Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-0734

Fixed in a distro release EPSS 12%

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

Published 2018-10-30 · CVE record · OSV

Products: OpenSSL

Distro releases

ReleasePackageFixed in
Alpine:v3.10nodejs10.14.0-r0
Alpine:v3.10openssl1.1.1a-r0
Alpine:v3.11nodejs10.14.0-r0
Alpine:v3.11openssl1.1.1a-r0
Alpine:v3.12nodejs10.14.0-r0
Alpine:v3.12openssl1.1.1a-r0
Alpine:v3.13nodejs10.14.0-r0
Alpine:v3.13openssl1.1.1a-r0
Alpine:v3.14nodejs10.14.0-r0
Alpine:v3.14openssl1.1.1a-r0
Alpine:v3.15nodejs10.14.0-r0
Alpine:v3.15openssl1.1.1a-r0
Alpine:v3.15openssl31.1.1a-r0
Alpine:v3.16nodejs10.14.0-r0
Alpine:v3.16openssl1.1.1a-r0
Alpine:v3.16openssl31.1.1a-r0
Alpine:v3.17nodejs10.14.0-r0
Alpine:v3.17openssl1.1.1a-r0
Alpine:v3.18nodejs10.14.0-r0
Alpine:v3.18openssl1.1.1a-r0
Alpine:v3.19nodejs10.14.0-r0
Alpine:v3.19openssl1.1.1a-r0
Alpine:v3.20nodejs10.14.0-r0
Alpine:v3.20openssl1.1.1a-r0
Alpine:v3.21nodejs10.14.0-r0
Alpine:v3.21openssl1.1.1a-r0
Alpine:v3.22nodejs10.14.0-r0
Alpine:v3.22openssl1.1.1a-r0
Alpine:v3.23nodejs10.14.0-r0
Alpine:v3.23openssl1.1.1a-r0
Alpine:v3.24nodejs10.14.0-r0
Alpine:v3.24openssl1.1.1a-r0
Alpine:v3.3openssl1.0.2q-r0
Alpine:v3.4openssl1.0.2q-r0
Alpine:v3.5openssl1.0.2q-r0
Alpine:v3.6openssl1.0.2q-r0
Alpine:v3.7openssl1.0.2q-r0
Alpine:v3.8openssl1.0.2q-r0
Alpine:v3.9nodejs10.14.0-r0
Alpine:v3.9openssl1.1.1a-r0
Debian:12openssl1.1.1a-1
Debian:13openssl1.1.1a-1
Debian:14openssl1.1.1a-1
Debian:9openssl1.1.0j-1~deb9u1
Debian:9openssl1.01.0.2q-1~deb9u1
Red Hat:enterprise_linux:7openssl1:1.0.2k-19.el7
Red Hat:enterprise_linux:7openssl-debuginfo1:1.0.2k-19.el7
Red Hat:enterprise_linux:7openssl-devel1:1.0.2k-19.el7
Red Hat:enterprise_linux:7openssl-libs1:1.0.2k-19.el7
Red Hat:enterprise_linux:7openssl-perl1:1.0.2k-19.el7
Red Hat:enterprise_linux:7openssl-static1:1.0.2k-19.el7
Red Hat:enterprise_linux:8openssl1:1.1.1c-2.el8
Red Hat:enterprise_linux:8openssl-debuginfo1:1.1.1c-2.el8
Red Hat:enterprise_linux:8openssl-debugsource1:1.1.1c-2.el8
Red Hat:enterprise_linux:8openssl-devel1:1.1.1c-2.el8
Red Hat:enterprise_linux:8openssl-libs1:1.1.1c-2.el8
Red Hat:enterprise_linux:8openssl-libs-debuginfo1:1.1.1c-2.el8
Red Hat:enterprise_linux:8openssl-perl1:1.1.1c-2.el8
Red Hat:jboss_core_services:1jbcs-httpd24-apr0:1.6.3-63.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr0:1.6.3-63.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-debuginfo0:1.6.3-63.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-debuginfo0:1.6.3-63.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-devel0:1.6.3-63.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-devel0:1.6.3-63.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-debuginfo0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-debuginfo0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-devel0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-devel0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-ldap0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-ldap0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-mysql0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-mysql0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-nss0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-nss0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-odbc0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-odbc0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-openssl0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-openssl0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-pgsql0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-pgsql0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-sqlite0:1.6.1-48.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-sqlite0:1.6.1-48.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-brotli0:1.0.6-7.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-brotli0:1.0.6-7.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-brotli-debuginfo0:1.0.6-7.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-brotli-debuginfo0:1.0.6-7.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-brotli-devel0:1.0.6-7.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-brotli-devel0:1.0.6-7.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:7.64.1-14.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:7.64.1-14.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:7.64.1-14.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:7.64.1-14.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-httpd0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-debuginfo0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-debuginfo0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-devel0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-devel0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-manual0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-manual0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-selinux0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-selinux0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-jansson0:2.11-20.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-jansson0:2.11-20.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-jansson-debuginfo0:2.11-20.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-jansson-debuginfo0:2.11-20.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-jansson-devel0:2.11-20.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-jansson-devel0:2.11-20.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:7.64.1-14.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:7.64.1-14.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:7.64.1-14.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:7.64.1-14.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native0:1.3.12-9.Final_redhat_2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native0:1.3.12-9.Final_redhat_2.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native-debuginfo0:1.3.12-9.Final_redhat_2.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native-debuginfo0:1.3.12-9.Final_redhat_2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk0:1.2.46-22.redhat_1.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk0:1.2.46-22.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap240:1.2.46-22.redhat_1.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap240:1.2.46-22.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-debuginfo0:1.2.46-22.redhat_1.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-debuginfo0:1.2.46-22.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-manual0:1.2.46-22.redhat_1.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-manual0:1.2.46-22.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_md0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_md0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html1:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html1:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security0:2.9.2-16.GA.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security0:2.9.2-16.GA.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security-debuginfo0:2.9.2-16.GA.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security-debuginfo0:2.9.2-16.GA.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session0:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session0:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl1:2.4.37-33.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl1:2.4.37-33.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp20:1.39.2-4.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp20:1.39.2-4.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-debuginfo0:1.39.2-4.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-debuginfo0:1.39.2-4.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-devel0:1.39.2-4.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-devel0:1.39.2-4.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1-25.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1-25.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1-25.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1-25.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1-25.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1-25.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1-25.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1-25.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1-25.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1-25.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1-25.jbcs.el6
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1-25.jbcs.el7
SUSE:Enterprise Storage 4nodejs44.9.1-15.17.1
SUSE:Enterprise Storage 4nodejs66.16.0-11.21.1
SUSE:Enterprise Storage 4openssl1.0.2j-60.46.1
SUSE:Linux Enterprise Desktop 12 SP3compat-openssl0980.9.8j-106.9.1
SUSE:Linux Enterprise Desktop 12 SP3openssl1.0.2j-60.46.1
SUSE:Linux Enterprise Desktop 12 SP4compat-openssl0980.9.8j-106.9.1
SUSE:Linux Enterprise Desktop 12 SP4openssl-1_0_01.0.2p-3.3.1
SUSE:Linux Enterprise Desktop 12 SP4openssl-1_11.1.1-2.3.1
SUSE:Linux Enterprise Module for Basesystem 15openssl-1_11.1.0i-4.15.1
SUSE:Linux Enterprise Module for Legacy 12compat-openssl0980.9.8j-106.9.1
SUSE:Linux Enterprise Module for Legacy 15openssl-1_0_01.0.2p-3.11.1
SUSE:Linux Enterprise Module for Web and Scripting 12nodejs44.9.1-15.17.1
SUSE:Linux Enterprise Module for Web and Scripting 12nodejs66.16.0-11.21.1
SUSE:Linux Enterprise Point of Sale 11 SP3openssl0.9.8j-0.106.18.1
SUSE:Linux Enterprise Server 11 SP3-LTSSopenssl0.9.8j-0.106.18.1
SUSE:Linux Enterprise Server 11 SP3-TERADATAopenssl0.9.8j-0.106.18.1
SUSE:Linux Enterprise Server 11 SP4openssl0.9.8j-0.106.18.1
SUSE:Linux Enterprise Server 11-SECURITYopenssl11.0.1g-0.58.15.1
SUSE:Linux Enterprise Server 12 SP1-LTSSopenssl1.0.1i-54.20.1
SUSE:Linux Enterprise Server 12 SP2-BCLopenssl1.0.2j-60.46.1
SUSE:Linux Enterprise Server 12 SP2-LTSSopenssl1.0.2j-60.46.1
SUSE:Linux Enterprise Server 12 SP3openssl1.0.2j-60.46.1
SUSE:Linux Enterprise Server 12 SP4openssl-1_0_01.0.2p-3.3.1
SUSE:Linux Enterprise Server 12 SP4openssl-1_11.1.1-2.3.1
SUSE:Linux Enterprise Server 12-LTSSopenssl1.0.1i-27.34.1
SUSE:Linux Enterprise Server for SAP Applications 11 SP4openssl0.9.8j-0.106.18.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1compat-openssl0980.9.8j-106.9.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1openssl1.0.1i-54.20.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP2compat-openssl0980.9.8j-106.9.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP2openssl1.0.2j-60.46.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP3compat-openssl0980.9.8j-106.9.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP3openssl1.0.2j-60.46.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4compat-openssl0980.9.8j-106.9.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4openssl-1_0_01.0.2p-3.3.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4openssl-1_11.1.1-2.3.1
SUSE:Linux Enterprise Software Development Kit 11 SP4openssl0.9.8j-0.106.18.1
SUSE:Linux Enterprise Software Development Kit 12 SP3openssl1.0.2j-60.46.1
SUSE:Linux Enterprise Software Development Kit 12 SP4openssl-1_0_01.0.2p-3.3.1
SUSE:Linux Enterprise Software Development Kit 12 SP4openssl-1_11.1.1-2.3.1
SUSE:OpenStack Cloud 7nodejs66.16.0-11.21.1
SUSE:OpenStack Cloud 7openssl1.0.2j-60.46.1
SUSE:OpenStack Cloud Crowbar 8nodejs66.16.0-11.21.1
SUSE:Studio Onsite 1.3openssl0.9.8j-0.106.18.1
Ubuntu:14.04:LTSopenssl1.0.1f-1ubuntu2.27
Ubuntu:16.04:LTSopenssl1.0.2g-1ubuntu4.14
Ubuntu:18.04:LTSopenssl1.1.0g-2ubuntu4.3
Ubuntu:18.04:LTSopenssl1.01.0.2n-1ubuntu5.2
openSUSE:Leap 15.0virtualbox6.0.10-lp151.2.6.1
openSUSE:Leap 15.0virtualbox5.2.24-lp150.4.33.1
openSUSE:Leap 15.1virtualbox6.0.10-lp151.2.6.1
openSUSE:Tumbleweedopenssl-1_0_01.0.2u-6.2
openSUSE:Tumbleweedopenssl-1_11.1.1l-1.2