Medium severity · published Oct 29, 2018
CVE-2018-0735
Timing attack against ECDSA signature generation
5.9
CVSS
4.7%
EPSS
No
On KEV
Description
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
MySQL · Oracle
through 5.6.42; 5.7.0 through 5.7.24; 8.0.0 through 8.0.13 · source: NVD
OP
OpenSSL · OpenSSL
Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i); Fixed in OpenSSL 1.1.1a (Affected 1.1.1) · source: vendor, NVD
AG
Api Gateway · Oracle
11.1.2.4.0 · source: NVD
AS
Application Server · Oracle
0.9.8; 1.0.0; 1.0.1 · source: NVD
CB
Cloud Backup · Netapp
All versions, or not specified · source: NVD
CF
Cn1610 Firmware · Netapp
All versions, or not specified · source: NVD
DL
Debian Linux · Debian
8.0; 9.0 · source: NVD
ES
Element Software · Netapp
All versions, or not specified · source: NVD
EM
Enterprise Manager Base Platform · Oracle
12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 · source: NVD
EM
Enterprise Manager Ops Center · Oracle
12.3.3 · source: NVD
NO
Node.js · Nodejs
10.0.0 before 10.12.0; 11.0.0 before 11.3.0; 10.13.0 · source: NVD
OU
Oncommand Unified Manager · Netapp
9.4 and later · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-0735
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-0735
Third Party Advisory
http://www.securityfocus.com/bid/105750
Third Party Advisory
http://www.securitytracker.com/id/1041986
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3700
git.openssl.org
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1
git.openssl.org
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4
Mailing List
https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html
More from MySQL
9.8
CVE-2020-11656
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement
9.8
CVE-2019-14540
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
9.8
CVE-2016-9843
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
9.8
CVE-2016-9841
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
9.8
CVE-2016-6662
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before…