{"schema_version":"1","data":[{"id":29878,"advisory_id":"8b9ba18a-5ebb-4e4c-ae3b-2cd011673b4c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2018-0737","source_published_at":"2018-04-16T17:00:00+00:00","published_at":"2026-10-25T08:06:26.222643+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2018-0737"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cache timing vulnerability in RSA Key Generation","summary":"The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).","evidence":"cve:CVE-2018-0737","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-0737","aliases":["CVE-2018-0737"],"metrics":[{"other":{"type":"unknown","content":{"url":"https://www.openssl.org/policies/secpolicy.html#Low","lang":"eng","value":"Low"}}}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h)"},{"status":"affected","version":"Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o)"}]}],"modified":"2026-10-15T17:19:17.232Z","provider":"cve","references":["https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","https://www.debian.org/security/2018/dsa-4355","https://usn.ubuntu.com/3628-2/","https://security.gentoo.org/glsa/201811-21","https://usn.ubuntu.com/3692-2/","https://access.redhat.com/errata/RHSA-2018:3505","https://usn.ubuntu.com/3692-1/","https://access.redhat.com/errata/RHSA-2018:3221","https://www.debian.org/security/2018/dsa-4348","https://usn.ubuntu.com/3628-1/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://access.redhat.com/errata/RHSA-2019:3933","https://access.redhat.com/errata/RHSA-2019:3935","https://access.redhat.com/errata/RHSA-2019:3932","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2018-14","https://securityadvisories.paloaltonetworks.com/Home/Detail/133","https://www.tenable.com/security/tns-2018-13","https://www.tenable.com/security/tns-2018-17","https://www.tenable.com/security/tns-2018-12","https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","https://www.oracle.com//security-alerts/cpujul2021.html","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787","https://www.openssl.org/news/secadv/20180416.txt","https://security.netapp.com/advisory/ntap-20180726-0003/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","name":"[debian-lts-announce] 20180728 [SECURITY] [DLA 1449-1] openssl security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4355","name":"DSA-4355","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://usn.ubuntu.com/3628-2/","name":"USN-3628-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201811-21","name":"GLSA-201811-21","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://usn.ubuntu.com/3692-2/","name":"USN-3692-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","name":"RHSA-2018:3505","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/103766","name":"103766","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://usn.ubuntu.com/3692-1/","name":"USN-3692-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","name":"RHSA-2018:3221","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4348","name":"DSA-4348","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securitytracker.com/id/1040685","name":"1040685","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://usn.ubuntu.com/3628-1/","name":"USN-3628-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","name":"FEDORA-2019-db06efdea1","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","name":"FEDORA-2019-00c25b9379","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","name":"FEDORA-2019-9a0a7c0986","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3933","name":"RHSA-2019:3933","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3935","name":"RHSA-2019:3935","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3932","name":"RHSA-2019:3932","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-14","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-13","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-17","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-12","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.openssl.org/news/secadv/20180416.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20180726-0003/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:35:49.323Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2018-0737","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-15T17:19:07.239978Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T17:19:17.232Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2021-07-20T22:53:10.000Z"}}},"related_cves":[{"value":"CVE-2018-0737","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}}],"next_after":29878,"next_before":29878}