The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl3Upgrade opensslUpgrade nodejsUpgrade openssl1.1-compatUpgrade nodejs-current | Aug 22, 2024 | Oct 30, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-staticUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-develUpgrade openssl-perlUpgrade openssl-libs | Apr 27, 2020 | Oct 30, 2018 |
| Amazon_linux | — | Upgrade openssl | Apr 1, 2019 | Oct 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 30, 2018 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-perlUpgrade openssl-staticUpgrade openssl-libs-debuginfoUpgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-debugsource | Aug 28, 2019 | Oct 30, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Oct 29, 2018 |
| Freebsd | — | Upgrade node8Upgrade node6Upgrade openssl-develUpgrade libressl-develUpgrade node10Upgrade nodeUpgrade libresslUpgrade openssl111 | Dec 10, 2018 | Dec 10, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Oct 30, 2018 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl110f-libsUpgrade openssl110fUpgrade openssl110f-devel | Jul 23, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-libsUpgrade openssl-devel | Sep 25, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl110h-develUpgrade openssl110hUpgrade openssl110h-staticUpgrade openssl110h-libs | Jul 24, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl | Jun 27, 2019 | Oct 30, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory29 | Dec 12, 2018 | Oct 30, 2018 |
| Oracle Solaris | — | Upgrade database/mysql-57/library to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.17-11.4.5.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56 to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade database/mysql-57/tests to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.25-11.4.8.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.5.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/tests to version 5.6.43-11.4.8.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3 | Feb 20, 2019 | Oct 30, 2018 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-develUpgrade opensslUpgrade openssl-staticUpgrade openssl-perl | Jul 21, 2020 | Oct 16, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Oct 16, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 30, 2018 |
| Redhat_linux | — | Upgrade openssl-perlUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-staticNo solution existsUpgrade openssl-libsUpgrade openssl-libs-debuginfoUpgrade openssl-develUpgrade openssl-debuginfo | Aug 7, 2019 | Oct 30, 2018 |
| Suse | — | Upgrade nodejs6-develUpgrade nodejs6-docsUpgrade libopenssl-1_0_0-develUpgrade virtualbox-websrvUpgrade nodejs6Upgrade virtualbox-guest-kmp-defaultUpgrade openssl-1_0_0Upgrade virtualbox-develUpgrade libopenssl1_1-hmacUpgrade nodejs4-develUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_1Upgrade openssl-1_1-docUpgrade virtualbox-vncUpgrade libopenssl1_0_0-32bitUpgrade virtualbox-guest-x11Upgrade libopenssl1_0_0-steam-32bitUpgrade opensslUpgrade nodejs10Upgrade openssl-docUpgrade openssl-1_1Upgrade libopenssl1_1-hmac-32bitUpgrade libopenssl0_9_8Upgrade virtualbox-host-kmp-defaultUpgrade python3-virtualboxUpgrade libopenssl1_0_0-steamUpgrade openssl1-docUpgrade openssl-1_0_0-cavsUpgrade libopenssl-1_0_0-devel-32bitUpgrade virtualbox-guest-sourceUpgrade npm4Upgrade libopenssl1_0_0-x86Upgrade virtualboxUpgrade npm6Upgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl0_9_8-x86Upgrade libopenssl1_0_0-hmacUpgrade libopenssl-develUpgrade nodejs10-docsUpgrade libopenssl10Upgrade virtualbox-qtUpgrade libopenssl0_9_8-hmacUpgrade libopenssl-devel-32bitUpgrade libopenssl1_1-32bitUpgrade libopenssl0_9_8-32bitUpgrade nodejs4-docsUpgrade libopenssl1-develUpgrade libopenssl-1_1-develUpgrade nodejs10-develUpgrade virtualbox-host-sourceUpgrade openssl-1_0_0-docUpgrade nodejs4Upgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl1_0_0Upgrade npm10Upgrade virtualbox-guest-toolsUpgrade virtualbox-guest-desktop-iconsUpgrade openssl1 | Nov 23, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0 | Dec 21, 2018 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub