K43429502 : OpenSSL RSA key generation vulnerability CVE-2018-0737

Security Advisory Description

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o). (CVE-2018-0737)

Impact

Traffix SDC

An attacker may recover the private key when the vulnerability is exploited.

BIG-IP / BIG-IQ / F5 iWorkflow / Enterprise Manager / ARX / LineRate

There is no impact; these F5 products are not affected by this vulnerability.