CVE-2018-0735Medium· 5.9▾ SunlitThe OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i).…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.9 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
4.7%
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
openssl >= 1.1.0, <= 1.1.0iopenssl = 1.1.1ubuntu_linux = 14.04ubuntu_linux = 16.04ubuntu_linux = 18.04ubuntu_linux = 18.10debian_linux = 8.0debian_linux = 9.0node.js >= 10.0.0, < 10.12.0node.js >= 11.0.0, < 11.3.0node.js = 10.13.0cn1610_firmwarecloud_backupelement_softwareoncommand_unified_manageroncommand_unified_manager >= 9.4santricity_smi-s_providersmi-s_providersnapdrivesteelstoreapi_gateway = 11.1.2.4.0application_server = 0.9.8application_server = 1.0.0application_server = 1.0.1enterprise_manager_base_platform = 12.1.0.5.0enterprise_manager_base_platform = 13.2.0.0.0enterprise_manager_base_platform = 13.3.0.0.0enterprise_manager_ops_center = 12.3.3mysql <= 5.6.42mysql >= 5.7.0, <= 5.7.24mysql >= 8.0.0, <= 8.0.13peoplesoft_enterprise_peopletools = 8.55peoplesoft_enterprise_peopletools = 8.56peoplesoft_enterprise_peopletools = 8.57primavera_p6_enterprise_project_portfolio_management >= 17.7, <= 17.12primavera_p6_enterprise_project_portfolio_management = 8.4primavera_p6_enterprise_project_portfolio_management = 15.1primavera_p6_enterprise_project_portfolio_management = 15.2primavera_p6_enterprise_project_portfolio_management = 16.1primavera_p6_enterprise_project_portfolio_management = 16.2primavera_p6_enterprise_project_portfolio_management = 18.8secure_global_desktop = 5.4tuxedo = 12.1.1.0.0vm_virtualbox < 6.0.0vm_virtualbox >= 5.0.0, < 5.2.24Upgrade past the affected range:
node.js 11.3.0vm_virtualbox 5.2.24Connected by shared product, vendor, weakness, or advisory.
CVE-2018-0737Medium· 5.9The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack
CVE-2018-0734Medium· 5.9The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack
CVE-2019-1563Low· 3.7In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption …
CVE-2018-0732High· 7.5During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client
CVE-2022-2097Medium· 5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances
CVE-2022-1434Medium· 5.9The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key