Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the OpenSSL library, related to errors in processing cryptographic keys when using the DH (E) protocol, allows a hacker to induce a denial-of-service attack.

🗓️ 22 Jan 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 3 Views

OpenSSL DH key processing errors can cause denial of service via exploitation.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018
28 Jan 201917:05
–ibm
IBM Security Bulletins		Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSSL (CVE-2018-0732)
7 Dec 202322:45
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect Plus (CVE-2018-0739, CVE-2018-0737, CVE-2018-0732)
27 Jun 201918:50
–ibm
IBM Security Bulletins		Security Bulletin: IBM BladeCenter Switch Modules are affected by vulnerability in OpenSSL (CVE-2018-0732)
12 Mar 201920:10
–ibm
IBM Security Bulletins		Security Bulletin: WebSphere DataPower Appliances is affected by a Denial of Service vulnerability (CVE-2018-0732)
7 Sep 201814:46
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in GNU OpenSSL affect IBM Netezza Analytics
18 Oct 201903:36
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in OpenSSL affect GCM16 & GCM32 and LCM8 & LCM16 KVM Switch Firmware (CVE-2018-0732 CVE-2019-1559)
7 Dec 202322:45
–ibm
IBM Security Bulletins		Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect the configuration editor used by IBM Business Automation Workflow and Business Process Manager (BPM)
14 Sep 202215:02
–ibm
IBM Security Bulletins		Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-0732, CVE-2018-0739, CVE-2017-3735)
19 Jul 201910:10
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability in OpenSSL affects AIX (CVE-2018-0732)
17 Mar 202222:07
–ibm
Rows per page
Vulners
Node
oracleapi_gatewayMatch11.1.2.4.0aurora
OR
oracleenterprise_manager_ops_centerMatch12.2.2aurora
OR
oracleenterprise_manager_ops_centerMatch12.3.3aurora
OR
oraclejd_edwards_enterpriseone_toolsMatch9.2aurora
OR
opensslopensslRange1.1.0–1.1.0haurora
OR
oraclevm_virtualboxRange<5.2.20aurora
OR
oracletuxedoMatch12.1.1.0aurora
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.55aurora
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.56aurora
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.57aurora
OR
opensslopensslRange1.0.2–1.0.2oaurora
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.4aurora
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.1aurora
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.2aurora
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch16.1aurora
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch16.2aurora
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch18.8aurora
OR
oracleprimavera_p6_enterprise_project_portfolio_managementRange17.7–17.12aurora
OR
novellsuse_enterprise_storageMatch4aurora
OR
novellsuse_openstack_cloudMatch7aurora
OR
node.jsnode.jsMatch10aurora
OR
node.jsnode.jsMatch11aurora
OR
novellsuse_linux_enterprise_module_for_web_scriptingMatch12aurora
OR
oraclecommunications_webrtc_session_controllerRange<7.2aurora
OR
oraclecommunications_application_session_controllerMatch3.7.1aurora
OR
oraclecommunications_application_session_controllerMatch3.8.0aurora
OR
oracleagile_engineering_data_managementMatch6.1.3aurora
OR
oracleagile_engineering_data_managementMatch6.2.0aurora
OR
oracleagile_engineering_data_managementMatch6.2.1aurora
OR
oracleenterprise_manager_base_platformMatch12.1.0.5aurora
OR
oracleendeca_serverMatch7.7.0aurora
OR
node.jsnode.jsMatch6aurora
OR
node.jsnode.jsMatch8aurora
OR
oraclecommunications_eagle_lnp_application_processorMatch10.0aurora
OR
oraclecommunications_eagle_lnp_application_processorMatch10.1aurora
OR
oraclecommunications_eagle_lnp_application_processorMatch10.2aurora
OR
oraclecommunications_operations_monitorMatch3.4aurora
OR
oraclecommunications_operations_monitorMatch4.0aurora
OR
oracleenterprise_manager_base_platformMatch13.2.0aurora
OR
oracleenterprise_manager_base_platformMatch13.3.0aurora
OR
oraclemysql_workbenchRange≤8.0.13aurora
OR
oracleoss_support_toolsRange<19.1aurora
OR
novellsuse_linux_enterprise_module_for_basesystemMatch15aurora
OR
novellsuse_studio_onsiteMatch1.3aurora
OR
novellsuse_linux_enterprise_module_for_legacy_softwareMatch15aurora
OR
novellsuse_linux_enterprise_module_for_web_scriptingMatch15aurora
OR
novellopenstack_cloud_magnum_orchestrationMatch7aurora
OR
novellsuse_linux_enterprise_module_for_legacy_softwareMatch12aurora
OR
oraclecommunications_performance_intelligence_center_(pic)_softwareMatch10.4.0.2aurora
OR
juniper_networksjunos_spaceRange<21.1r1aurora
OR
red_hatred_hat_enterprise_linuxMatch7
OR
novellopensuse_leapMatch42.3
OR
canonicalubuntuMatch17.10
OR
fedorafedoraMatch29
OR
novellopensuse_leapMatch15.0
OR
novellsuse_linux_enterprise_serverMatch12-ltss
OR
fedorafedoraMatch30
OR
novellsuse_linux_enterprise_serverMatch11-security
OR
fedorafedoraMatch31

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
20 Feb 2025 00:00Current
6.4Medium risk
Vulners AI Score6.4
CVSS 37.5
CVSS 27.8
EPSS0.49268
openssldiffie hellmankey processingdenial of service
3