During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libresslUpgrade openssl | Jul 20, 2018 | Jun 12, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-staticUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-perlUpgrade opensslUpgrade openssl-debuginfo | Apr 27, 2020 | Jun 12, 2018 |
| Amazon_linux | — | Upgrade openssl | Nov 2, 2018 | Jun 12, 2018 |
| Centos_linux | — | Upgrade openssl-debuginfoUpgrade openssl-staticUpgrade openssl-develUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl | Jun 10, 2019 | Jun 12, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Jun 12, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 20, 2018 |
| Freebsd | — | Upgrade openssl-develUpgrade nodeUpgrade libressl-develUpgrade libresslUpgrade node6Upgrade node8Upgrade openssl | Aug 25, 2018 | Aug 25, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Nov 9, 2018 | Jun 12, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Jun 13, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Sep 27, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-libs | Jul 3, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Jan 9, 2019 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Jun 27, 2019 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Jun 12, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory28 | Sep 20, 2018 | Jun 12, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.16-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Jun 12, 2018 |
| Oracle_linux | — | Upgrade openssl-staticUpgrade opensslUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-devel | Oct 13, 2018 | Jun 12, 2018 |
| Panos | — | Update PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your device | Oct 12, 2018 | Jun 12, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Jun 12, 2018 |
| Redhat_linux | — | Upgrade openssl-develUpgrade openssl-debuginfoNo solution existsUpgrade openssl-libsUpgrade openssl-staticUpgrade opensslUpgrade openssl-perl | Oct 31, 2018 | Jun 12, 2018 |
| Suse | — | Upgrade openssl1-docUpgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libgtk-3-0Upgrade nodejs6-docsUpgrade firefox-libpango-1_0-0Upgrade virtualbox-qtUpgrade libopenssl0_9_8-hmac-32bitUpgrade firefox-libcairo2Upgrade openssl1Upgrade virtualboxUpgrade openssl-1_1Upgrade libopenssl0_9_8-x86Upgrade openssl-1_0_0-docUpgrade firefox-gtk3-branding-upstreamUpgrade virtualbox-host-kmp-defaultUpgrade mozillafirefox-branding-sledUpgrade nodejs6Upgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-develUpgrade firefox-gtk3-toolsUpgrade libopenssl1_1-hmacUpgrade firefox-gtk3-immodule-ximUpgrade virtualbox-vncUpgrade npm4Upgrade nodejs4-docsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gmodule-2_0-0Upgrade nodejs4-develUpgrade firefox-atk-langUpgrade mozillafirefoxUpgrade nodejs10Upgrade mozillafirefox-translations-commonUpgrade openssl-1_0_0Upgrade libopenssl1_1Upgrade libfirefox-glib-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-glib2-toolsUpgrade virtualbox-websrvUpgrade mozilla-nss-certsUpgrade compat-openssl097gUpgrade firefox-libffi7Upgrade mozilla-nss-32bitUpgrade libopenssl1_0_0-steam-32bitUpgrade libopenssl1-develUpgrade libopenssl1_0_0-x86Upgrade libopenssl1_0_0-steamUpgrade mozilla-nssUpgrade mozilla-nss-certs-32bitUpgrade virtualbox-guest-sourceUpgrade firefox-libcairo-gobject2Upgrade virtualbox-develUpgrade openssl-docUpgrade virtualbox-guest-toolsUpgrade mozillafirefox-translations-otherUpgrade libsoftokn3-32bitUpgrade virtualbox-guest-kmp-defaultUpgrade libopenssl1_1-32bitUpgrade firefox-libatk-1_0-0Upgrade npm8Upgrade firefox-gtk3-langUpgrade openssl-1_1-docUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-amharicUpgrade libopenssl1_0_0-hmacUpgrade virtualbox-guest-desktop-iconsUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade virtualbox-host-sourceUpgrade nodejs8-docsUpgrade mozilla-nsprUpgrade libopenssl1_1-hmac-32bitUpgrade firefox-gtk3-immodule-multipressUpgrade opensslUpgrade firefox-gtk3-immodule-vietnameseUpgrade npm10Upgrade mozilla-nspr-develUpgrade mozilla-nss-toolsUpgrade python3-virtualboxUpgrade firefox-gtk3-immodule-inuktitutUpgrade libopenssl1_0_0-hmac-32bitUpgrade nodejs6-develUpgrade nodejs10-develUpgrade libopenssl-develUpgrade compat-openssl097g-32bitUpgrade nodejs10-docsUpgrade libfirefox-gthread-2_0-0Upgrade libopenssl-1_1-devel-32bitUpgrade libopenssl0_9_8-32bitUpgrade libopenssl-1_0_0-devel-32bitUpgrade nodejs8Upgrade nodejs8-develUpgrade libopenssl1_0_0Upgrade libopenssl-1_1-develUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libopenssl-devel-32bitUpgrade npm6Upgrade virtualbox-guest-x11Upgrade libopenssl0_9_8-hmacUpgrade libopenssl-1_0_0-develUpgrade libfreebl3-32bitUpgrade openssl-1_0_0-cavsUpgrade nodejs4Upgrade libopenssl0_9_8Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade libsoftokn3Upgrade libopenssl10Upgrade libopenssl1_0_0-32bitUpgrade firefox-libffi4Upgrade firefox-gtk3-dataUpgrade firefox-glib2-lang | Jul 7, 2018 | Jun 12, 2018 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0 | Jun 27, 2018 | Jun 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub