The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade opensslUpgrade openssl1.1-compatUpgrade openssl3Upgrade nodejsUpgrade nodejs-current | Aug 22, 2024 | Oct 30, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl-perlUpgrade opensslUpgrade openssl-debuginfoUpgrade openssl-static | Apr 27, 2020 | Oct 30, 2018 |
| Amazon_linux | — | Upgrade openssl | Apr 1, 2019 | Oct 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 30, 2018 |
| Centos_linux | — | Upgrade openssl-staticUpgrade openssl-libs-debuginfoUpgrade opensslUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-debugsource | Aug 28, 2019 | Oct 30, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Oct 29, 2018 |
| Freebsd | — | Upgrade nodeUpgrade openssl111Upgrade libressl-develUpgrade libresslUpgrade node10Upgrade node6Upgrade node8Upgrade openssl-devel | Dec 10, 2018 | Dec 10, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Oct 30, 2018 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl110f-libsUpgrade openssl110f-develUpgrade openssl110f | Jul 23, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-libsUpgrade openssl-devel | Sep 25, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl110h-libsUpgrade openssl110hUpgrade openssl110h-staticUpgrade openssl110h-devel | Jul 24, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl | Jun 27, 2019 | Oct 30, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory29 | Dec 12, 2018 | Oct 30, 2018 |
| Oracle Solaris | — | Upgrade database/mysql-57/embedded to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.17-11.4.5.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/tests to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade database/mysql-57/tests to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56 to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.5.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4 | Feb 20, 2019 | Oct 30, 2018 |
| Oracle_linux | — | Upgrade openssl-develUpgrade openssl-libsUpgrade opensslUpgrade openssl-perlUpgrade openssl-static | Jul 21, 2020 | Oct 16, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Oct 16, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 30, 2018 |
| Redhat_linux | — | Upgrade openssl-develUpgrade openssl-libs-debuginfoUpgrade openssl-libsUpgrade openssl-debuginfoNo solution existsUpgrade openssl-debugsourceUpgrade openssl-perlUpgrade opensslUpgrade openssl-static | Aug 7, 2019 | Oct 30, 2018 |
| Suse | — | Upgrade libopenssl0_9_8Upgrade virtualbox-vncUpgrade openssl-1_0_0Upgrade virtualbox-guest-sourceUpgrade nodejs6-develUpgrade virtualbox-host-kmp-defaultUpgrade python3-virtualboxUpgrade libopenssl-1_0_0-develUpgrade opensslUpgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_0_0-steamUpgrade npm4Upgrade nodejs6-docsUpgrade openssl-1_1Upgrade libopenssl-1_1-devel-32bitUpgrade virtualbox-guest-x11Upgrade libopenssl1_1-hmacUpgrade openssl-1_1-docUpgrade virtualbox-develUpgrade openssl-docUpgrade nodejs10Upgrade libopenssl1_0_0-32bitUpgrade virtualbox-websrvUpgrade libopenssl1_0_0-steam-32bitUpgrade openssl1-docUpgrade libopenssl1_1Upgrade nodejs4-develUpgrade nodejs6Upgrade openssl-1_0_0-cavsUpgrade virtualbox-guest-kmp-defaultUpgrade nodejs4Upgrade libopenssl1_0_0Upgrade libopenssl0_9_8-hmac-32bitUpgrade virtualbox-guest-desktop-iconsUpgrade libopenssl1_0_0-x86Upgrade npm10Upgrade libopenssl1_0_0-hmac-32bitUpgrade virtualboxUpgrade openssl-1_0_0-docUpgrade virtualbox-host-sourceUpgrade virtualbox-guest-toolsUpgrade virtualbox-qtUpgrade libopenssl0_9_8-hmacUpgrade openssl1Upgrade libopenssl0_9_8-x86Upgrade libopenssl0_9_8-32bitUpgrade nodejs4-docsUpgrade libopenssl1-develUpgrade libopenssl-1_1-develUpgrade libopenssl-devel-32bitUpgrade libopenssl1_1-32bitUpgrade nodejs10-develUpgrade libopenssl-develUpgrade nodejs10-docsUpgrade libopenssl1_0_0-hmacUpgrade npm6Upgrade libopenssl10 | Nov 23, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0 | Dec 21, 2018 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub