Attacker Value
Unknown
CVE-2018-0734
CVE-2018-0734
(Last updated November 08, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
5.9 Medium
Impact Score:
3.6
Exploitability Score:
2.2
Attack Vector (AV):
Network
Attack Complexity (AC):
High
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
None
Availability (A):
None
General Information
Vendors
- canonical,
- debian,
- netapp,
- nodejs,
- openssl,
- oracle
Products
- api gateway 11.1.2.4.0,
- cloud backup -,
- cn1610 firmware -,
- debian linux 9.0,
- e-business suite technology stack 0.9.8,
- e-business suite technology stack 1.0.0,
- e-business suite technology stack 1.0.1,
- enterprise manager base platform 12.1.0.5.0,
- enterprise manager base platform 13.2.0.0.0,
- enterprise manager base platform 13.3.0.0.0,
- enterprise manager ops center 12.3.3,
- mysql enterprise backup,
- node.js,
- node.js 10.13.0,
- oncommand unified manager,
- openssl,
- openssl 1.1.1,
- peoplesoft enterprise peopletools 8.55,
- peoplesoft enterprise peopletools 8.56,
- peoplesoft enterprise peopletools 8.57,
- primavera p6 professional project management,
- primavera p6 professional project management 15.1,
- primavera p6 professional project management 15.2,
- primavera p6 professional project management 16.1,
- primavera p6 professional project management 16.2,
- primavera p6 professional project management 18.8,
- primavera p6 professional project management 8.4,
- santricity smi-s provider -,
- snapcenter -,
- steelstore -,
- storage automation store -,
- tuxedo 12.1.1.0.0,
- ubuntu linux 14.04,
- ubuntu linux 16.04,
- ubuntu linux 18.04,
- ubuntu linux 18.10
References
Advisory
https://git.openssl.org/gitweb?p=openssl.git;a=commitdiff;h=8abfe72e8c1de1b95f50aa0d9134803b4d00070f
https://git.openssl.org/gitweb?p=openssl.git;a=commitdiff;h=ef11e19d1365eea2b1851e6f540a0bf365d303e7
