{"schema_version":"1","data":[{"id":15917,"advisory_id":"c1e3d515-8e94-481b-b4a6-80fcbffebd08","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2018-0734","source_published_at":"2018-10-30T12:00:00+00:00","published_at":"2026-10-25T01:07:26.268155+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2018-0734"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Timing attack against DSA","summary":"The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).","evidence":"cve:CVE-2018-0734","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-0734","aliases":["CVE-2018-0734"],"metrics":[{"other":{"type":"unknown","content":{"url":"https://www.openssl.org/policies/secpolicy.html#Low","lang":"eng","value":"Low"}}}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"Fixed in OpenSSL 1.1.1a (Affected 1.1.1)"},{"status":"affected","version":"Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i)"},{"status":"affected","version":"Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p)"}]}],"modified":"2026-10-08T21:13:44.081Z","provider":"cve","references":["https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://usn.ubuntu.com/3840-1/","https://www.debian.org/security/2018/dsa-4355","https://security.netapp.com/advisory/ntap-20181105-0002/","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f","https://www.tenable.com/security/tns-2018-17","https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","https://www.tenable.com/security/tns-2018-16","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7","https://www.debian.org/security/2018/dsa-4348","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac","https://www.openssl.org/news/secadv/20181030.txt","https://security.netapp.com/advisory/ntap-20190118-0002/","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://security.netapp.com/advisory/ntap-20190423-0002/","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://access.redhat.com/errata/RHSA-2019:2304","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://access.redhat.com/errata/RHSA-2019:3700","https://access.redhat.com/errata/RHSA-2019:3933","https://access.redhat.com/errata/RHSA-2019:3935","https://access.redhat.com/errata/RHSA-2019:3932","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpuapr2020.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://usn.ubuntu.com/3840-1/","name":"USN-3840-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4355","name":"DSA-4355","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-17","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-16","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/105758","name":"105758","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4348","name":"DSA-4348","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.openssl.org/news/secadv/20181030.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20190423-0002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html","name":"openSUSE-SU-2019:1547","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","name":"openSUSE-SU-2019:1814","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2304","name":"RHSA-2019:2304","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","name":"FEDORA-2019-db06efdea1","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","name":"FEDORA-2019-00c25b9379","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","name":"FEDORA-2019-9a0a7c0986","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","name":"RHSA-2019:3700","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3933","name":"RHSA-2019:3933","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3935","name":"RHSA-2019:3935","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3932","name":"RHSA-2019:3932","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:35:49.290Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2018-0734","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T21:03:09.967599Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:13:44.081Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2020-04-15T21:06:42.000Z"}}},"related_cves":[{"value":"CVE-2018-0734","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":15917,"next_before":15917}