QwikSec

Security Database

CVE

CWE

Training

CVE-2018-0734

Published: Oct 30, 2018

Modified: Sep 16, 2024

PUBLISHED

Description

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

Vendor	Product	Versions
OpenSSL	OpenSSL	affected `Fixed in OpenSSL 1.1.1a (Affected 1.1.1)` affected `Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i)` affected `Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p)`

References

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_DEBIAN

https://security.netapp.com/advisory/ntap-20181105-0002/

x_refsource_CONFIRM

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f

x_refsource_CONFIRM

https://www.tenable.com/security/tns-2018-17

x_refsource_CONFIRM

https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/

x_refsource_CONFIRM

https://www.tenable.com/security/tns-2018-16

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac

x_refsource_CONFIRM

https://www.openssl.org/news/secadv/20181030.txt

x_refsource_CONFIRM

https://security.netapp.com/advisory/ntap-20190118-0002/

x_refsource_CONFIRM

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

x_refsource_MISC

https://security.netapp.com/advisory/ntap-20190423-0002/

x_refsource_CONFIRM

openSUSE-SU-2019:1547

vendor-advisory

x_refsource_SUSE

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

x_refsource_MISC

openSUSE-SU-2019:1814

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

FEDORA-2019-db06efdea1

vendor-advisory

x_refsource_FEDORA

FEDORA-2019-00c25b9379

vendor-advisory

x_refsource_FEDORA

FEDORA-2019-9a0a7c0986

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

https://www.oracle.com/security-alerts/cpujan2020.html

x_refsource_MISC

https://www.oracle.com/security-alerts/cpuapr2020.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.