During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libresslUpgrade openssl | Jul 20, 2018 | Jun 12, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-libsUpgrade openssl-staticUpgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-perlUpgrade openssl | Apr 27, 2020 | Jun 12, 2018 |
| Amazon_linux | — | Upgrade openssl | Nov 2, 2018 | Jun 12, 2018 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-static | Jun 10, 2019 | Jun 12, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Jun 12, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 20, 2018 |
| Freebsd | — | Upgrade openssl-develUpgrade nodeUpgrade libressl-develUpgrade node6Upgrade node8Upgrade opensslUpgrade libressl | Aug 25, 2018 | Aug 25, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Nov 9, 2018 | Jun 12, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Jun 13, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-libs | Sep 27, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-libs | Jul 3, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-libs | Jan 9, 2019 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Jun 27, 2019 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Jun 12, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory28 | Sep 20, 2018 | Jun 12, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.16-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Jun 12, 2018 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl-staticUpgrade opensslUpgrade openssl-perl | Oct 13, 2018 | Jun 12, 2018 |
| Panos | — | Update PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Oct 12, 2018 | Jun 12, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Jun 12, 2018 |
| Redhat_linux | — | Upgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-libsNo solution existsUpgrade openssl-staticUpgrade opensslUpgrade openssl-perl | Oct 31, 2018 | Jun 12, 2018 |
| Suse | — | Upgrade python3-virtualboxUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libopenssl-1_1-develUpgrade npm8Upgrade firefox-gtk3-langUpgrade openssl-1_1-docUpgrade firefox-gdk-pixbuf-langUpgrade nodejs6-develUpgrade firefox-gtk3-immodule-inuktitutUpgrade libopenssl-1_0_0-devel-32bitUpgrade MozillaFirefoxUpgrade nodejs8-develUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade compat-openssl097g-32bitUpgrade firefox-libffi4Upgrade nodejs10-develUpgrade libfirefox-gthread-2_0-0Upgrade libopenssl1_1-32bitUpgrade firefox-glib2-langUpgrade libopenssl10Upgrade libopenssl1_0_0-32bitUpgrade libsoftokn3Upgrade npm6Upgrade firefox-gtk3-dataUpgrade virtualbox-guest-kmp-defaultUpgrade firefox-libatk-1_0-0Upgrade libopenssl1_0_0Upgrade virtualbox-guest-toolsUpgrade virtualbox-host-sourceUpgrade libopenssl0_9_8-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs4Upgrade libopenssl0_9_8Upgrade nodejs8Upgrade openssl-1_0_0-cavsUpgrade libfreebl3-32bitUpgrade opensslUpgrade virtualbox-guest-desktop-iconsUpgrade virtualbox-guest-x11Upgrade libsoftokn3-32bitUpgrade libopenssl-devel-32bitUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefox-translations-commonUpgrade npm10Upgrade firefox-gtk3-immodules-tigrignaUpgrade libopenssl-1_0_0-develUpgrade firefox-gtk3-immodule-multipressUpgrade nodejs10-docsUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl-develUpgrade nodejs8-docsUpgrade firefox-libharfbuzz0Upgrade mozilla-nsprUpgrade firefox-gtk3-immodule-amharicUpgrade libopenssl1_0_0-hmacUpgrade libopenssl0_9_8-hmacUpgrade libfirefox-gmodule-2_0-0Upgrade virtualbox-vncUpgrade openssl1Upgrade compat-openssl097gUpgrade libopenssl1-develUpgrade nodejs4-develUpgrade npm4Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-glib-2_0-0Upgrade openssl-1_0_0Upgrade nodejs10Upgrade libopenssl1_0_0-steam-32bitUpgrade firefox-glib2-toolsUpgrade firefox-atk-langUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-32bitUpgrade firefox-libpango-1_0-0Upgrade openssl1-docUpgrade mozilla-nspr-32bitUpgrade nodejs6-docsUpgrade mozilla-nss-develUpgrade libopenssl1_0_0-x86Upgrade libfreebl3Upgrade libopenssl1_0_0-steamUpgrade libfirefox-gobject-2_0-0Upgrade nodejs4-docsUpgrade MozillaFirefox-branding-SLEDUpgrade libopenssl0_9_8-x86Upgrade firefox-libcairo-gobject2Upgrade virtualbox-host-kmp-defaultUpgrade openssl-1_1Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-certsUpgrade mozilla-nss-certs-32bitUpgrade virtualbox-guest-sourceUpgrade openssl-docUpgrade virtualbox-websrvUpgrade firefox-libffi7Upgrade libfirefox-gio-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade firefox-libgtk-3-0Upgrade libopenssl0_9_8-hmac-32bitUpgrade firefox-gtk3-toolsUpgrade firefox-libcairo2Upgrade virtualbox-qtUpgrade openssl-1_0_0-docUpgrade nodejs6Upgrade libopenssl1_1-hmacUpgrade firefox-gtk3-branding-upstreamUpgrade virtualboxUpgrade virtualbox-develUpgrade libopenssl1_1Upgrade mozilla-nss | Jul 7, 2018 | Jun 12, 2018 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0 | Jun 27, 2018 | Jun 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub