CVE-2018-0732
12.06.2018, 13:29
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).Enginsight
| Vendor | Product | Version |
|---|---|---|
| openssl | openssl | 1.0.2 ≤ 𝑥 ≤ 1.0.2o |
| openssl | openssl | 1.1.0 ≤ 𝑥 ≤ 1.1.0h |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 17.10 |
| canonical | ubuntu_linux | 18.04 |
| debian | debian_linux | 8.0 |
| nodejs | node.js | 6.0.0 ≤ 𝑥 < 6.8.1 |
| nodejs | node.js | 6.9.0 ≤ 𝑥 < 6.14.4 |
| nodejs | node.js | 8.0.0 ≤ 𝑥 < 8.8.1 |
| nodejs | node.js | 8.9.0 ≤ 𝑥 < 8.11.4 |
| nodejs | node.js | 10.0.0 ≤ 𝑥 < 10.9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openssl |
| ||||||||||||
| openssl098 |
| ||||||||||||
| openssl1.0 |
|
Common Weakness Enumeration
References