Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-0734

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

  • Published: Oct 30, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-0734
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.9
  • AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
openssl / openssl 1.1.1 1.1.1.x
openssl / openssl 1.0.2 1.0.2p.x
openssl / openssl 1.1.0 1.1.0i.x
canonical / ubuntu_linux 16.04 16.04.x
canonical / ubuntu_linux 14.04 14.04.x
canonical / ubuntu_linux 18.04 18.04.x
canonical / ubuntu_linux 18.10 18.10.x
debian / debian_linux 9.0 9.0.x
nodejs / node.js 6.0.0 6.8.1.x
nodejs / node.js 8.0.0 8.8.1.x
nodejs / node.js 10.0.0 10.12.0.x
nodejs / node.js 6.9.0 6.15.0
nodejs / node.js 8.9.0 8.14.0
nodejs / node.js 10.13.0 10.13.0.x
nodejs / node.js 11.0.0 11.3.0
netapp / oncommand_unified_manager - -
oracle / api_gateway 11.1.2.4.0 11.1.2.4.0.x
oracle / peoplesoft_enterprise_peopletools 8.55 8.55.x
oracle / peoplesoft_enterprise_peopletools 8.56 8.56.x
oracle / enterprise_manager_ops_center 12.3.3 12.3.3.x
oracle / peoplesoft_enterprise_peopletools 8.57 8.57.x
oracle / mysql_enterprise_backup 3.0 3.12.3.x
oracle / mysql_enterprise_backup 4.0 4.1.2.x
oracle / primavera_p6_professional_project_management 15.2 15.2.x
oracle / enterprise_manager_base_platform 13.2.0.0.0 13.2.0.0.0.x
oracle / enterprise_manager_base_platform 12.1.0.5.0 12.1.0.5.0.x
oracle / primavera_p6_professional_project_management 18.8 18.8.x
oracle / tuxedo 12.1.1.0.0 12.1.1.0.0.x
oracle / primavera_p6_professional_project_management 16.2 16.2.x
oracle / e-business_suite_technology_stack 0.9.8 0.9.8.x
oracle / primavera_p6_professional_project_management 15.1 15.1.x
oracle / primavera_p6_professional_project_management 17.7 17.12.x
oracle / e-business_suite_technology_stack 1.0.1 1.0.1.x
oracle / primavera_p6_professional_project_management 16.1 16.1.x
oracle / e-business_suite_technology_stack 1.0.0 1.0.0.x
oracle / enterprise_manager_base_platform 13.3.0.0.0 13.3.0.0.0.x
oracle / primavera_p6_professional_project_management 8.4 8.4.x