Orta CVSS 5.9
CVE-2018-0737: Openssl: güvenlik açığı
Açıklama (NVD)
The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
Özet bilgiler
- Ürün
- Openssl Openssl
- CVSS v3.1
- 5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %11,60 (yüzdelik 96)
- CWE
- CWE-327
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| openssl-openssl | 1.0.2b | 1.0.2o | — |
| openssl-openssl | 1.1.0 | 1.1.0h | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 17.10 | 17.10 | — |
Kaynaklar
- NVD kaydı
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- git.openssl.org
- git.openssl.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- nodejs.org
- security.gentoo.org
- security.netapp.com
- securityadvisories.paloaltonetworks.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- www.debian.org
- www.debian.org
- CWE-327