CVE-2018-0739

Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
opensslopenssl
1.0.2b ≤
𝑥
≤ 1.0.2n
opensslopenssl
1.1.0 ≤
𝑥
≤ 1.1.0g
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.10
debiandebian_linux
7.0
debiandebian_linux
8.0
debiandebian_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libtomcrypt
bookworm
1.18.2-6
fixed
bullseye
1.18.2-5
fixed
jessie
no-dsa
sid
1.18.2+dfsg-7
fixed
stretch
no-dsa
trixie
1.18.2+dfsg-7
fixed
openssl
bookworm
3.0.14-1~deb12u1
fixed
bookworm (security)
3.0.14-1~deb12u2
fixed
bullseye
1.1.1w-0+deb11u1
fixed
bullseye (security)
1.1.1w-0+deb11u2
fixed
jessie
no-dsa
sid
3.3.2-2
fixed
stretch
no-dsa
trixie
3.3.2-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openssl
artful
Fixed 1.0.2g-1ubuntu13.4
released
bionic
Fixed 1.1.0g-2ubuntu3
released
cosmic
Fixed 1.1.0g-2ubuntu3
released
disco
Fixed 1.1.0g-2ubuntu3
released
trusty
Fixed 1.0.1f-1ubuntu2.24
released
xenial
Fixed 1.0.2g-1ubuntu4.11
released
openssl098
artful
dne
bionic
dne
cosmic
dne
disco
dne
trusty
dne
xenial
dne
openssl1.0
artful
dne
bionic
Fixed 1.0.2n-1ubuntu5
released
cosmic
Fixed 1.0.2n-1ubuntu5
released
disco
dne
trusty
dne
xenial
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
ovmf-201911
suse enterprise sap 15 SP2
5.33
fixed
suse enterprise server 15 SP2
5.33
fixed
ovmf-202008
suse enterprise sap 15 SP3
8.1
fixed
suse enterprise server 15 SP3
8.1
fixed
ovmf-202202
suse enterprise sap 15 SP4
150400.3.3
fixed
suse enterprise server 15 SP4
150400.3.3
fixed
ovmf-202408
suse enterprise sap 15 SP7
150700.1.3
fixed
suse enterprise server 15 SP7
150700.1.3
fixed
ovmf-tools-201911
suse enterprise sap 15 SP2
5.33
fixed
suse enterprise server 15 SP2
5.33
fixed
ovmf-tools-202008
suse enterprise sap 15 SP3
8.1
fixed
suse enterprise server 15 SP3
8.1
fixed
ovmf-tools-202202
suse enterprise sap 15 SP4
150400.3.3
fixed
suse enterprise server 15 SP4
150400.3.3
fixed
ovmf-tools-202408
suse enterprise sap 15 SP7
150700.1.3
fixed
suse enterprise server 15 SP7
150700.1.3
fixed
qemu-ovmf-x86_64-201911
suse enterprise sap 15 SP2
5.33
fixed
suse enterprise server 15 SP2
5.33
fixed
qemu-ovmf-x86_64-202008
suse enterprise sap 15 SP3
8.1
fixed
suse enterprise server 15 SP3
8.1
fixed
qemu-ovmf-x86_64-202202
suse enterprise sap 15 SP4
150400.3.3
fixed
suse enterprise server 15 SP4
150400.3.3
fixed
qemu-ovmf-x86_64-202408
suse enterprise sap 15 SP7
150700.1.3
fixed
suse enterprise server 15 SP7
150700.1.3
fixed
qemu-uefi-aarch64-201911
suse enterprise sap 15 SP2
5.33
fixed
suse enterprise server 15 SP2
5.33
fixed
qemu-uefi-aarch64-202008
suse enterprise sap 15 SP3
8.1
fixed
suse enterprise server 15 SP3
8.1
fixed
qemu-uefi-aarch64-202202
suse enterprise sap 15 SP4
150400.3.3
fixed
suse enterprise server 15 SP4
150400.3.3
fixed
qemu-uefi-aarch64-202408
suse enterprise sap 15 SP7
150700.1.3
fixed
suse enterprise server 15 SP7
150700.1.3
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
AAVMF
RHEL 7
0:20180508-3.gitee3198e672e2.el7
fixed
OVMF
RHEL 7
0:20180508-3.gitee3198e672e2.el7
fixed
openssl
RHEL 7
1:1.0.2k-16.el7
fixed
openssl-devel
RHEL 7
1:1.0.2k-16.el7
fixed
openssl-libs
RHEL 7
1:1.0.2k-16.el7
fixed
openssl-perl
RHEL 7
1:1.0.2k-16.el7
fixed
openssl-static
RHEL 7
1:1.0.2k-16.el7
fixed
References