Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-0735

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

  • Published: Oct 29, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-0735
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.9
  • AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
openssl / openssl 1.1.1 1.1.1.x
openssl / openssl 1.1.0 1.1.0i.x
canonical / ubuntu_linux 16.04 16.04.x
canonical / ubuntu_linux 14.04 14.04.x
canonical / ubuntu_linux 18.04 18.04.x
canonical / ubuntu_linux 18.10 18.10.x
debian / debian_linux 8.0 8.0.x
debian / debian_linux 9.0 9.0.x
nodejs / node.js 10.13.0 10.13.0.x
nodejs / node.js 11.0.0 11.3.0
nodejs / node.js 10.0.0 10.12.0
netapp / oncommand_unified_manager - -
netapp / oncommand_unified_manager 9.4 9.4.x
oracle / primavera_p6_enterprise_project_portfolio_management 16.2 16.2.x
oracle / api_gateway 11.1.2.4.0 11.1.2.4.0.x
oracle / primavera_p6_enterprise_project_portfolio_management 15.1 15.1.x
oracle / primavera_p6_enterprise_project_portfolio_management 16.1 16.1.x
oracle / primavera_p6_enterprise_project_portfolio_management 15.2 15.2.x
oracle / peoplesoft_enterprise_peopletools 8.55 8.55.x
oracle / primavera_p6_enterprise_project_portfolio_management 8.4 8.4.x
oracle / peoplesoft_enterprise_peopletools 8.56 8.56.x
oracle / enterprise_manager_ops_center 12.3.3 12.3.3.x
oracle / peoplesoft_enterprise_peopletools 8.57 8.57.x
oracle / primavera_p6_enterprise_project_portfolio_management 17.7 17.12.x
oracle / primavera_p6_enterprise_project_portfolio_management 18.8 18.8.x
oracle / mysql 5.7.0 5.7.24.x
oracle / mysql 8.0.0 8.0.13.x
oracle / secure_global_desktop 5.4 5.4.x
oracle / vm_virtualbox - 6.0.0
oracle / enterprise_manager_base_platform 13.2.0.0.0 13.2.0.0.0.x
oracle / enterprise_manager_base_platform 12.1.0.5.0 12.1.0.5.0.x
oracle / tuxedo 12.1.1.0.0 12.1.1.0.0.x
oracle / enterprise_manager_base_platform 13.3.0.0.0 13.3.0.0.0.x
oracle / application_server 0.9.8 0.9.8.x
oracle / application_server 1.0.0 1.0.0.x
oracle / application_server 1.0.1 1.0.1.x
oracle / mysql - 5.6.42.x
oracle / vm_virtualbox 5.0.0 5.2.24