Information disclosure in OpenSSL - CVE-2018-0735

Vulnerability identifier: #VU15568

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-0735

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The vulnerability exists due to disclosure of the OpenSSL ECDSA signature algorithm. A remote attacker can use variations in the signing algorithm to conduct a timing side channel attack and recover the private key.

OpenSSL
Arch Linux
Red Hat Enterprise Linux for x86_64
Opensuse
Fedora
openssl (Debian package)
openssl (Ubuntu package)
nodejs-current (Alpine package)
openssl
Traffix SDC
Node.js

The vulnerability has been fixed in the versions 1.1.0j, 1.1.1a.

OpenSSL - addressed in versions 1.1.0j, 1.1.1a
openssl (Debian package) - update to 1.1.0j-1~deb9u1
openssl (Ubuntu package) - addressed in versions 1.0.1f-1ubuntu2.27, 1.0.2g-1ubuntu4.14, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1
Traffix SDC - update to 5.2.0
Node.js - addressed in versions 6.15.0, 8.14.0, 10.14.0, 11.3.0
nodejs-current (Alpine package) - update to 11.3.0-r0
openssl - update to 1.1.1a-1.fc29

• https://www.openssl.org/news/secadv/20181029.txt

• Information disclosure in OpenSSL
• OpenSUSE Linux update for openssl-1
• Multiple vulnerabilities in Node.js
• Debian update for openssl
• Arch Linux update for lib32-openssl
• Arch Linux update for openssl
• Ubuntu update for OpenSSL
• Red Hat update for openssl
• Information disclosure in nodejs-current (Alpine package)
• F5 Traffix SDC update for OpenSSL
• Fedora 29 update for openssl