Side-channel attack in Dell EMC Disk Library for mainframe DLm8100 and DLm2100



Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2018-5407
CWE-ID CWE-208
Exploitation vector Local
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 Disk Library for mainframe (DLm)
Other software / Other software solutions

Vendor Dell

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Side-channel attack

EUVDB-ID: #VU15723

Risk: Low

CVSSv4.0: 3.2 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2018-5407

CWE-ID: CWE-208 - Information Exposure Through Timing Discrepancy

Exploit availability: Yes

Description

The vulnerability allows a physical attacker to obtain potentially sensitive information.

The vulnerability exists due to due to execution of engine sharing on SMT (e.g.Hyper-Threading) architectures when improper handling of information by the processor. A physical attacker can construct a timing side channel to hijack information from processes that are running in the same core.

Note: the vulnerability has been dubbed as PortSmash microarchitecture bug.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Disk Library for mainframe (DLm): before 4.5-4.2

CPE2.3 External links

https://www.dell.com/support/kbdoc/en-us/000001838/dsa-2019-035-dell-emc-disk-library-for-mainframe-security-update-for-openssl-vulnerability


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###