The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-currentUpgrade openssl3Upgrade openssl1.1-compatUpgrade openssl | Aug 22, 2024 | Oct 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 29, 2018 |
| Centos_linux | — | Upgrade openssl-perlUpgrade openssl-develUpgrade openssl-debugsourceUpgrade openssl-libsUpgrade openssl-staticUpgrade openssl-libs-debuginfoUpgrade openssl-debuginfoUpgrade openssl | Nov 6, 2019 | Oct 29, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Oct 29, 2018 |
| Freebsd | — | Upgrade node10Upgrade openssl111Upgrade nodeUpgrade openssl-develUpgrade node8Upgrade node6Upgrade libresslUpgrade libressl-devel | Dec 10, 2018 | Dec 10, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Oct 29, 2018 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl110f-libsUpgrade openssl110fUpgrade openssl110f-devel | Jun 17, 2020 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl110hUpgrade openssl110h-staticUpgrade openssl110h-develUpgrade openssl110h-libs | Sep 24, 2019 | Oct 29, 2018 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Apr 28, 2020 | Oct 29, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.17-11.4.5.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.5.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade runtime/nodejs/nodejs-8 to version 8.17.0-11.4.21.0.1.69.0 on Solaris 11.4 | Feb 20, 2019 | Oct 29, 2018 |
| Oracle Virtualbox | — | Upgrade Oracle VirtualBox to the latest version | Jul 17, 2025 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade openssl-perlUpgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Oct 5, 2022 | Oct 25, 2018 |
| Redhat_linux | — | Upgrade opensslUpgrade openssl-staticUpgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade openssl-develNo solution existsUpgrade openssl-libs-debuginfoUpgrade openssl-libsUpgrade openssl-perl | Nov 6, 2019 | Oct 29, 2018 |
| Suse | — | Upgrade nodejs10-docsUpgrade openssl-1_1-docUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_1Upgrade npm10Upgrade nodejs10-develUpgrade libopenssl-1_1-devel-32bitUpgrade openssl-1_1Upgrade nodejs10Upgrade libopenssl1_1-32bitUpgrade libopenssl-1_1-develUpgrade libopenssl1_1-hmac | Nov 27, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl1.1 | Dec 21, 2018 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub