The vulnerability of the implementation of the Digital Signature Algorithm (DSA) in the OpenSSL library allows a perpetrator to gain unauthorized access to protected information.

🗓️ 04 Apr 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL Digital Signature Algorithm flaw allows remote attacker to recover the secret key and access protected data.

Reporter	Title	Published	Views	Family All 365
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - Node.js	11 Mar 201914:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2018-5407,CVE-2020-1967,CVE-2018-0734,CVE-2019-1563,CVE-2019-1549,CVE-2019-1552,CVE-2019-1559,CVE-2018-0735)	15 Dec 202020:13	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerability affects IBM Rational Team Concert	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Guardium StealthBits Integration is affected by an OpenSSL vulnerability	3 May 201918:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by an OpenSSL vulnerability (CVE-2018-0734)	11 Apr 201912:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software	29 Jan 201921:10	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in OpenSSL, which is shipped with IBM Tivoli Network Manager IP Edition (CVE-2018-0734)	28 Jun 202322:14	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabities in SSL in IBM DataPower Gateway	8 Jun 202121:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect AIX (CVE-2018-0734, CVE-2018-5407)	11 Dec 201815:45	–	ibm

Vulners

Node

oracle api_gatewayMatch11.1.2.4.0aurora

oracle enterprise_manager_ops_centerMatch12.3.3aurora

oracle vm_virtualboxRange<5.2.24aurora

oracle peoplesoft_enterprise_peopletoolsMatch8.55aurora

oracle peoplesoft_enterprise_peopletoolsMatch8.56aurora

oracle peoplesoft_enterprise_peopletoolsMatch8.57aurora

oracle mysqlRange≤8.0.13aurora

oracle mysqlRange≤5.6.42aurora

oracle mysqlRange≤5.7.24aurora

oracle primavera_p6_enterprise_project_portfolio_managementMatch8.4aurora

oracle primavera_p6_enterprise_project_portfolio_managementMatch15.1aurora

oracle primavera_p6_enterprise_project_portfolio_managementMatch15.2aurora

oracle primavera_p6_enterprise_project_portfolio_managementMatch16.1aurora

oracle primavera_p6_enterprise_project_portfolio_managementMatch16.2aurora

oracle primavera_p6_enterprise_project_portfolio_managementMatch18.8aurora

openssl opensslRange≤1.1.1aurora

openssl opensslRange1.0.2–1.0.2paurora

openssl opensslRange1.1.0–1.1.0iaurora

oracle enterprise_manager_base_platformMatch13.2.0.0.0aurora

oracle enterprise_manager_base_platformMatch13.3.0.0.0aurora

oracle enterprise_manager_base_platformMatch12.1.0.5.0aurora

node.js node.jsMatch10aurora

node.js node.jsMatch11aurora

oracle tuxedoMatch12.1.1aurora

node.js node.jsMatch6aurora

node.js node.jsMatch8aurora

oracle primavera_p6_enterprise_project_portfolio_managementRange17.7–17.12aurora

oracle application_serverMatch0.9.8aurora

oracle application_serverMatch1.0.0aurora

oracle application_serverMatch1.0.1aurora

oracle mysql_enterprise_backupRange≤3.12.3aurora

oracle mysql_enterprise_backupRange≤4.1.2aurora

oracle vm_virtualboxRange<6.0.0aurora

oracle oracle_communications_session_border_controllerMatch8.0aurora

oracle oracle_communications_session_border_controllerMatch8.1aurora

oracle oracle_communications_session_border_controllerMatch8.2aurora

oracle oracle_communications_session_border_controllerMatch8.3aurora

oracle oracle_enterprise_session_border_controllerMatch7.5aurora

oracle oracle_enterprise_session_border_controllerMatch8.0aurora

oracle oracle_enterprise_session_border_controllerMatch8.1aurora

oracle oracle_enterprise_session_border_controllerMatch8.2aurora

oracle oracle_enterprise_session_border_controllerMatch8.3aurora

oracle communications_unified_session_managerMatch7.3.5aurora

oracle communications_unified_session_managerMatch8.2.5aurora

oracle oracle_communications_session_routerMatch7.4aurora

oracle oracle_communications_session_routerMatch8.0aurora

oracle oracle_communications_session_routerMatch8.1aurora

oracle oracle_communications_session_routerMatch8.2aurora

oracle oracle_communications_session_routerMatch8.3aurora

oracle oracle_communications_session_border_controllerMatch7.4aurora

oracle communications_diameter_signaling_routerMatch8.0aurora

oracle communications_diameter_signaling_routerMatch8.1aurora

oracle communications_diameter_signaling_routerMatch8.2aurora

oracle communications_diameter_signaling_routerMatch8.3aurora

oracle communications_diameter_signaling_routerMatch8.4aurora

red_hat red_hat_enterprise_linuxMatch7

canonical ubuntuMatch18.10

fedora fedoraMatch29

red_hat red_hat_enterprise_linuxMatch8

novell opensuse_leapMatch15.0

novell opensuse_leapMatch15.1

fedora fedoraMatch30

fedora fedoraMatch31

Source	Link
openssl	www.openssl.org/news/secadv/20181030.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-0734
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-0734
securityfocus	www.securityfocus.com/bid/105758
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
nodejs	www.nodejs.org/en/blog/vulnerability/november-2018-security-releases/
security	www.security.netapp.com/advisory/ntap-20181105-0002/
security	www.security.netapp.com/advisory/ntap-20190118-0002/

03 Mar 2022 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 35.9

CVSS 27.1

EPSS0.12154