{"schema_version":"1.7.5","id":"CVE-2018-0734","published":"2018-10-30T12:29:00.257Z","modified":"2026-07-08T05:50:09.216906741Z","related":["SUSE-FU-2022:0445-1","SUSE-SU-2018:3863-1","SUSE-SU-2018:3864-1","SUSE-SU-2018:3864-2","SUSE-SU-2018:3866-1","SUSE-SU-2018:3945-1","SUSE-SU-2018:3964-1","SUSE-SU-2018:3989-1","SUSE-SU-2018:4001-1","SUSE-SU-2018:4068-1","SUSE-SU-2018:4274-1","SUSE-SU-2019:0117-1","SUSE-SU-2019:0395-1","SUSE-SU-2019:1553-1","openSUSE-SU-2019:1547-1","openSUSE-SU-2019:1814-1","openSUSE-SU-2024:11126-1","openSUSE-SU-2024:11127-1"],"details":"The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nodejs/node","events":[{"introduced":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"last_affected":"c6a397bce63fc026421e1515b98eec9b8b5a8468"},{"introduced":"6b1c40be84fbe5ea404f25e4e340a0c1fe67a60a"},{"fixed":"b6589e3d9be963b29a8559bf7b272b54284fe1bc"},{"introduced":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"last_affected":"dc6bbb44daec5584a0fbd37f0916baeff3202dba"},{"introduced":"f76ce0a75641991bfc235775a4747c978e0e281b"},{"fixed":"39716a8835a0ba61683974aef70e05ce7f8e414a"},{"introduced":"cf41627411886000429bde058a6594fb7f6d6d47"},{"last_affected":"4a276cc2a960b3f9a138ac3a99c9249a63b4d472"},{"introduced":"cea049bcf8bb0f9a6e0095dbd5dffdb14dc8f71b"},{"fixed":"00fb73a72eff0e90d0f85b95dbcfc3c21f89cff9"},{"introduced":"ab4af087e83d91a46354d765306d3543b1d85423"},{"last_affected":"ab4af087e83d91a46354d765306d3543b1d85423"}],"database_specific":{"cpe":["cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","cpe:2.3:a:nodejs:node.js:10.13.0:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"6.0.0"},{"last_affected":"6.8.1"},{"introduced":"6.9.0"},{"fixed":"6.15.0"},{"introduced":"8.0.0"},{"last_affected":"8.8.1"},{"introduced":"8.9.0"},{"fixed":"8.14.0"},{"introduced":"10.0.0"},{"last_affected":"10.12.0"},{"introduced":"11.0.0"},{"fixed":"11.3.0"},{"introduced":"10.13.0"},{"last_affected":"10.13.0"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["10.13.0","v6.14.4","v8.13.0","v11.2.0","v11.1.0","v10.13.0","v11.0.0","v10.12.0","v10.11.0","v8.12.0","v10.10.0","v10.9.0","v8.11.4","v10.8.0","v10.7.0","v10.6.0","v10.5.0","v10.4.1","v8.11.3","v6.14.3","v10.4.0","v10.3.0","v10.2.1","v10.2.0","v8.11.2","v10.1.0","v6.14.2","v10.0.0","v8.11.1","v6.14.1","v6.14.0","v8.11.0","v8.10.0","v6.13.1","v6.13.0","v8.9.4","v6.12.3","v8.9.3","v6.12.2","v8.9.2","v6.12.1","v8.9.1","v6.12.0","v8.9.0","v8.8.1","v6.11.5","v8.8.0","v8.7.0","v6.11.4","v8.6.0","v8.5.0","v6.11.3","v8.4.0","v8.3.0","v6.11.2","v8.2.1","v8.2.0","v8.1.4","v6.11.1","v8.1.3","v8.1.2","v8.1.1","v8.1.0","v6.11.0","v8.0.0","v6.10.3","v6.10.2","v6.10.1","v6.10.0","v6.9.5","v6.9.4","v6.9.3","v6.9.2","v6.9.1","v6.9.0","v6.8.1","v6.8.0","v6.7.0","v6.6.0","v6.5.0","v6.4.0","v6.3.1","v6.3.0","v6.2.2","v6.2.1","v6.2.0","v6.1.0","v6.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0734.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"last_affected":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"introduced":"7ea5bd2b52d0e81eaef3d109b3b12545306f201c"},{"last_affected":"7ea5bd2b52d0e81eaef3d109b3b12545306f201c"},{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"last_affected":"e04bd3433fd84e1861bf258ea37928d9845e6a86"}],"database_specific":{"cpe":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.0.2"},{"last_affected":"1.0.2p"},{"introduced":"1.1.0"},{"last_affected":"1.1.0i"},{"introduced":"1.1.1"},{"last_affected":"1.1.1"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["1.1.1","OpenSSL_1_1_1w","OpenSSL_1_0_2u","OpenSSL_1_1_0l"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0734.json"}}],"references":[{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac"},{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f"},{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/105758"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2304"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3700"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3932"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3933"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3935"},{"type":"ADVISORY","url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20181105-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190118-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190423-0002/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3840-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4348"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4355"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20181030.txt"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpuapr2020.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2018-16"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2018-17"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:oracle:mysql_enterprise_backup:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"3.0"},{"last_affected":"3.12.3"},{"introduced":"4.0"},{"last_affected":"4.1.2"}],"source":"CPE_RANGE","vendor_product":"oracle:mysql_enterprise_backup"},{"cpes":["cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"17.7"},{"last_affected":"17.12"}],"source":"CPE_RANGE","vendor_product":"oracle:primavera_p6_professional_project_management"},{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"},{"introduced":"18.10"},{"last_affected":"18.10"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"},{"cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"cpes":["cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.4.0"},{"last_affected":"11.1.2.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:api_gateway"},{"cpes":["cpe:2.3:a:oracle:e-business_suite_technology_stack:0.9.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:e-business_suite_technology_stack:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:e-business_suite_technology_stack:1.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.9.8"},{"last_affected":"0.9.8"},{"introduced":"1.0.0"},{"last_affected":"1.0.0"},{"introduced":"1.0.1"},{"last_affected":"1.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:e-business_suite_technology_stack"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0.5.0"},{"last_affected":"12.1.0.5.0"},{"introduced":"13.2.0.0.0"},{"last_affected":"13.2.0.0.0"},{"introduced":"13.3.0.0.0"},{"last_affected":"13.3.0.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_base_platform"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.3.3"},{"last_affected":"12.3.3"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_ops_center"},{"cpes":["cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.55"},{"last_affected":"8.55"},{"introduced":"8.56"},{"last_affected":"8.56"},{"introduced":"8.57"},{"last_affected":"8.57"}],"source":"CPE_STRING","vendor_product":"oracle:peoplesoft_enterprise_peopletools"},{"cpes":["cpe:2.3:a:oracle:primavera_p6_professional_project_management:15.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:primavera_p6_professional_project_management:15.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:primavera_p6_professional_project_management:16.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:primavera_p6_professional_project_management:16.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:primavera_p6_professional_project_management:18.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:primavera_p6_professional_project_management:8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.4"},{"last_affected":"8.4"},{"introduced":"15.1"},{"last_affected":"15.1"},{"introduced":"15.2"},{"last_affected":"15.2"},{"introduced":"16.1"},{"last_affected":"16.1"},{"introduced":"16.2"},{"last_affected":"16.2"},{"introduced":"18.8"},{"last_affected":"18.8"}],"source":"CPE_STRING","vendor_product":"oracle:primavera_p6_professional_project_management"},{"cpes":["cpe:2.3:a:oracle:tuxedo:12.1.1.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.1.0.0"},{"last_affected":"12.1.1.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:tuxedo"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}