The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Jul 20, 2018 | Apr 16, 2018 |
| Amazon Linux Ami 2 | — | Upgrade opensslUpgrade openssl-staticUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-debuginfo | Apr 27, 2020 | Apr 16, 2018 |
| Amazon_linux | — | Upgrade openssl | Apr 20, 2018 | Apr 16, 2018 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-staticUpgrade openssl-debuginfoUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl-devel | Jun 10, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Apr 16, 2018 |
| Freebsd | — | Upgrade opensslUpgrade openssl-devel | Apr 19, 2018 | Apr 16, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Nov 29, 2018 | Apr 16, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 17, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-libs | Sep 27, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl | Jul 3, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade opensslUpgrade openssl-libsUpgrade openssl-devel | Jan 9, 2019 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Jun 27, 2019 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Apr 16, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory27 | Jul 3, 2018 | Apr 16, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.16-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Apr 16, 2018 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-staticUpgrade openssl | Oct 13, 2018 | Apr 16, 2018 |
| Panos | — | Update PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your device | Oct 12, 2018 | Apr 16, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Apr 16, 2018 |
| Redhat_linux | — | Upgrade openssl-staticUpgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-libsUpgrade openssl-perlNo solution existsUpgrade openssl | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl1_1-hmacUpgrade libopenssl10Upgrade libopenssl-devel-32bitUpgrade libopenssl0_9_8-hmac-32bitUpgrade openssl1Upgrade openssl-1_1-docUpgrade libopenssl1_0_0-x86Upgrade libopenssl0_9_8-hmacUpgrade libopenssl-1_1-develUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl-1_1-devel-32bitUpgrade openssl-1_0_0-docUpgrade opensslUpgrade libopenssl1_0_0-steamUpgrade libopenssl1_1Upgrade libopenssl-1_0_0-develUpgrade libopenssl1_1-32bitUpgrade libopenssl1_0_0-32bitUpgrade libopenssl0_9_8Upgrade libopenssl0_9_8-32bitUpgrade libopenssl1_0_0-hmacUpgrade libopenssl0_9_8-x86Upgrade openssl-1_1Upgrade openssl1-docUpgrade libopenssl1_1-hmac-32bitUpgrade openssl-1_0_0Upgrade libopenssl1_0_0-steam-32bitUpgrade openssl-docUpgrade libopenssl1-develUpgrade libopenssl-develUpgrade libopenssl1_0_0Upgrade openssl-1_0_0-cavs | May 20, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl1.1 | Apr 26, 2018 | Apr 16, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub