The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-nodejsalpine-linux-upgrade-opensslalpine-linux-upgrade-nodejs-currentalpine-linux-upgrade-openssl3alpine-linux-upgrade-openssl1-1-compat | Aug 22, 2024 | Oct 30, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-opensslamazon-linux-ami-2-upgrade-openssl-debuginfoamazon-linux-ami-2-upgrade-openssl-develamazon-linux-ami-2-upgrade-openssl-libsamazon-linux-ami-2-upgrade-openssl-perlamazon-linux-ami-2-upgrade-openssl-static | Apr 27, 2020 | Oct 30, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-openssl | Apr 1, 2019 | Oct 29, 2018 |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Oct 30, 2018 |
| Centos_linux | — | centos-upgrade-opensslcentos-upgrade-openssl-debuginfocentos-upgrade-openssl-debugsourcecentos-upgrade-openssl-develcentos-upgrade-openssl-libscentos-upgrade-openssl-libs-debuginfocentos-upgrade-openssl-perlcentos-upgrade-openssl-static | Aug 28, 2019 | Oct 30, 2018 |
| Debian | debian-upgrade-openssl | Dec 2, 2018 | Oct 29, 2018 | |
| Freebsd | freebsd-upgrade-package-node6freebsd-upgrade-package-node8freebsd-upgrade-package-node10freebsd-upgrade-package-nodefreebsd-upgrade-package-openssl-develfreebsd-upgrade-package-openssl111freebsd-upgrade-package-libresslfreebsd-upgrade-package-libressl-devel | Dec 10, 2018 | Dec 10, 2018 | |
| Http Openssl | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | openssl-upgrade-latest | Oct 30, 2018 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openssl110fhuawei-euleros-2_0_sp2-upgrade-openssl110f-develhuawei-euleros-2_0_sp2-upgrade-openssl110f-libs | Jul 23, 2019 | Oct 30, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-opensslhuawei-euleros-2_0_sp3-upgrade-openssl-develhuawei-euleros-2_0_sp3-upgrade-openssl-libs | Sep 25, 2019 | Oct 30, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-openssl110hhuawei-euleros-2_0_sp5-upgrade-openssl110h-develhuawei-euleros-2_0_sp5-upgrade-openssl110h-libshuawei-euleros-2_0_sp5-upgrade-openssl110h-static | Jul 24, 2019 | Oct 30, 2018 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-opensslhuawei-euleros-2_0_sp8-upgrade-openssl-develhuawei-euleros-2_0_sp8-upgrade-openssl-libshuawei-euleros-2_0_sp8-upgrade-openssl-perl | Jun 27, 2019 | Oct 30, 2018 | |
| Ibm Aix | ibm-aix-openssl_advisory29 | Dec 12, 2018 | Oct 30, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-security-openssl-1-0-2-26-0-175-3-36-0-27-0oracle-solaris-11-3-upgrade-library-security-openssl-openssl-fips-140-2-0-15-0-175-3-36-0-27-0oracle-solaris-11-4-upgrade-database-mysql-56-5-6-43-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-56-client-5-6-43-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-56-library-5-6-43-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-56-tests-5-6-43-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-57-5-7-25-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-57-client-5-7-25-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-57-embedded-5-7-25-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-57-library-5-7-25-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-database-mysql-57-tests-5-7-25-11-4-8-0-1-1-0oracle-solaris-11-4-upgrade-library-security-openssl-1-0-2-17-11-4-5-0-1-1-0oracle-solaris-11-4-upgrade-library-security-openssl-openssl-fips-140-2-0-13-11-4-5-0-1-1-0oracle-solaris-11-4-upgrade-runtime-nodejs-nodejs-8-8-17-0-11-4-21-0-1-69-0 | Feb 20, 2019 | Oct 30, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-openssloracle-linux-upgrade-openssl-develoracle-linux-upgrade-openssl-libsoracle-linux-upgrade-openssl-perloracle-linux-upgrade-openssl-static | Jul 21, 2020 | Oct 16, 2018 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Oct 30, 2018 | |
| Redhat_linux | redhat-upgrade-opensslredhat-upgrade-openssl-debuginforedhat-upgrade-openssl-debugsourceredhat-upgrade-openssl-develredhat-upgrade-openssl-libsredhat-upgrade-openssl-libs-debuginforedhat-upgrade-openssl-perlredhat-upgrade-openssl-static | Aug 7, 2019 | Oct 30, 2018 | |
| Suse | — | suse-upgrade-libopenssl-1_0_0-develsuse-upgrade-libopenssl-1_0_0-devel-32bitsuse-upgrade-libopenssl-1_1-develsuse-upgrade-libopenssl-1_1-devel-32bitsuse-upgrade-libopenssl-develsuse-upgrade-libopenssl-devel-32bitsuse-upgrade-libopenssl0_9_8suse-upgrade-libopenssl0_9_8-32bitsuse-upgrade-libopenssl0_9_8-hmacsuse-upgrade-libopenssl0_9_8-hmac-32bitsuse-upgrade-libopenssl0_9_8-x86suse-upgrade-libopenssl1-develsuse-upgrade-libopenssl10suse-upgrade-libopenssl1_0_0suse-upgrade-libopenssl1_0_0-32bitsuse-upgrade-libopenssl1_0_0-hmacsuse-upgrade-libopenssl1_0_0-hmac-32bitsuse-upgrade-libopenssl1_0_0-steamsuse-upgrade-libopenssl1_0_0-steam-32bitsuse-upgrade-libopenssl1_0_0-x86suse-upgrade-libopenssl1_1suse-upgrade-libopenssl1_1-32bitsuse-upgrade-libopenssl1_1-hmacsuse-upgrade-libopenssl1_1-hmac-32bitsuse-upgrade-nodejs10suse-upgrade-nodejs10-develsuse-upgrade-nodejs10-docssuse-upgrade-nodejs4suse-upgrade-nodejs4-develsuse-upgrade-nodejs4-docssuse-upgrade-nodejs6suse-upgrade-nodejs6-develsuse-upgrade-nodejs6-docssuse-upgrade-npm10suse-upgrade-npm4suse-upgrade-npm6suse-upgrade-opensslsuse-upgrade-openssl-1_0_0suse-upgrade-openssl-1_0_0-cavssuse-upgrade-openssl-1_0_0-docsuse-upgrade-openssl-1_1suse-upgrade-openssl-1_1-docsuse-upgrade-openssl-docsuse-upgrade-openssl1suse-upgrade-openssl1-docsuse-upgrade-python3-virtualboxsuse-upgrade-virtualboxsuse-upgrade-virtualbox-develsuse-upgrade-virtualbox-guest-desktop-iconssuse-upgrade-virtualbox-guest-kmp-defaultsuse-upgrade-virtualbox-guest-sourcesuse-upgrade-virtualbox-guest-toolssuse-upgrade-virtualbox-guest-x11suse-upgrade-virtualbox-host-kmp-defaultsuse-upgrade-virtualbox-host-sourcesuse-upgrade-virtualbox-qtsuse-upgrade-virtualbox-vncsuse-upgrade-virtualbox-websrv | Nov 23, 2018 | Oct 29, 2018 |
| Ubuntu | ubuntu-upgrade-libssl1-0-0ubuntu-upgrade-libssl1-1 | Dec 21, 2018 | Oct 29, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub