The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Jul 20, 2018 | Apr 16, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-debuginfoUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-perlUpgrade openssl-staticUpgrade openssl | Apr 27, 2020 | Apr 16, 2018 |
| Amazon_linux | — | Upgrade openssl | Apr 20, 2018 | Apr 16, 2018 |
| Centos_linux | — | Upgrade openssl-staticUpgrade opensslUpgrade openssl-debuginfoUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-libs | Jun 10, 2019 | Apr 16, 2018 |
| Debian | — | Upgrade openssl | Dec 2, 2018 | Apr 16, 2018 |
| Freebsd | — | Upgrade opensslUpgrade openssl-devel | Apr 19, 2018 | Apr 16, 2018 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Nov 29, 2018 | Apr 16, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 17, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl | Sep 27, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl | Jul 3, 2018 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Jan 9, 2019 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Jun 27, 2019 | Apr 16, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Apr 16, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory27 | Jul 3, 2018 | Apr 16, 2018 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.13-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.16-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3 | Oct 19, 2018 | Apr 16, 2018 |
| Oracle_linux | — | Upgrade openssl-staticUpgrade opensslUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-devel | Oct 13, 2018 | Apr 16, 2018 |
| Panos | — | Update PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Oct 12, 2018 | Apr 16, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Apr 16, 2018 |
| Redhat_linux | — | No solution existsUpgrade openssl-perlUpgrade opensslUpgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-staticUpgrade openssl-libs | Oct 31, 2018 | Apr 16, 2018 |
| Suse | — | Upgrade libopenssl0_9_8-hmac-32bitUpgrade openssl-1_1-docUpgrade libopenssl1_0_0-x86Upgrade libopenssl-1_1-develUpgrade libopenssl0_9_8-hmacUpgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl-devel-32bitUpgrade libopenssl10Upgrade opensslUpgrade openssl-1_1Upgrade openssl1Upgrade libopenssl1_1-hmacUpgrade libopenssl1_0_0-hmacUpgrade libopenssl1_0_0Upgrade libopenssl1_0_0-32bitUpgrade libopenssl0_9_8Upgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_0_0-steamUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl0_9_8-32bitUpgrade libopenssl-1_0_0-develUpgrade libopenssl1-develUpgrade libopenssl-develUpgrade libopenssl1_1Upgrade openssl-1_0_0-docUpgrade libopenssl0_9_8-x86Upgrade libopenssl1_0_0-steam-32bitUpgrade openssl-1_0_0Upgrade openssl-docUpgrade libopenssl1_0_0-hmac-32bitUpgrade openssl-1_0_0-cavsUpgrade libopenssl1_1-32bitUpgrade openssl1-doc | May 20, 2018 | Apr 16, 2018 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0 | Apr 26, 2018 | Apr 16, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub