The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Jul 20, 2018 | Apr 16, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-perlUpgrade openssl-staticUpgrade openssl | Apr 27, 2020 | Apr 16, 2018 |
| Amazon_linux | — | Upgrade openssl | Apr 20, 2018 | Apr 16, 2018 |
| Centos_linux | — | Upgrade openssl-staticUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-develUpgrade openssl-perlUpgrade openssl-libs | Jun 10, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Apr 16, 2018 |
| Freebsd | — | Upgrade openssl-develUpgrade openssl | Apr 19, 2018 | Apr 16, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Nov 29, 2018 | Apr 16, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 17, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl | Sep 27, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-libs | Jul 3, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-libs | Jan 9, 2019 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Jun 27, 2019 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Apr 16, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory27 | Jul 3, 2018 | Apr 16, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.16-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Apr 16, 2018 |
| Oracle_linux | — | Upgrade openssl-staticUpgrade opensslUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-devel | Oct 13, 2018 | Apr 16, 2018 |
| Panos | — | Update PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your device | Oct 12, 2018 | Apr 16, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Apr 16, 2018 |
| Redhat_linux | — | Upgrade openssl-staticUpgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-develNo solution existsUpgrade openssl-perlUpgrade openssl | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl-1_0_0-devel-32bitUpgrade openssl-1_1-docUpgrade libopenssl0_9_8-hmacUpgrade libopenssl-devel-32bitUpgrade libopenssl10Upgrade libopenssl1_1-hmacUpgrade libopenssl1_0_0-x86Upgrade openssl1Upgrade libopenssl-1_1-develUpgrade libopenssl1_1-32bitUpgrade openssl-docUpgrade libopenssl0_9_8-32bitUpgrade openssl-1_0_0-docUpgrade libopenssl-develUpgrade libopenssl1-develUpgrade libopenssl1_0_0-hmacUpgrade libopenssl-1_0_0-develUpgrade openssl-1_0_0-cavsUpgrade libopenssl1_0_0Upgrade libopenssl1_0_0-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1_1Upgrade opensslUpgrade libopenssl0_9_8Upgrade openssl-1_0_0Upgrade libopenssl0_9_8-x86Upgrade libopenssl1_0_0-steam-32bitUpgrade openssl1-docUpgrade openssl-1_1Upgrade libopenssl1_0_0-steamUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl-1_1-devel-32bit | May 20, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl1.1 | Apr 26, 2018 | Apr 16, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub