What’s Vulnerable › Vulnerabilities

CVE-2018-0735: Timing attack against ECDSA signature generation

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-29 · updated 2026-10-08
• Weakness: CWE-327

Description

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 18.10
• Debian Linux: 8.0, 9.0
• NetApp Cloud Backup: all versions
• NetApp Cn1610 Firmware: all versions
• NetApp Element Software: all versions
• NetApp OnCommand Unified Manager for 7-Mode (core package): from 9.4
• NetApp Santricity Smi-S Provider: all versions
• NetApp Smi-S Provider: all versions
• NetApp Snapdrive: all versions
• NetApp Steelstore: all versions
• Node.js: from 10.0.0 before 10.12.0; from 11.0.0 before 11.3.0; 10.13.0 — fixed in 10.12.0, 11.3.0
• OpenSSL: from 1.1.0 through 1.1.0i; 1.1.1
• Oracle Corporation API Gateway: 11.1.2.4.0
• Oracle Application Server: 0.9.8, 1.0.0, 1.0.1
• Oracle Corporation Enterprise Manager Base Platform: 12.1.0.5.0, 13.2.0.0.0, 13.3.0.0.0
• Oracle Corporation Enterprise Manager Ops Center: 12.3.3
• MySQL Server: through 5.6.42; from 5.7.0 through 5.7.24; from 8.0.0 through 8.0.13
• Oracle Corporation PeopleSoft Enterprise PT PeopleTools: 8.55, 8.56, 8.57
• Oracle Corporation Primavera P6 Enterprise Project Portfolio Management: from 17.7 through 17.12; 8.4, 15.1, 15.2, 16.1, 16.2, 18.8
• Oracle Corporation Secure Global Desktop: 5.4
• Oracle Corporation Tuxedo: 12.1.1.0.0
• Oracle Corporation VM VirtualBox: before 6.0.0; from 5.0.0 before 5.2.24 — fixed in 5.2.24, 6.0.0

How to fix

Upgrade to a fixed version: Node.js 10.12.0, 11.3.0; Oracle Corporation VM VirtualBox 5.2.24, 6.0.0. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/105750
• http://www.securitytracker.com/id/1041986
• https://access.redhat.com/errata/RHSA-2019:3700
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4
• https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html
• https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/
• https://security.netapp.com/advisory/ntap-20181105-0002/
• https://usn.ubuntu.com/3840-1/
• https://www.debian.org/security/2018/dsa-4348
• https://www.openssl.org/news/secadv/20181029.txt
• https://www.oracle.com/security-alerts/cpujan2020.html

Get alerted when CVE-2018-0735 or the next vulnerability affects your stack