CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-0737

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.282

EPSS Ranking 96.2%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2018-0737

Openssl » Openssl » Version: 1.0.2b

cpe:2.3:a:openssl:openssl:1.0.2b
Openssl » Openssl » Version: 1.0.2c

cpe:2.3:a:openssl:openssl:1.0.2c
Openssl » Openssl » Version: 1.0.2d

cpe:2.3:a:openssl:openssl:1.0.2d
Openssl » Openssl » Version: 1.0.2e

cpe:2.3:a:openssl:openssl:1.0.2e
Openssl » Openssl » Version: 1.0.2f

cpe:2.3:a:openssl:openssl:1.0.2f
Openssl » Openssl » Version: 1.0.2g

cpe:2.3:a:openssl:openssl:1.0.2g
Openssl » Openssl » Version: 1.0.2h

cpe:2.3:a:openssl:openssl:1.0.2h
Openssl » Openssl » Version: 1.0.2i

cpe:2.3:a:openssl:openssl:1.0.2i
Openssl » Openssl » Version: 1.0.2j

cpe:2.3:a:openssl:openssl:1.0.2j
Openssl » Openssl » Version: 1.0.2k

cpe:2.3:a:openssl:openssl:1.0.2k
Openssl » Openssl » Version: 1.0.2l

cpe:2.3:a:openssl:openssl:1.0.2l
Openssl » Openssl » Version: 1.0.2m

cpe:2.3:a:openssl:openssl:1.0.2m
Openssl » Openssl » Version: 1.0.2n

cpe:2.3:a:openssl:openssl:1.0.2n
Openssl » Openssl » Version: 1.0.2o

cpe:2.3:a:openssl:openssl:1.0.2o
Openssl » Openssl » Version: 1.1.0

cpe:2.3:a:openssl:openssl:1.1.0
Openssl » Openssl » Version: 1.1.0a

cpe:2.3:a:openssl:openssl:1.1.0a
Openssl » Openssl » Version: 1.1.0b

cpe:2.3:a:openssl:openssl:1.1.0b
Openssl » Openssl » Version: 1.1.0c

cpe:2.3:a:openssl:openssl:1.1.0c
Openssl » Openssl » Version: 1.1.0d

cpe:2.3:a:openssl:openssl:1.1.0d
Openssl » Openssl » Version: 1.1.0e

cpe:2.3:a:openssl:openssl:1.1.0e
Openssl » Openssl » Version: 1.1.0f

cpe:2.3:a:openssl:openssl:1.1.0f
Openssl » Openssl » Version: 1.1.0g

cpe:2.3:a:openssl:openssl:1.1.0g
Openssl » Openssl » Version: 1.1.0h

cpe:2.3:a:openssl:openssl:1.1.0h
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 17.10

cpe:2.3:o:canonical:ubuntu_linux:17.10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-0737

Products

Pricing

Contact Us