Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2018-0735
Description:The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
Test IDs: 1.3.6.1.4.1.25623.1.0.112408   1.3.6.1.4.1.25623.1.0.891586   1.3.6.1.4.1.25623.1.0.112409   1.3.6.1.4.1.25623.1.1.2.2019.1981  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-0735
BugTraq ID: 105750
http://www.securityfocus.com/bid/105750
Debian Security Information: DSA-4348 (Google Search)
https://www.debian.org/security/2018/dsa-4348
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html
RedHat Security Advisories: RHSA-2019:3700
https://access.redhat.com/errata/RHSA-2019:3700
http://www.securitytracker.com/id/1041986
https://usn.ubuntu.com/3840-1/




© 1998-2025 E-Soft Inc. All rights reserved.