Lucene search
Broadcom Security ResponseBSA-2022-627HistorySep 13, 2022 - 12:00 a.m.
CVE-2018-0732. Client DoS due to large DH parameter.
2022-09-1300:00:00
Broadcom Security Response
www.broadcom.com
12
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
Affected Products
- Brocade Fabric OS versions before v9.0.0, v.7.4.2.j, v.8.2.3c
Product under investigation
- Brocade Active Support Connectivity Gateway (ASC-G)
| CPE | Name | Operator | Version |
|---|---|---|---|
| <ul><li>brocade fabric os | lt | 9.0.0 | |
| <ul><li>brocade fabric os | lt | 7.4.2.j | |
| <ul><li>brocade fabric os | lt | 8.2.3c |
Related
nessus
nessus
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:1887-1)
2018-07-06 00:00:00
openSUSE Security Update : openssl-1_0_0 (openSUSE-2019-549)
2019-03-27 00:00:00
openSUSE Security Update : openssl-1_1 (openSUSE-2019-751)
2019-03-27 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-06-13 03:48:25
Denial Of Service (DoS)
2019-01-15 09:24:14
ibm
ibm
suse
suse
Security update for openssl-1_1 (moderate)
2018-07-28 15:09:18
Security update for openssl-1_1 (moderate)
2018-10-05 12:08:41
Security update for openssl-1_0_0 (moderate)
2018-07-28 16:03:35
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:2956-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for openssl-1_1 (openSUSE-SU-2018:2117-1)
2018-10-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:1887-2)
2021-04-19 00:00:00
f5
f5
K21665601 : OpenSSL vulnerability CVE-2018-0732
2018-07-20 00:00:00
hackerone
hackerone
Internet Bug Bounty: Client DoS due to large DH parameter (CVE-2018-0732)
2018-06-12 11:15:31
symantec
symantec
OpenSSL CVE-2018-0732 Denial of Service Vulnerability
2018-06-12 00:00:00
OpenSSL Vulnerabilities 16-Apr-2018 and 12-Jun-2018
2018-10-10 08:01:01
cve
cve
CVE-2018-0732
2018-06-12 13:29:00
debiancve
debiancve
CVE-2018-0732
2018-06-12 13:29:00
aix
aix
Vulnerability in OpenSSL affects AIX (CVE-2018-0732)
2018-09-19 08:44:29
amazon
amazon
Medium: openssl
2018-10-30 20:50:00
Medium: openssl
2018-11-07 22:07:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Denial of Service (CVE-2018-0732)
2019-02-17 00:00:00
gentoo
gentoo
OpenSSL: Denial of service
2018-11-09 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2018-0732
2018-06-12 00:00:00
ics
ics
Siemens TIM 1531 IRC
2021-06-08 12:00:00
alpinelinux
alpinelinux
CVE-2018-0732
2018-06-12 13:29:00
prion
prion
Design/Logic Flaw
2018-06-12 13:29:00
osv
osv
CVE-2018-0732
2018-06-12 13:29:00
openssl - security update
2018-07-28 00:00:00
openssl1.0 - security update
2018-12-19 00:00:00
tenable
tenable
[R1] Nessus 8.0.0 Fixes Multiple Third-party Vulnerabilities
2018-10-23 21:15:12
[R1] Nessus 7.1.4 Fixes Multiple Third-party Vulnerabilities
2018-12-20 19:43:50
[R1] Nessus 7.1.4 Fixes Multiple Third-party Vulnerabilities
2018-12-20 19:43:50
broadcom
broadcom
CVE-2018-0732. Client DoS due to large DH parameter.
2022-09-13 00:00:00
freebsd
freebsd
OpenSSL -- Client DoS due to large DH parameter
2018-06-12 00:00:00
node.js -- multiple vulnerabilities
2018-08-16 00:00:00
redhatcve
redhatcve
CVE-2018-0732
2018-06-14 05:18:51
ubuntucve
ubuntucve
CVE-2018-0732
2018-06-12 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2018-09-02 22:07:30
fedora
fedora
[SECURITY] Fedora 28 Update: openssl-1.1.0i-1.fc28
2018-09-22 20:52:36
[SECURITY] Fedora 27 Update: openssl-1.1.0i-1.fc27
2018-10-02 15:03:41
oraclelinux
oraclelinux
openssl security update
2018-10-15 00:00:00
openssl security update
2018-10-12 00:00:00
openssl security update
2018-10-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 8.11.4-alt1
2018-08-29 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.2p-alt1
2018-08-16 00:00:00
redhat
redhat
slackware
slackware
[slackware-security] openssl
2018-08-15 00:18:35
debian
debian
[SECURITY] [DLA 1449-1] openssl security update
2018-07-28 03:56:18
[SECURITY] [DSA 4355-1] openssl1.0 security update
2018-12-19 22:29:59
ubuntu
ubuntu
OpenSSL vulnerabilities
2018-06-26 00:00:00
OpenSSL vulnerabilities
2018-06-26 00:00:00
cloudfoundry
cloudfoundry
USN-3692-1: OpenSSL vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
paloalto
paloalto
OpenSSL Vulnerabilities in PAN-OS
2018-10-11 00:00:00
nodejsblog
nodejsblog
August 2018 Security Releases
2018-08-11 00:00:00
Related for BSA-2022-627