Lucene search
OpenSSLOPENSSL:CVE-2018-0732HistoryJun 12, 2018 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2018-0732
2018-06-1200:00:00
www.openssl.org
32
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.05 Low
EPSS
Percentile
92.7%
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack.
Related
nessus
nessus
SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:1887-1)
2018-07-06 00:00:00
openSUSE Security Update : openssl-1_0_0 (openSUSE-2019-549)
2019-03-27 00:00:00
openSUSE Security Update : openssl-1_1 (openSUSE-2018-777)
2018-07-30 00:00:00
openvas
openvas
openSUSE: Security Advisory for openssl-1_1 (openSUSE-SU-2018:2117-1)
2018-10-26 00:00:00
openSUSE: Security Advisory for openssl (openSUSE-SU-2018:1906-1)
2018-07-07 00:00:00
openSUSE: Security Advisory for openssl-1_0_0 (openSUSE-SU-2018:2129-1)
2018-10-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-06-13 03:48:25
Denial Of Service (DoS)
2019-01-15 09:24:14
ibm
ibm
suse
suse
Security update for openssl-1_1 (moderate)
2018-10-05 12:08:41
Security update for openssl-1_1 (moderate)
2018-07-28 15:09:18
Security update for openssl (moderate)
2018-07-07 00:09:16
broadcom
broadcom
CVE-2018-0732. Client DoS due to large DH parameter.
2022-09-13 00:00:00
CVE-2018-0732. Client DoS due to large DH parameter.
2022-09-13 00:00:00
prion
prion
Design/Logic Flaw
2018-06-12 13:29:00
osv
osv
CVE-2018-0732
2018-06-12 13:29:00
openssl - security update
2018-07-28 00:00:00
openssl1.0 - security update
2018-12-19 00:00:00
tenable
tenable
[R1] Nessus 8.0.0 Fixes Multiple Third-party Vulnerabilities
2018-10-23 21:15:12
[R1] Nessus 7.1.4 Fixes Multiple Third-party Vulnerabilities
2018-12-20 19:43:50
[R1] Nessus 8.0.0 Fixes Multiple Third-party Vulnerabilities
2018-10-23 21:15:12
freebsd
freebsd
OpenSSL -- Client DoS due to large DH parameter
2018-06-12 00:00:00
node.js -- multiple vulnerabilities
2018-08-16 00:00:00
f5
f5
K21665601 : OpenSSL vulnerability CVE-2018-0732
2018-07-20 00:00:00
hackerone
hackerone
Internet Bug Bounty: Client DoS due to large DH parameter (CVE-2018-0732)
2018-06-12 11:15:31
symantec
symantec
OpenSSL CVE-2018-0732 Denial of Service Vulnerability
2018-06-12 00:00:00
OpenSSL Vulnerabilities 16-Apr-2018 and 12-Jun-2018
2018-10-10 08:01:01
cve
cve
CVE-2018-0732
2018-06-12 13:29:00
amazon
amazon
Medium: openssl
2018-10-30 20:50:00
Medium: openssl
2018-11-07 22:07:00
aix
aix
Vulnerability in OpenSSL affects AIX (CVE-2018-0732)
2018-09-19 08:44:29
debiancve
debiancve
CVE-2018-0732
2018-06-12 13:29:00
redhatcve
redhatcve
CVE-2018-0732
2018-06-14 05:18:51
ubuntucve
ubuntucve
CVE-2018-0732
2018-06-12 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Denial of Service (CVE-2018-0732)
2019-02-17 00:00:00
gentoo
gentoo
OpenSSL: Denial of service
2018-11-09 00:00:00
ics
ics
Siemens TIM 1531 IRC
2021-06-08 12:00:00
alpinelinux
alpinelinux
CVE-2018-0732
2018-06-12 13:29:00
fedora
fedora
[SECURITY] Fedora 28 Update: openssl-1.1.0i-1.fc28
2018-09-22 20:52:36
[SECURITY] Fedora 27 Update: openssl-1.1.0i-1.fc27
2018-10-02 15:03:41
oraclelinux
oraclelinux
openssl security update
2018-10-15 00:00:00
openssl security update
2018-10-12 00:00:00
openssl security update
2018-10-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 8.11.4-alt1
2018-08-29 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.2p-alt1
2018-08-16 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2018-09-02 22:07:30
debian
debian
[SECURITY] [DLA 1449-1] openssl security update
2018-07-28 03:56:18
[SECURITY] [DSA 4355-1] openssl1.0 security update
2018-12-19 22:29:59
redhat
redhat
slackware
slackware
[slackware-security] openssl
2018-08-15 00:18:35
cloudfoundry
cloudfoundry
USN-3692-1: OpenSSL vulnerabilities | Cloud Foundry
2018-07-10 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2018-06-26 00:00:00
OpenSSL vulnerabilities
2018-06-26 00:00:00
paloalto
paloalto
OpenSSL Vulnerabilities in PAN-OS
2018-10-11 00:00:00
nodejsblog
nodejsblog
August 2018 Security Releases
2018-08-11 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2018-0739, CVE-2018-0737, CVE-2021-3712, CVE-2018-0732
2021-09-21 22:11:57
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.05 Low
EPSS
Percentile
92.7%
Related for OPENSSL:CVE-2018-0732