During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade opensslUpgrade libressl | Jul 20, 2018 | Jun 12, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl-staticUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-perl | Apr 27, 2020 | Jun 12, 2018 |
| Amazon_linux | — | Upgrade openssl | Nov 2, 2018 | Jun 12, 2018 |
| Centos_linux | — | Upgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-staticUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl | Jun 10, 2019 | Jun 12, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Jun 12, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 20, 2018 |
| Freebsd | — | Upgrade node6Upgrade opensslUpgrade libresslUpgrade node8Upgrade libressl-develUpgrade nodeUpgrade openssl-devel | Aug 25, 2018 | Aug 25, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Nov 9, 2018 | Jun 12, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Jun 13, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Sep 27, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl | Jul 3, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Jan 9, 2019 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Jun 27, 2019 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Jun 12, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory28 | Sep 20, 2018 | Jun 12, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.16-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3 | Oct 19, 2018 | Jun 12, 2018 |
| Oracle_linux | — | Upgrade openssl-staticUpgrade opensslUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-libs | Oct 13, 2018 | Jun 12, 2018 |
| Panos | — | Update PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your device | Oct 12, 2018 | Jun 12, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Jun 12, 2018 |
| Redhat_linux | — | Upgrade openssl-libsNo solution existsUpgrade openssl-develUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-staticUpgrade openssl-perl | Oct 31, 2018 | Jun 12, 2018 |
| Suse | — | Upgrade nodejs6Upgrade mozilla-nss-certsUpgrade firefox-glib2-toolsUpgrade nodejs10Upgrade compat-openssl097gUpgrade libfirefox-glib-2_0-0Upgrade libopenssl1_1Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gio-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade libopenssl1_0_0-steam-32bitUpgrade firefox-gtk3-immodule-ximUpgrade openssl-1_0_0Upgrade virtualbox-develUpgrade nodejs4-docsUpgrade libfirefox-gmodule-2_0-0Upgrade virtualbox-websrvUpgrade libfirefox-gio-2_0-0Upgrade openssl1Upgrade virtualbox-host-kmp-defaultUpgrade virtualboxUpgrade firefox-gtk3-toolsUpgrade firefox-libgtk-3-0Upgrade libopenssl0_9_8-hmac-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-develUpgrade firefox-libpango-1_0-0Upgrade virtualbox-vncUpgrade mozilla-nss-certs-32bitUpgrade libopenssl1-develUpgrade mozilla-nssUpgrade nodejs4-develUpgrade libfreebl3Upgrade openssl-docUpgrade libfirefox-gobject-2_0-0Upgrade nodejs6-docsUpgrade openssl1-docUpgrade mozilla-nspr-32bitUpgrade firefox-atk-langUpgrade openssl-1_1Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-libcairo2Upgrade openssl-1_0_0-docUpgrade virtualbox-qtUpgrade libopenssl1_1-hmacUpgrade npm4Upgrade firefox-libcairo-gobject2Upgrade libopenssl0_9_8-x86Upgrade libopenssl1_0_0-x86Upgrade libopenssl1_0_0-steamUpgrade virtualbox-guest-sourceUpgrade firefox-libffi7Upgrade mozilla-nss-32bitUpgrade virtualbox-guest-x11Upgrade libsoftokn3-32bitUpgrade nodejs4Upgrade libopenssl0_9_8Upgrade libopenssl0_9_8-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libopenssl-1_0_0-develUpgrade libopenssl0_9_8-hmacUpgrade libopenssl-devel-32bitUpgrade firefox-libffi4Upgrade npm8Upgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-amharicUpgrade libsoftokn3Upgrade MozillaFirefoxUpgrade firefox-glib2-langUpgrade libopenssl1_0_0-hmacUpgrade virtualbox-guest-kmp-defaultUpgrade libopenssl1_0_0-32bitUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-toolsUpgrade firefox-libharfbuzz0Upgrade libopenssl1_0_0-hmac-32bitUpgrade firefox-gtk3-immodule-multipressUpgrade libopenssl-1_1-develUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade virtualbox-guest-desktop-iconsUpgrade python3-virtualboxUpgrade virtualbox-guest-toolsUpgrade libopenssl1_1-hmac-32bitUpgrade virtualbox-host-sourceUpgrade nodejs8-docsUpgrade mozilla-nsprUpgrade firefox-gtk3-immodules-tigrignaUpgrade libopenssl1_0_0Upgrade libopenssl1_1-32bitUpgrade MozillaFirefox-translations-commonUpgrade npm10Upgrade mozilla-nspr-develUpgrade openssl-1_1-docUpgrade libopenssl-1_0_0-devel-32bitUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-langUpgrade nodejs10-develUpgrade compat-openssl097g-32bitUpgrade libopenssl10Upgrade libfirefox-gthread-2_0-0Upgrade nodejs6-develUpgrade nodejs10-docsUpgrade libopenssl-1_1-devel-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade libopenssl-develUpgrade opensslUpgrade openssl-1_0_0-cavsUpgrade nodejs8-develUpgrade npm6Upgrade nodejs8Upgrade libfreebl3-32bit | Jul 7, 2018 | Jun 12, 2018 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl1.1 | Jun 27, 2018 | Jun 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub