{"schema_version":"1","data":[{"id":15919,"advisory_id":"6f689af3-59e1-4334-b27d-16114997b9b7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2018-0735","source_published_at":"2018-10-29T13:00:00+00:00","published_at":"2026-10-25T01:07:26.852948+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2018-0735"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Timing attack against ECDSA signature generation","summary":"The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).","evidence":"cve:CVE-2018-0735","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-0735","aliases":["CVE-2018-0735"],"metrics":[{"other":{"type":"unknown","content":{"url":"https://www.openssl.org/policies/secpolicy.html#Low","lang":"eng","value":"Low"}}}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i)"},{"status":"affected","version":"Fixed in OpenSSL 1.1.1a (Affected 1.1.1)"}]}],"modified":"2026-10-08T21:13:55.113Z","provider":"cve","references":["https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://usn.ubuntu.com/3840-1/","https://security.netapp.com/advisory/ntap-20181105-0002/","https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html","https://www.debian.org/security/2018/dsa-4348","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4","https://www.openssl.org/news/secadv/20181029.txt","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://access.redhat.com/errata/RHSA-2019:3700","https://www.oracle.com/security-alerts/cpujan2020.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/105750","name":"105750","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://usn.ubuntu.com/3840-1/","name":"USN-3840-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id/1041986","name":"1041986","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html","name":"[debian-lts-announce] 20181121 [SECURITY] [DLA 1586-1] openssl security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4348","name":"DSA-4348","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.openssl.org/news/secadv/20181029.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","name":"RHSA-2019:3700","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:35:49.247Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2018-0735","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T21:08:12.584071Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:13:55.113Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2020-01-15T19:15:21.000Z"}}},"related_cves":[{"value":"CVE-2018-0735","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":15919,"next_before":15919}