-2019-1f5832fc0e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
        },
        {
          "name": "openSUSE-SU-2019:1505",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
        },
        {
          "name": "RHSA-2019:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1455"
        },
        {
          "name": "USN-3977-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3977-3/"
        },
        {
          "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/28"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
        },
        {
          "name": "openSUSE-SU-2019:1805",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
        },
        {
          "name": "openSUSE-SU-2019:1806",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
        },
        {
          "name": "FreeBSD-SA-19:07",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
        },
        {
          "name": "RHSA-2019:2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/15"
        },
        {
          "name": "DSA-4602",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4602"
        },
        {
          "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/21"
        },
        {
          "name": "GLSA-202003-56",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-56"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-11091",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Central Processing Units (CPUs)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html"
            },
            {
              "name": "https://www.synology.com/security/advisory/Synology_SA_19_24",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/security/advisory/Synology_SA_19_24"
            },
            {
              "name": "FEDORA-2019-1f5832fc0e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/"
            },
            {
              "name": "openSUSE-SU-2019:1505",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html"
            },
            {
              "name": "RHSA-2019:1455",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1455"
            },
            {
              "name": "USN-3977-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3977-3/"
            },
            {
              "name": "[debian-lts-announce] 20190620 [SECURITY] [DLA 1789-2] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00018.html"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4447-2] intel-microcode security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/28"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/36"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190712-01-mds-en"
            },
            {
              "name": "openSUSE-SU-2019:1805",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html"
            },
            {
              "name": "openSUSE-SU-2019:1806",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html"
            },
            {
              "name": "FreeBSD-SA-19:07",
              "refsource": "FREEBSD",
              "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-19:07.mds.asc"
            },
            {
              "name": "RHSA-2019:2553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2553"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10292"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "20191112 [SECURITY] [DSA 4564-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/15"
            },
            {
              "name": "DSA-4602",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4602"
            },
            {
              "name": "20200114 [SECURITY] [DSA 4602-1] xen security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/21"
            },
            {
              "name": "GLSA-202003-56",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-56"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-11091",
    "datePublished": "2019-05-30T15:28:28.000Z",
    "dateReserved": "2019-04-11T00:00:00.000Z",
    "dateUpdated": "2026-05-28T18:17:01.249Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2019-3855 (GCVE-0-2019-3855)

Vulnerability from cvelistv5 – Published: 2019-03-21 20:13 – Updated: 2025-12-17 21:40

Summary

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-17 21:39 UTC

CWE

Assigner

redhat redhat root

References

27 references

URL	Tags
http://www.openwall.com/lists/oss-security/2019/03/18/3	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2019/Mar/25	mailing-listx_refsource_BUGTRAQ
https://www.libssh2.org/CVE-2019-3855.html	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
http://packetstormsecurity.com/files/152136/Slack…	x_refsource_MISC
http://www.securityfocus.com/bid/107485	vdb-entryx_refsource_BID
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.broadcom.com/support/fibre-channel-ne…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2019032…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:0679	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2019/dsa-4431	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Apr/25	mailing-listx_refsource_BUGTRAQ
https://access.redhat.com/errata/RHSA-2019:1175	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1652	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1943	vendor-advisoryx_refsource_REDHAT
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2019:2399	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT210609	x_refsource_CONFIRM
https://seclists.org/bugtraq/2019/Sep/49	mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2019/Sep/42	mailing-listx_refsource_FULLDISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
The libssh2 Project	libssh2	Affected: 1.8.1

Date Public

2019-03-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:19:18.675Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20190318 [SECURITY ADVISORIES] libssh2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/03/18/3"
          },
          {
            "name": "20190319 [slackware-security] libssh2 (SSA:2019-077-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Mar/25"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.libssh2.org/CVE-2019-3855.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html"
          },
          {
            "name": "107485",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107485"
          },
          {
            "name": "FEDORA-2019-f31c14682f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767"
          },
          {
            "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
          },
          {
            "name": "RHSA-2019:0679",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0679"
          },
          {
            "name": "openSUSE-SU-2019:1075",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:1109",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
          },
          {
            "name": "FEDORA-2019-3348cb4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
          },
          {
            "name": "DSA-4431",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4431"
          },
          {
            "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Apr/25"
          },
          {
            "name": "RHSA-2019:1175",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1175"
          },
          {
            "name": "RHSA-2019:1652",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1652"
          },
          {
            "name": "RHSA-2019:1791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1791"
          },
          {
            "name": "RHSA-2019:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1943"
          },
          {
            "name": "FEDORA-2019-9d85600fc7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/"
          },
          {
            "name": "FEDORA-2019-5885663621",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/"
          },
          {
            "name": "RHSA-2019:2399",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT210609"
          },
          {
            "name": "20190927 APPLE-SA-2019-9-26-7 Xcode 11.0",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/49"
          },
          {
            "name": "20190927 APPLE-SA-2019-9-26-7 Xcode 11.0",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Sep/42"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-3855",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-17T21:39:23.503426Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-17T21:40:11.249Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libssh2",
          "vendor": "The libssh2 Project",
          "versions": [
            {
              "status": "affected",
              "version": "1.8.1"
            }
          ]
        }
      ],
      "datePublic": "2019-03-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-16T17:41:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20190318 [SECURITY ADVISORIES] libssh2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/03/18/3"
        },
        {
          "name": "20190319 [slackware-security] libssh2 (SSA:2019-077-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Mar/25"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.libssh2.org/CVE-2019-3855.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html"
        },
        {
          "name": "107485",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107485"
        },
        {
          "name": "FEDORA-2019-f31c14682f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767"
        },
        {
          "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
        },
        {
          "name": "RHSA-2019:0679",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0679"
        },
        {
          "name": "openSUSE-SU-2019:1075",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:1109",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
        },
        {
          "name": "FEDORA-2019-3348cb4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
        },
        {
          "name": "DSA-4431",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4431"
        },
        {
          "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Apr/25"
        },
        {
          "name": "RHSA-2019:1175",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1175"
        },
        {
          "name": "RHSA-2019:1652",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1652"
        },
        {
          "name": "RHSA-2019:1791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1791"
        },
        {
          "name": "RHSA-2019:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1943"
        },
        {
          "name": "FEDORA-2019-9d85600fc7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/"
        },
        {
          "name": "FEDORA-2019-5885663621",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/"
        },
        {
          "name": "RHSA-2019:2399",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT210609"
        },
        {
          "name": "20190927 APPLE-SA-2019-9-26-7 Xcode 11.0",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/49"
        },
        {
          "name": "20190927 APPLE-SA-2019-9-26-7 Xcode 11.0",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Sep/42"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2019-3855",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "libssh2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.8.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The libssh2 Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-190"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20190318 [SECURITY ADVISORIES] libssh2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/03/18/3"
            },
            {
              "name": "20190319 [slackware-security] libssh2 (SSA:2019-077-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Mar/25"
            },
            {
              "name": "https://www.libssh2.org/CVE-2019-3855.html",
              "refsource": "MISC",
              "url": "https://www.libssh2.org/CVE-2019-3855.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855"
            },
            {
              "name": "http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html"
            },
            {
              "name": "107485",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107485"
            },
            {
              "name": "FEDORA-2019-f31c14682f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/"
            },
            {
              "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767",
              "refsource": "CONFIRM",
              "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767"
            },
            {
              "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190327-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
            },
            {
              "name": "RHSA-2019:0679",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0679"
            },
            {
              "name": "openSUSE-SU-2019:1075",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:1109",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
            },
            {
              "name": "FEDORA-2019-3348cb4934",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
            },
            {
              "name": "DSA-4431",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4431"
            },
            {
              "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Apr/25"
            },
            {
              "name": "RHSA-2019:1175",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1175"
            },
            {
              "name": "RHSA-2019:1652",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1652"
            },
            {
              "name": "RHSA-2019:1791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1791"
            },
            {
              "name": "RHSA-2019:1943",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1943"
            },
            {
              "name": "FEDORA-2019-9d85600fc7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/"
            },
            {
              "name": "FEDORA-2019-5885663621",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/"
            },
            {
              "name": "RHSA-2019:2399",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2399"
            },
            {
              "name": "https://support.apple.com/kb/HT210609",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT210609"
            },
            {
              "name": "20190927 APPLE-SA-2019-9-26-7 Xcode 11.0",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Sep/49"
            },
            {
              "name": "20190927 APPLE-SA-2019-9-26-7 Xcode 11.0",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Sep/42"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-3855",
    "datePublished": "2019-03-21T20:13:25.000Z",
    "dateReserved": "2019-01-03T00:00:00.000Z",
    "dateUpdated": "2025-12-17T21:40:11.249Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2019-3856 (GCVE-0-2019-3856)

Vulnerability from cvelistv5 – Published: 2019-03-25 18:31 – Updated: 2025-04-23 19:48

Summary

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:20 UTC

CWE

Assigner

redhat redhat root

References

16 references

URL	Tags
https://www.libssh2.org/CVE-2019-3856.html	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2019032…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:0679	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2019/dsa-4431	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Apr/25	mailing-listx_refsource_BUGTRAQ
https://access.redhat.com/errata/RHSA-2019:1175	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1652	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1943	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2399	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
The libssh2 Project	libssh2	Affected: 1.8.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:19:18.557Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.libssh2.org/CVE-2019-3856.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3856"
          },
          {
            "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
          },
          {
            "name": "RHSA-2019:0679",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0679"
          },
          {
            "name": "openSUSE-SU-2019:1075",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:1109",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
          },
          {
            "name": "FEDORA-2019-3348cb4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
          },
          {
            "name": "DSA-4431",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4431"
          },
          {
            "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Apr/25"
          },
          {
            "name": "RHSA-2019:1175",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1175"
          },
          {
            "name": "RHSA-2019:1652",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1652"
          },
          {
            "name": "RHSA-2019:1791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1791"
          },
          {
            "name": "RHSA-2019:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1943"
          },
          {
            "name": "RHSA-2019:2399",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2399"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-3856",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:20:36.981205Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-23T19:48:00.365Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libssh2",
          "vendor": "The libssh2 Project",
          "versions": [
            {
              "status": "affected",
              "version": "1.8.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-16T17:41:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.libssh2.org/CVE-2019-3856.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3856"
        },
        {
          "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
        },
        {
          "name": "RHSA-2019:0679",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0679"
        },
        {
          "name": "openSUSE-SU-2019:1075",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:1109",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
        },
        {
          "name": "FEDORA-2019-3348cb4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
        },
        {
          "name": "DSA-4431",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4431"
        },
        {
          "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Apr/25"
        },
        {
          "name": "RHSA-2019:1175",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1175"
        },
        {
          "name": "RHSA-2019:1652",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1652"
        },
        {
          "name": "RHSA-2019:1791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1791"
        },
        {
          "name": "RHSA-2019:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1943"
        },
        {
          "name": "RHSA-2019:2399",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2399"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2019-3856",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "libssh2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.8.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The libssh2 Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-190"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.libssh2.org/CVE-2019-3856.html",
              "refsource": "MISC",
              "url": "https://www.libssh2.org/CVE-2019-3856.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3856",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3856"
            },
            {
              "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190327-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
            },
            {
              "name": "RHSA-2019:0679",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0679"
            },
            {
              "name": "openSUSE-SU-2019:1075",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:1109",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
            },
            {
              "name": "FEDORA-2019-3348cb4934",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
            },
            {
              "name": "DSA-4431",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4431"
            },
            {
              "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Apr/25"
            },
            {
              "name": "RHSA-2019:1175",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1175"
            },
            {
              "name": "RHSA-2019:1652",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1652"
            },
            {
              "name": "RHSA-2019:1791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1791"
            },
            {
              "name": "RHSA-2019:1943",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1943"
            },
            {
              "name": "RHSA-2019:2399",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2399"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-3856",
    "datePublished": "2019-03-25T18:31:03.000Z",
    "dateReserved": "2019-01-03T00:00:00.000Z",
    "dateUpdated": "2025-04-23T19:48:00.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-3857 (GCVE-0-2019-3857)

Vulnerability from cvelistv5 – Published: 2019-03-25 18:30 – Updated: 2025-04-23 19:48

Summary

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:20 UTC

CWE

Assigner

redhat redhat root

References

16 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://www.libssh2.org/CVE-2019-3857.html	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2019032…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:0679	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2019/dsa-4431	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Apr/25	mailing-listx_refsource_BUGTRAQ
https://access.redhat.com/errata/RHSA-2019:1175	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1652	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1943	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2399	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
The libssh2 Project	libssh2	Affected: 1.8.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:19:18.668Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3857"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.libssh2.org/CVE-2019-3857.html"
          },
          {
            "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
          },
          {
            "name": "RHSA-2019:0679",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0679"
          },
          {
            "name": "openSUSE-SU-2019:1075",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:1109",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
          },
          {
            "name": "FEDORA-2019-3348cb4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
          },
          {
            "name": "DSA-4431",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4431"
          },
          {
            "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Apr/25"
          },
          {
            "name": "RHSA-2019:1175",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1175"
          },
          {
            "name": "RHSA-2019:1652",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1652"
          },
          {
            "name": "RHSA-2019:1791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1791"
          },
          {
            "name": "RHSA-2019:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1943"
          },
          {
            "name": "RHSA-2019:2399",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2399"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-3857",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:20:40.532184Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-23T19:48:11.114Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libssh2",
          "vendor": "The libssh2 Project",
          "versions": [
            {
              "status": "affected",
              "version": "1.8.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-16T17:41:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3857"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.libssh2.org/CVE-2019-3857.html"
        },
        {
          "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
        },
        {
          "name": "RHSA-2019:0679",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0679"
        },
        {
          "name": "openSUSE-SU-2019:1075",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:1109",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
        },
        {
          "name": "FEDORA-2019-3348cb4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
        },
        {
          "name": "DSA-4431",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4431"
        },
        {
          "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Apr/25"
        },
        {
          "name": "RHSA-2019:1175",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1175"
        },
        {
          "name": "RHSA-2019:1652",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1652"
        },
        {
          "name": "RHSA-2019:1791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1791"
        },
        {
          "name": "RHSA-2019:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1943"
        },
        {
          "name": "RHSA-2019:2399",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2399"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2019-3857",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "libssh2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.8.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The libssh2 Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-190"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3857",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3857"
            },
            {
              "name": "https://www.libssh2.org/CVE-2019-3857.html",
              "refsource": "MISC",
              "url": "https://www.libssh2.org/CVE-2019-3857.html"
            },
            {
              "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190327-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
            },
            {
              "name": "RHSA-2019:0679",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0679"
            },
            {
              "name": "openSUSE-SU-2019:1075",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:1109",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
            },
            {
              "name": "FEDORA-2019-3348cb4934",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
            },
            {
              "name": "DSA-4431",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4431"
            },
            {
              "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Apr/25"
            },
            {
              "name": "RHSA-2019:1175",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1175"
            },
            {
              "name": "RHSA-2019:1652",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1652"
            },
            {
              "name": "RHSA-2019:1791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1791"
            },
            {
              "name": "RHSA-2019:1943",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1943"
            },
            {
              "name": "RHSA-2019:2399",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2399"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-3857",
    "datePublished": "2019-03-25T18:30:56.000Z",
    "dateReserved": "2019-01-03T00:00:00.000Z",
    "dateUpdated": "2025-04-23T19:48:11.114Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-3863 (GCVE-0-2019-3863)

Vulnerability from cvelistv5 – Published: 2019-03-25 17:52 – Updated: 2025-12-19 03:02

Summary

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:20 UTC

CWE

Assigner

redhat redhat root

References

16 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://www.libssh2.org/CVE-2019-3863.html	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2019032…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:0679	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2019/dsa-4431	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Apr/25	mailing-listx_refsource_BUGTRAQ
https://access.redhat.com/errata/RHSA-2019:1175	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1652	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1943	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2399	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
The libssh2 Project	libssh2	Affected: 1.8.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:19:18.614Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.libssh2.org/CVE-2019-3863.html"
          },
          {
            "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
          },
          {
            "name": "RHSA-2019:0679",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0679"
          },
          {
            "name": "openSUSE-SU-2019:1075",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:1109",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
          },
          {
            "name": "FEDORA-2019-3348cb4934",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
          },
          {
            "name": "DSA-4431",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4431"
          },
          {
            "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Apr/25"
          },
          {
            "name": "RHSA-2019:1175",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1175"
          },
          {
            "name": "RHSA-2019:1652",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1652"
          },
          {
            "name": "RHSA-2019:1791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1791"
          },
          {
            "name": "RHSA-2019:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1943"
          },
          {
            "name": "RHSA-2019:2399",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2399"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-3863",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:20:45.609039Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-23T19:48:19.703Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libssh2",
          "vendor": "The libssh2 Project",
          "versions": [
            {
              "status": "affected",
              "version": "1.8.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-19T03:02:32.466Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.libssh2.org/CVE-2019-3863.html"
        },
        {
          "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
        },
        {
          "name": "RHSA-2019:0679",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0679"
        },
        {
          "name": "openSUSE-SU-2019:1075",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:1109",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
        },
        {
          "name": "FEDORA-2019-3348cb4934",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
        },
        {
          "name": "DSA-4431",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4431"
        },
        {
          "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Apr/25"
        },
        {
          "name": "RHSA-2019:1175",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1175"
        },
        {
          "name": "RHSA-2019:1652",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1652"
        },
        {
          "name": "RHSA-2019:1791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1791"
        },
        {
          "name": "RHSA-2019:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1943"
        },
        {
          "name": "RHSA-2019:2399",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2399"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2019-3863",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "libssh2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.8.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The libssh2 Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-190"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863"
            },
            {
              "name": "https://www.libssh2.org/CVE-2019-3863.html",
              "refsource": "MISC",
              "url": "https://www.libssh2.org/CVE-2019-3863.html"
            },
            {
              "name": "[debian-lts-announce] 20190326 [SECURITY] [DLA 1730-1] libssh2 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190327-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190327-0005/"
            },
            {
              "name": "RHSA-2019:0679",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0679"
            },
            {
              "name": "openSUSE-SU-2019:1075",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:1109",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html"
            },
            {
              "name": "FEDORA-2019-3348cb4934",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/"
            },
            {
              "name": "DSA-4431",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4431"
            },
            {
              "name": "20190415 [SECURITY] [DSA 4431-1] libssh2 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Apr/25"
            },
            {
              "name": "RHSA-2019:1175",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1175"
            },
            {
              "name": "RHSA-2019:1652",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1652"
            },
            {
              "name": "RHSA-2019:1791",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1791"
            },
            {
              "name": "RHSA-2019:1943",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1943"
            },
            {
              "name": "RHSA-2019:2399",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2399"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-3863",
    "datePublished": "2019-03-25T17:52:10.000Z",
    "dateReserved": "2019-01-03T00:00:00.000Z",
    "dateUpdated": "2025-12-19T03:02:32.466Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2019_1175

CVE-2018-12126 (GCVE-0-2018-12126)

CVE-2018-12127 (GCVE-0-2018-12127)

CVE-2018-12130 (GCVE-0-2018-12130)

CVE-2018-20815 (GCVE-0-2018-20815)

CVE-2019-11091 (GCVE-0-2019-11091)

CVE-2019-3855 (GCVE-0-2019-3855)

CVE-2019-3856 (GCVE-0-2019-3856)

CVE-2019-3857 (GCVE-0-2019-3857)

CVE-2019-3863 (GCVE-0-2019-3863)

Tags

Sightings

Nomenclature

Related by attack behaviour