Lucene search
OpenSSLOPENSSL:CVE-2018-0732HistoryJun 12, 2018 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2018-0732
2018-06-1200:00:00
www.openssl.org
42
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.047
Percentile
92.8%
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack.
Related
nessus
nessus
openSUSE Security Update : openssl-1_1 (openSUSE-2019-751)
2019-03-27 00:00:00
openSUSE Security Update : openssl-1_0_0 (openSUSE-2019-549)
2019-03-27 00:00:00
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:1887-1)
2018-07-06 00:00:00
ibm
ibm
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:1887-2)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2956-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for openssl-1_1 (openSUSE-SU-2018:2117-1)
2018-10-26 00:00:00
suse
suse
Security update for openssl-1_1 (moderate)
2018-07-28 15:09:18
Security update for openssl-1_1 (moderate)
2018-10-05 12:08:41
Security update for openssl-1_0_0 (moderate)
2018-07-28 16:03:35
veracode
veracode
Denial Of Service (DoS)
2018-06-13 03:48:25
Denial Of Service (DoS)
2019-01-15 09:24:14
checkpoint_advisories
checkpoint_advisories
OpenSSL Denial of Service (CVE-2018-0732)
2019-02-17 00:00:00
alpinelinux
alpinelinux
CVE-2018-0732
2018-06-12 13:29:00
gentoo
gentoo
OpenSSL: Denial of service
2018-11-09 00:00:00
ics
ics
Siemens TIM 1531 IRC
2021-06-08 12:00:00
tenable
tenable
[R1] Nessus 8.0.0 Fixes Multiple Third-party Vulnerabilities
2018-10-23 21:15:12
[R1] Nessus 8.0.0 Fixes Multiple Third-party Vulnerabilities
2018-10-23 21:15:12
[R1] Nessus 7.1.4 Fixes Multiple Third-party Vulnerabilities
2018-12-20 19:43:50
broadcom
broadcom
CVE-2018-0732. Client DoS due to large DH parameter.
2022-09-13 00:00:00
CVE-2018-0732. Client DoS due to large DH parameter.
2022-09-13 00:00:00
prion
prion
Design/Logic Flaw
2018-06-12 13:29:00
osv
osv
CVE-2018-0732
2018-06-12 13:29:00
openssl - security update
2018-07-28 00:00:00
openssl1.0 - security update
2018-12-19 00:00:00
freebsd
freebsd
OpenSSL -- Client DoS due to large DH parameter
2018-06-12 00:00:00
node.js -- multiple vulnerabilities
2018-08-16 00:00:00
f5
f5
K21665601 : OpenSSL vulnerability CVE-2018-0732
2018-07-20 00:00:00
debiancve
debiancve
CVE-2018-0732
2018-06-12 13:29:00
symantec
symantec
OpenSSL CVE-2018-0732 Denial of Service Vulnerability
2018-06-12 00:00:00
OpenSSL Vulnerabilities 16-Apr-2018 and 12-Jun-2018
2018-10-10 08:01:01
aix
aix
Vulnerability in OpenSSL affects AIX (CVE-2018-0732)
2018-09-19 08:44:29
cvelist
cvelist
CVE-2018-0732 Client DoS due to large DH parameter
2018-06-12 00:00:00
amazon
amazon
Medium: openssl
2018-10-30 20:50:00
hackerone
hackerone
Internet Bug Bounty: Client DoS due to large DH parameter (CVE-2018-0732)
2018-06-12 11:15:31
nvd
nvd
CVE-2018-0732
2018-06-12 13:29:00
cve
cve
CVE-2018-0732
2018-06-12 13:29:00
ubuntucve
ubuntucve
CVE-2018-0732
2018-06-12 00:00:00
redhatcve
redhatcve
CVE-2018-0732
2018-06-14 05:18:51
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 8.11.4-alt1
2018-08-29 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.2p-alt1
2018-08-16 00:00:00
oraclelinux
oraclelinux
openssl security update
2018-10-15 00:00:00
openssl security update
2018-10-12 00:00:00
openssl security update
2018-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: openssl-1.1.0i-1.fc28
2018-09-22 20:52:36
[SECURITY] Fedora 27 Update: openssl-1.1.0i-1.fc27
2018-10-02 15:03:41
redhat
redhat
slackware
slackware
[slackware-security] openssl
2018-08-15 00:18:35
mageia
mageia
Updated openssl packages fix security vulnerabilities
2018-09-02 22:07:30
debian
debian
[SECURITY] [DLA 1449-1] openssl security update
2018-07-28 03:56:18
[SECURITY] [DSA 4355-1] openssl1.0 security update
2018-12-19 22:29:59
ubuntu
ubuntu
OpenSSL vulnerabilities
2018-06-26 00:00:00
OpenSSL vulnerabilities
2018-06-26 00:00:00
cloudfoundry
cloudfoundry
USN-3692-1: OpenSSL vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
paloalto
paloalto
OpenSSL Vulnerabilities in PAN-OS
2018-10-11 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2018-0739, CVE-2018-0737, CVE-2021-3712, CVE-2018-0732
2021-09-21 22:11:57
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.047
Percentile
92.8%
Related for OPENSSL:CVE-2018-0732