{"schema_version":"1","data":[{"id":15916,"advisory_id":"f87a25f7-aa42-4ed5-a6e1-cc19e478ec00","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2018-0732","source_published_at":"2018-06-12T13:00:00+00:00","published_at":"2026-10-25T01:07:25.83361+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2018-0732"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Client DoS due to large DH parameter","summary":"During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).","evidence":"cve:CVE-2018-0732","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-0732","aliases":["CVE-2018-0732"],"metrics":[{"other":{"type":"unknown","content":{"url":"https://www.openssl.org/policies/secpolicy.html#Low","lang":"eng","value":"Low"}}}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h)"},{"status":"affected","version":"Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o)"}]}],"modified":"2026-10-08T21:13:55.704Z","provider":"cve","references":["https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","https://www.debian.org/security/2018/dsa-4355","https://access.redhat.com/errata/RHSA-2018:2552","https://security.gentoo.org/glsa/201811-03","https://usn.ubuntu.com/3692-2/","https://access.redhat.com/errata/RHSA-2018:2553","https://access.redhat.com/errata/RHSA-2018:3505","https://usn.ubuntu.com/3692-1/","https://access.redhat.com/errata/RHSA-2018:3221","https://www.debian.org/security/2018/dsa-4348","https://access.redhat.com/errata/RHSA-2019:1297","https://access.redhat.com/errata/RHSA-2019:1296","https://access.redhat.com/errata/RHSA-2019:1543","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.tenable.com/security/tns-2018-14","https://securityadvisories.paloaltonetworks.com/Home/Detail/133","https://www.tenable.com/security/tns-2018-13","https://www.tenable.com/security/tns-2018-17","https://www.tenable.com/security/tns-2018-12","https://security.netapp.com/advisory/ntap-20181105-0001/","https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098","https://www.openssl.org/news/secadv/20180612.txt","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4","https://security.netapp.com/advisory/ntap-20190118-0002/","https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","name":"[debian-lts-announce] 20180728 [SECURITY] [DLA 1449-1] openssl security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.securityfocus.com/bid/104442","name":"104442","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4355","name":"DSA-4355","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2552","name":"RHSA-2018:2552","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201811-03","name":"GLSA-201811-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://usn.ubuntu.com/3692-2/","name":"USN-3692-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2553","name":"RHSA-2018:2553","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","name":"RHSA-2018:3505","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://usn.ubuntu.com/3692-1/","name":"USN-3692-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","name":"RHSA-2018:3221","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4348","name":"DSA-4348","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securitytracker.com/id/1041090","name":"1041090","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1297","name":"RHSA-2019:1297","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1296","name":"RHSA-2019:1296","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1543","name":"RHSA-2019:1543","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","name":"FEDORA-2019-db06efdea1","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","name":"FEDORA-2019-00c25b9379","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","name":"FEDORA-2019-9a0a7c0986","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-14","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-13","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-17","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-12","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.openssl.org/news/secadv/20180612.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:35:49.303Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2018-0732","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T21:08:26.802267Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:13:55.704Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2021-06-08T11:06:25.000Z"}}},"related_cves":[{"value":"CVE-2018-0732","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":15916,"next_before":15916}