ALPINE-CVE-2018-0495

🗓️ 13 Jun 2018 23:29:00Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Libgcrypt ECDSA memory-cache side-channel affects older versions; requires local or co resident access; blinding during signing mitigates.

Reporter	Title	Published	Views	Family All 213
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities	19 Aug 201920:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance affected by NSS and libgcrypt vulnerabilities (CVE-2018-12404 and CVE-2018-0495)	23 Jan 202015:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM	17 Dec 201815:00	–	ibm
IBM Security Bulletins	Security Bulletin: Potential side-channel cryptographic vulnerabilities in IBM DataPower Gateway	8 Jun 202121:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple openssl vulnerabilities.	7 Dec 201802:45	–	ibm
FreeBSD	libgcrypt -- side-channel attack vulnerability	13 Jun 201800:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : openssl (ALAS-2018-1102)	9 Nov 201800:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nss (ALAS-2019-1305)	4 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssl (ALAS-2018-1102)	7 Dec 201800:00	–	nessus

Source	Link
security	www.security.alpinelinux.org/vuln/CVE-2018-0495

03 Dec 2025 22:47Current

8.5High risk

Vulners AI Score8.5

CVSS 34.7

EPSS0.00296