CVE-2018-0735

Published: Oct 29, 2018Modified: Nov 21, 2024

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Affected (46)

Products: Openssl: Openssl · Canonical: Ubuntu Linux · Debian: Debian Linux · +3 more

Show all products

1 product

1 product

1 product

1 product

8 products

Oncommand Unified Manager

Santricity Smi S Provider

10 products

Enterprise Manager Base Platform

Enterprise Manager Ops Center

Mysql

Peoplesoft Enterprise Peopletools

Primavera P6 Enterprise Project Portfolio Management

Secure Global Desktop

Tuxedo

Vm Virtualbox

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	From 1.1.0 to 1.1.0i
Openssl Openssl	Version 1.1.1

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 18.10

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Nodejs Node.js	From 10.0.0 to 10.12.0
Nodejs Node.js	From 11.0.0 to 11.3.0
Nodejs Node.js	Version 10.13.0

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Cn1610 Firmware	All versions

Running on/with	Platform Versions
Netapp Cn1610	All versions

Configuration F

9 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp Element Software	All versions
Netapp Oncommand Unified Manager	All versions
Netapp Oncommand Unified Manager	From 9.4
Netapp Santricity Smi S Provider	All versions
Netapp Smi S Provider	All versions
Netapp Snapdrive	All versions
Netapp Snapdrive	All versions
Netapp Steelstore	All versions

Configuration G

25 vulnerable

Vulnerable Software	Affected Versions
Oracle Api Gateway	Version 11.1.2.4.0
Oracle Application Server	Version 0.9.8
Oracle Application Server	Version 1.0.0
Oracle Application Server	Version 1.0.1
Oracle Enterprise Manager Base Platform	Version 12.1.0.5.0
Oracle Enterprise Manager Base Platform	Version 13.2.0.0.0
Oracle Enterprise Manager Base Platform	Version 13.3.0.0.0
Oracle Enterprise Manager Ops Center	Version 12.3.3
Oracle Mysql	Up to 5.6.42
Oracle Mysql	From 5.7.0 to 5.7.24
Oracle Mysql	From 8.0.0 to 8.0.13
Oracle Peoplesoft Enterprise Peopletools	Version 8.55
Oracle Peoplesoft Enterprise Peopletools	Version 8.56
Oracle Peoplesoft Enterprise Peopletools	Version 8.57
Oracle Primavera P6 Enterprise Project Portfolio Management	From 17.7 to 17.12
Oracle Primavera P6 Enterprise Project Portfolio Management	Version 15.1
Oracle Primavera P6 Enterprise Project Portfolio Management	Version 15.2
Oracle Primavera P6 Enterprise Project Portfolio Management	Version 16.1
Oracle Primavera P6 Enterprise Project Portfolio Management	Version 16.2
Oracle Primavera P6 Enterprise Project Portfolio Management	Version 18.8
Oracle Primavera P6 Enterprise Project Portfolio Management	Version 8.4
Oracle Secure Global Desktop	Version 5.4
Oracle Tuxedo	Version 12.1.1.0.0
Oracle Vm Virtualbox	Before 6.0.0
Oracle Vm Virtualbox	From 5.0.0 to 5.2.24