CVE-2018-0734

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-0734
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0734.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-0734
Downstream
Related
Published
2018-10-30T12:29:00.257Z
Modified
2026-03-15T22:27:32.475451Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

References

Affected packages

Git / github.com/nodejs/node

Affected ranges

Type
GIT
Repo
https://github.com/nodejs/node
Events
Introduced
b65a11e072cf751d8c2a9699451ef80022d4ffbc
Last affected
b65a11e072cf751d8c2a9699451ef80022d4ffbc
Introduced
662975159692104fb7fa6777e72cf0aea5173589
Last affected
662975159692104fb7fa6777e72cf0aea5173589
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bdf069ba0f6ee63056628af20d95cd82ca5ea736
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fa9990f3fb5b06fe94e294925246d2c136deb2c2
Introduced
ce3e3c5fe15479475c068482c48eb9cbf1ac9df5
Last affected
c6a397bce63fc026421e1515b98eec9b8b5a8468
Introduced
6b1c40be84fbe5ea404f25e4e340a0c1fe67a60a
Fixed
b6589e3d9be963b29a8559bf7b272b54284fe1bc
Introduced
0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba
Last affected
dc6bbb44daec5584a0fbd37f0916baeff3202dba
Introduced
f76ce0a75641991bfc235775a4747c978e0e281b
Fixed
39716a8835a0ba61683974aef70e05ce7f8e414a
Introduced
cf41627411886000429bde058a6594fb7f6d6d47
Last affected
4a276cc2a960b3f9a138ac3a99c9249a63b4d472
Introduced
cea049bcf8bb0f9a6e0095dbd5dffdb14dc8f71b
Fixed
00fb73a72eff0e90d0f85b95dbcfc3c21f89cff9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ab4af087e83d91a46354d765306d3543b1d85423
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5f2f8400f665dc32c3e10e7d31d53d756ded9156
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b82bb600370db7207a39e53329af228f6af3ffa1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
545959468fbc878e7f0a486264eebbdf06a57bea
Introduced
f9f837885343a2a3f5ba2b8c510eaac395c8c865
Last affected
85df6ada477715020dbd22e2fb5e687d84d663ff
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
56a0577b2ebf111346779cf790a1f54e0e464078
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2291e079f22e6df1f7683a05d17364b2ab3bfdab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ecd1c93d88c7637c76e3d2108061623efdc5e4e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
79c57d0cc55db834177d2f8ce4b4d83109a23dc9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6e69f8452efa0631bfbefd8ddbd41a813a864645
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c200106305f4367ba9ad8987af5139979c6cc40c
Database specific 
{
    "versions": [
        {
            "introduced": "1.0.2"
        },
        {
            "last_affected": "1.0.2p"
        },
        {
            "introduced": "1.1.0"
        },
        {
            "last_affected": "1.1.0i"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "18.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        },
        {
            "introduced": "6.0.0"
        },
        {
            "last_affected": "6.8.1"
        },
        {
            "introduced": "6.9.0"
        },
        {
            "fixed": "6.15.0"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "last_affected": "8.8.1"
        },
        {
            "introduced": "8.9.0"
        },
        {
            "fixed": "8.14.0"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "last_affected": "10.12.0"
        },
        {
            "introduced": "11.0.0"
        },
        {
            "fixed": "11.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "10.13.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "4.0"
        },
        {
            "last_affected": "4.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "18.8"
        }
    ]
}
Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e04bd3433fd84e1861bf258ea37928d9845e6a86
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.1"
        }
    ]
}

Affected versions

Other
BEFORE_engine
OpenSSL_0_9_1c
OpenSSL_0_9_2b
OpenSSL_0_9_3
OpenSSL_0_9_3a
OpenSSL_0_9_3beta2
OpenSSL_0_9_4
OpenSSL_0_9_5a
OpenSSL_0_9_5a-beta1
OpenSSL_0_9_5a-beta2
OpenSSL_0_9_5beta1
OpenSSL_0_9_5beta2
OpenSSL_0_9_6-beta3
OpenSSL_1_1_0-pre1
OpenSSL_1_1_0-pre2
OpenSSL_1_1_0-pre3
OpenSSL_1_1_0-pre4
OpenSSL_1_1_0-pre5
OpenSSL_1_1_0-pre6
OpenSSL_1_1_1
OpenSSL_1_1_1-pre1
OpenSSL_1_1_1-pre2
OpenSSL_1_1_1-pre3
OpenSSL_1_1_1-pre4
OpenSSL_1_1_1-pre5
OpenSSL_1_1_1-pre6
OpenSSL_1_1_1-pre7
OpenSSL_1_1_1-pre8
OpenSSL_1_1_1-pre9
OpenSSL_1_1_1a
OpenSSL_1_1_1b
OpenSSL_1_1_1c
OpenSSL_1_1_1d
OpenSSL_1_1_1e
OpenSSL_1_1_1f
OpenSSL_1_1_1g
OpenSSL_1_1_1h
OpenSSL_1_1_1i
OpenSSL_1_1_1j
OpenSSL_1_1_1k
OpenSSL_1_1_1l
OpenSSL_1_1_1m
OpenSSL_1_1_1n
OpenSSL_1_1_1o
OpenSSL_1_1_1p
OpenSSL_1_1_1q
OpenSSL_1_1_1r
OpenSSL_1_1_1s
OpenSSL_1_1_1t
OpenSSL_1_1_1u
OpenSSL_1_1_1v
OpenSSL_1_1_1w
master-post-auto-reformat
master-post-reformat
master-pre-auto-reformat
master-pre-reformat
v1.*
v1.0.2
v1.0.2-release
v1.0.3
v1.0.4
v1.1.0
v1.2.0
v1.3.0
v1.4.1
v1.4.2
v1.4.3
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.2
v1.6.3
v1.6.4
v1.7.0
v1.7.1
v1.8.1
v11.*
v11.0.0
v11.1.0
v11.2.0
v2.*
v2.0.0
v2.0.1
v2.0.2
v2.1.0
v2.2.0
v2.2.1
v2.3.0
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.4.0
v2.5.0
v3.*
v3.0.0
v6.*
v6.0.0
v6.1.0
v6.10.0
v6.10.1
v6.10.2
v6.10.3
v6.11.0
v6.11.1
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.12.0
v6.12.1
v6.12.2
v6.12.3
v6.13.0
v6.13.1
v6.14.0
v6.14.1
v6.14.2
v6.14.3
v6.14.4
v6.2.0
v6.2.1
v6.2.2
v6.3.0
v6.3.1
v6.4.0
v6.5.0
v6.6.0
v6.7.0
v6.8.0
v6.8.1
v6.9.0
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5
v8.*
v8.0.0
v8.1.0
v8.1.1
v8.1.2
v8.1.3
v8.1.4
v8.10.0
v8.11.0
v8.11.1
v8.11.2
v8.11.3
v8.11.4
v8.12.0
v8.13.0
v8.2.0
v8.2.1
v8.3.0
v8.4.0
v8.5.0
v8.6.0
v8.7.0
v8.8.0
v8.8.1
v8.9.0
v8.9.1
v8.9.2
v8.9.3
v8.9.4

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "16.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.1.2.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.0.5.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.2.0.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.3.0.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.3.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "3.0"
            },
            {
                "last_affected": "3.12.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.55"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.56"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.57"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "17.7"
            },
            {
                "last_affected": "17.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.1.0.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0734.json"