Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Jul 20, 2018 | Mar 27, 2018 |
| Amazon Linux Ami 2 | — | Upgrade openssl-debuginfoUpgrade openssl-perlUpgrade opensslUpgrade openssl-libsUpgrade openssl-staticUpgrade openssl-devel | Apr 27, 2020 | Mar 27, 2018 |
| Amazon_linux | — | Upgrade opensslUpgrade mysql57Upgrade mysql56 | Aug 24, 2018 | Mar 27, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 27, 2018 |
| Centos_linux | — | Upgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-staticUpgrade opensslUpgrade openssl-libsUpgrade OVMFUpgrade openssl-perl | Jun 10, 2019 | Mar 27, 2018 |
| Debian | — | Upgrade libtomcryptUpgrade openssl | Mar 31, 2018 | Mar 27, 2018 |
| F5 Big Ip | — | — | Apr 19, 2018 | Mar 27, 2018 |
| Freebsd | — | Upgrade percona57-serverUpgrade mysql56-serverUpgrade mysql80-serverUpgrade mariadb55-serverUpgrade percona56-serverUpgrade mysql57-serverUpgrade mariadb103-serverUpgrade opensslUpgrade mariadb102-serverUpgrade openssl-develUpgrade percona55-serverUpgrade mysql55-serverUpgrade mariadb101-serverUpgrade mariadb100-server | Aug 8, 2018 | Aug 8, 2018 |
| Gentoo Linux | — | Upgrade net-misc/dropbear.Upgrade dev-libs/openssl. | Nov 29, 2018 | Mar 27, 2018 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 28, 2018 | Mar 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl | Jan 9, 2019 | Mar 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl | Dec 11, 2018 | Mar 27, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-libs | Jan 9, 2019 | Mar 27, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Mar 27, 2018 |
| Huawei Vrp | — | Contact Huawei TAC to request the upgrades | Apr 2, 2026 | Jun 13, 2018 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory26 | May 1, 2018 | Mar 27, 2018 |
| Oracle Solaris | — | Upgrade library/perl-5/xml-simple-522 to version 2.24-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.42-11.4.5.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24 to version 2.4.34-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/speech/espeak to version 1.44.0.5-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/tests to version 5.6.42-11.4.5.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/dbd-mysql-522 to version 4042-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-namespacesupport to version 1.11-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade diagnostic/wireshark/tshark to version 2.6.3-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/perl-5/dbd-sqlite to version 1.58-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-ssl to version 2.4.34-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-simple-526 to version 2.24-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/perl-tk to version 804.33-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay-526 to version 1.80-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-sax-526 to version 0.99-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.18.6-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/liblouis to version 3.5.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-libxml-526 to version 2.128-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-dbd to version 2.4.34-11.4.1.0.1.1.0 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 2.6.3-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/perl-5/authen-pam to version 5.8.4-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56 to version 5.6.42-11.4.5.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.23-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/perl-tk-526 to version 804.33-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/net-ssleay to version 1.80-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-lua to version 2.4.34-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-34 to version 2.18.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade diagnostic/wireshark to version 2.6.3-11.4.1.0.1.2.0 on Solaris 11.4Upgrade database/mysql-55/library to version 5.5.62-11.4.5.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/authen-pam-526 to version 0.16-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/net-ssleay-522 to version 1.80-11.4.1.0.1.1.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 52.9.1-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/perl-x11-protocol-526 to version 0.56-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/perl-x11-protocol to version 0.56-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/desktop/speech-dispatcher to version 0.8.6-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/gettext to version 1.0.7-11.4.1.0.1.1.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.24.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-ssl-fips-140 to version 2.4.34-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-parser to version 5.12.1-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-35 to version 2.18.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/pmtools to version 2.0.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/dbd-sqlite-526 to version 1.58-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-parser-522 to version 2.44-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-sax-base-522 to version 1.8-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-55/tests to version 5.5.62-11.4.5.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/CGI-522 to version 4.37-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.24.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.23-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.23-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/sqlite-3 to version 3.24.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade terminal/cssh-526 to version 4.9-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.42-11.4.5.0.1.1.0 on Solaris 11.4Upgrade web/java-servlet/tomcat-8 to version 8.5.32-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.15-0.175.3.32.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml-522 to version 2.128-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-namespacesupport-522 to version 1.11-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/gettext-526 to version 1.0.7-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/perl-tk-522 to version 804.33-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-parser-526 to version 2.44-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/dbd-mysql-526 to version 4042-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-gss to version 2.4.34-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/gettext-522 to version 1.0.7-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/perl-x11-protocol-522 to version 0.56-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/CGI to version 4.37-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/dbd-mysql to version 4042-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/curl to version 7.61.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/pmtools-526 to version 2.0.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade system/display-manager/desktop-startup to version 0.38.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-57/library to version 5.7.23-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/authen-pam-522 to version 0.16-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/database-522 to version 1.636-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/database to version 1.636-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-ldap to version 2.4.34-11.4.1.0.1.1.0 on Solaris 11.4Upgrade image/library/libjpeg to version 6.0.2-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-sax-base-526 to version 1.8-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/java-servlet/tomcat-8/tomcat-examples to version 8.5.32-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/pmtools-522 to version 2.0.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/CGI-526 to version 4.37-11.4.1.0.1.1.0 on Solaris 11.4Upgrade terminal/cssh-522 to version 4.9-11.4.1.0.1.1.0 on Solaris 11.4Upgrade mail/mailman to version 2.1.29.1-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.23-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-simple to version 2.24-11.4.1.0.1.1.0 on Solaris 11.4Upgrade web/java-servlet/tomcat-8/tomcat-admin to version 8.5.32-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/dbd-sqlite-522 to version 1.58-11.4.1.0.1.1.0 on Solaris 11.4Upgrade terminal/cssh to version 4.9-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/database-526 to version 1.636-11.4.1.0.1.1.0 on Solaris 11.4Upgrade mail/thunderbird to version 52.9.1-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-55 to version 5.5.62-11.4.5.0.1.1.0 on Solaris 11.4Upgrade system/display-manager/gdm to version 3.24.2-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-namespacesupport-526 to version 1.11-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-sax to version 0.99-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/desktop/dotconf to version 1.3-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-sax-522 to version 0.99-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-sax-base to version 1.8-11.4.1.0.1.1.0 on Solaris 11.4Upgrade database/mysql-55/client to version 5.5.62-11.4.5.0.1.1.0 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade library/python/pyatspi2-27 to version 2.18.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.12-0.175.3.32.0.1.0 on Solaris 11.3Upgrade library/python/pyatspi2 to version 2.18.0-11.4.1.0.1.1.0 on Solaris 11.4Upgrade library/perl-5/xml-libxml to version 2.128-11.4.1.0.1.1.0 on Solaris 11.4 | May 16, 2018 | Mar 27, 2018 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade OVMFUpgrade opensslUpgrade openssl-perlUpgrade openssl-staticUpgrade openssl-devel | Sep 27, 2018 | Mar 27, 2018 |
| Panos | — | Update PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your device | Oct 12, 2018 | Mar 27, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Mar 27, 2018 |
| Redhat_linux | — | Upgrade openssl-staticUpgrade openssl-debuginfoUpgrade OVMFUpgrade openssl-develUpgrade opensslUpgrade openssl-perlUpgrade openssl-libsNo solution exists | Oct 31, 2018 | Mar 27, 2018 |
| Suse | — | Upgrade compat-openssl097gUpgrade openssl-1_0_0Upgrade opensslUpgrade libopenssl-1_1-devel-32bitUpgrade qemu-ovmf-ia32Upgrade openssl1-docUpgrade libopenssl-devel-32bitUpgrade virtualbox-guest-x11Upgrade libopenssl1_0_0Upgrade libopenssl0_9_8-hmacUpgrade libopenssl1_1Upgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_0_0-hmacUpgrade openssl-1_1Upgrade compat-openssl097g-32bitUpgrade virtualbox-guest-toolsUpgrade openssl-docUpgrade libopenssl-1_1-develUpgrade libopenssl0_9_8-x86Upgrade ovmf-toolsUpgrade openssl1Upgrade qemu-uefi-aarch64Upgrade openssl-1_0_0-docUpgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl0_9_8Upgrade qemu-ovmf-x86_64-debugUpgrade ovmfUpgrade libopenssl-develUpgrade libopenssl1_0_0-32bitUpgrade qemu-ovmf-x86_64Upgrade libopenssl1_1-hmacUpgrade libopenssl1-develUpgrade libopenssl1_0_0-x86Upgrade libopenssl0_9_8-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl-1_0_0-develUpgrade virtualbox-guest-kmp-defaultUpgrade libopenssl1_1-32bit | Apr 11, 2018 | Mar 27, 2018 |
| Ubuntu | — | Upgrade opensslUpgrade libssl1.0.0 | Apr 25, 2018 | Mar 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub