CVE-2018-0732
published 2018-06-12CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the…
PriorityP357high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
47.01%
98.8th percentile
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | openssl | < openssl 1.1.1-1 (bookworm) | openssl 1.1.1-1 (bookworm) |
| nodejs | node.js | >= 10.0.0 < 10.9.0 | 10.9.0 |
| nodejs | node.js | >= 6.0.0 < 6.8.1 | 6.8.1 |
| nodejs | node.js | >= 6.9.0 < 6.14.4 | 6.14.4 |
| nodejs | node.js | >= 8.0.0 < 8.8.1 | 8.8.1 |
| nodejs | node.js | >= 8.9.0 < 8.11.4 | 8.11.4 |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | >= 0 < 1.1.1-1 | 1.1.1-1 |
| openssl | openssl | >= 0 < 1.1.1-1 | 1.1.1-1 |
| openssl | openssl | >= 0 < 1.1.1-1 | 1.1.1-1 |
| openssl | openssl | >= 0 < 1.1.1-1 | 1.1.1-1 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.26 | 1.0.1f-1ubuntu2.26 |
| openssl | openssl | >= 0 < 1.0.2g-1ubuntu4.13 | 1.0.2g-1ubuntu4.13 |
| openssl | openssl | >= 0 < 1.1.0g-2ubuntu4.1 | 1.1.0g-2ubuntu4.1 |
| openssl | openssl | 1.0.2 – 1.0.2o | — |
| openssl | openssl | 1.1.0 – 1.1.0h | — |
| paloalto | pan-os | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →CVE-2018-0732 is exploitable during a TLS handshake using a DH(E)-based ciphersuite: a malicious server sends a very large prime value to the client, causing the client to hang (DoS). Monitor for abnormally long TLS handshake durations or client hangs when connecting to untrusted servers using DHE cipher suites. ↗
- →No known public exploits specifically target this vulnerability, reducing active exploitation risk but not eliminating the need for patching and network-level controls. ↗
- ·Affected OpenSSL versions are 1.1.0 through 1.1.0h (fixed in 1.1.0i-dev) and 1.0.2 through 1.0.2o (fixed in 1.0.2p-dev). Detection/patching scope should target these version ranges. ↗
- ·The vulnerability is client-side: only clients initiating TLS connections to malicious servers using DHE cipher suites are at risk. Servers are not directly vulnerable. ↗
- ·Siemens TIM 1531 IRC (all versions prior to v2.2) is a confirmed affected ICS product. ICS environments should prioritize updating to v2.2 or later and restrict network access. ↗
- ·Red Hat Enterprise Linux 8 openssl package is not affected; RHEL 5, 6, 7 packages are marked 'Will not fix', meaning patching via Red Hat channels may not be available for those versions. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
vendor_ubuntu4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle Communications Application Session Controller 3.7.1/3.8.0 OpenSSL denial of service (ID 157823 / BID-107666)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Communications Application Session Controller 3.7.1/3.8.0 OpenSSL denial of service (ID 157823 / BID-107666)
A vulnerability, which was classified as critical, has been found in Oracle Communications Application Session Controller 3.7.1/3.8.0. This impacts an unknown function of the component OpenSSL. The manipulation leads to denial of service.
This vulnerability is referenced as CVE-2018-0732. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.
VulDB
Oracle Tuxedo 12.1.1.0 Docs-ATMI-IB key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Tuxedo 12.1.1.0 Docs-ATMI-IB key management (Nessus ID 117450 / ID 157823)
A vulnerability has been found in Oracle Tuxedo 12.1.1.0 and classified as critical. Affected is an unknown function of the component Docs-ATMI-IB. This manipulation causes key management error.
This vulnerability appears as CVE-2018-0732. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
VulDB
Oracle OSS Support Tools up to 19.0 Services Tools Bundle key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle OSS Support Tools up to 19.0 Services Tools Bundle key management (Nessus ID 117450 / ID 157823)
A vulnerability was found in Oracle OSS Support Tools up to 19.0. It has been rated as critical. This affects an unknown part of the component Services Tools Bundle. This manipulation causes key management error.
This vulnerability appears as CVE-2018-0732. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is advised.
VulDB
Oracle Primavera P6 Enterprise Project Portfolio Management jackson-databind key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Primavera P6 Enterprise Project Portfolio Management jackson-databind key management (Nessus ID 117450 / ID 157823)
A vulnerability was found in Oracle Primavera P6 Enterprise Project Portfolio Management up to 18.8 and classified as critical. This impacts an unknown function of the component jackson-databind. Executing a manipulation can lead to key management error.
This vulnerability is registered as CVE-2018-0732. It is possible to launch the attack remotely. No exploit is available.
It is suggested to upgrade the affected component.
VulDB
OpenSSL up to 1.0.2o/1.1.0h TLS Handshake key management (RHSA-2018:2552 / Nessus ID 110878)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] OpenSSL up to 1.0.2o/1.1.0h TLS Handshake key management (RHSA-2018:2552 / Nessus ID 110878)
A vulnerability classified as problematic has been found in OpenSSL up to 1.0.2o/1.1.0h. Impacted is an unknown function of the component TLS Handshake. This manipulation causes key management error.
This vulnerability is tracked as CVE-2018-0732. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to install a patch to address this issue.
VulDB
Oracle Enterprise Session Border Controller ECz7.4.0/ECz7.5.0/ECz8.0.0/ECz8.1.0 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Enterprise Session Border Controller ECz7.4.0/ECz7.5.0/ECz8.0.0/ECz8.1.0 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability, which was classified as critical, has been found in Oracle Enterprise Session Border Controller ECz7.4.0/ECz7.5.0/ECz8.0.0/ECz8.1.0. The affected element is an unknown function of the component OpenSSL. This manipulation causes key management error.
This vulnerability is tracked as CVE-2018-0732. The attack is possible to be carried out remotely. No exploit exists.
It is advisable to upgrade the affected component.
VulDB
Oracle Communications Session Border Controller SCz7.4.0/SCz7.4.1/SCz8.0.0/SCz8.1.0 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Communications Session Border Controller SCz7.4.0/SCz7.4.1/SCz8.0.0/SCz8.1.0 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability marked as critical has been reported in Oracle Communications Session Border Controller SCz7.4.0/SCz7.4.1/SCz8.0.0/SCz8.1.0. This affects an unknown part of the component OpenSSL. Performing a manipulation results in key management error.
This vulnerability was named CVE-2018-0732. The attack may be initiated remotely. There is no available exploit.
It is suggested to upgrade the affected component.
VulDB
Oracle Agile Engineering Data Management 6.1.3/6.2.0/6.2.1 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Agile Engineering Data Management 6.1.3/6.2.0/6.2.1 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability has been found in Oracle Agile Engineering Data Management 6.1.3/6.2.0/6.2.1 and classified as critical. This impacts an unknown function of the component OpenSSL. Performing a manipulation results in key management error.
This vulnerability is cataloged as CVE-2018-0732. It is possible to initiate the attack remotely. There is no exploit available.
The affected component should be upgraded.
VulDB
Oracle MySQL Enterprise Monitor up to 4.0.7/8.0.13 Monitoring key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle MySQL Enterprise Monitor up to 4.0.7/8.0.13 Monitoring key management (Nessus ID 117450 / ID 157823)
A vulnerability identified as problematic has been detected in Oracle MySQL Enterprise Monitor up to 4.0.7/8.0.13. This vulnerability affects unknown code of the component Monitoring. This manipulation causes key management error.
The identification of this vulnerability is CVE-2018-0732. The attack can only be executed locally. There is no exploit available.
You should upgrade the affected component.
VulDB
Oracle Enterprise Manager Base Platform 12.1.0.5/13.2.0/13.3.0 Bouncy Castle Java Library key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Enterprise Manager Base Platform 12.1.0.5/13.2.0/13.3.0 Bouncy Castle Java Library key management (Nessus ID 117450 / ID 157823)
A vulnerability described as critical has been identified in Oracle Enterprise Manager Base Platform 12.1.0.5/13.2.0/13.3.0. This impacts an unknown function of the component Bouncy Castle Java Library. Such manipulation leads to key management error.
This vulnerability is uniquely identified as CVE-2018-0732. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
VulDB
Oracle API Gateway 11.1.2.4.0 Apache Batik key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle API Gateway 11.1.2.4.0 Apache Batik key management (Nessus ID 117450 / ID 157823)
A vulnerability classified as critical has been found in Oracle API Gateway 11.1.2.4.0. Impacted is an unknown function of the component Apache Batik. This manipulation causes key management error.
This vulnerability is handled as CVE-2018-0732. The attack can be initiated remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
VulDB
Oracle Endeca Server 7.7.0 libssh key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Endeca Server 7.7.0 libssh key management (Nessus ID 117450 / ID 157823)
A vulnerability, which was classified as critical, has been found in Oracle Endeca Server 7.7.0. The impacted element is an unknown function of the component libssh. Performing a manipulation results in key management error.
This vulnerability was named CVE-2018-0732. The attack may be initiated remotely. There is no available exploit.
It is advisable to upgrade the affected component.
VulDB
Oracle Communications EAGLE LNP Application Processor 10.0/10.1/10.2 OpenSSL denial of service (ID 157823 / BID-107666)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Communications EAGLE LNP Application Processor 10.0/10.1/10.2 OpenSSL denial of service (ID 157823 / BID-107666)
A vulnerability, which was classified as critical, was found in Oracle Communications EAGLE LNP Application Processor 10.0/10.1/10.2. Affected is an unknown function of the component OpenSSL. The manipulation results in denial of service.
This vulnerability is identified as CVE-2018-0732. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
VulDB
Oracle Communications Operations Monitor 3.4/4.0 OpenSSL denial of service (ID 157823 / BID-107666)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Communications Operations Monitor 3.4/4.0 OpenSSL denial of service (ID 157823 / BID-107666)
A vulnerability was found in Oracle Communications Operations Monitor 3.4/4.0 and classified as critical. Affected by this issue is some unknown functionality of the component OpenSSL. Such manipulation leads to denial of service.
This vulnerability is listed as CVE-2018-0732. The attack may be performed from remote. There is no available exploit.
It is suggested to upgrade the affected component.
VulDB
Oracle Diameter Signaling Router (DSR) 8.0/8.1/8.2/8.3 OpenSSL key management (Nessus ID 117450 / ID 371266)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Diameter Signaling Router (DSR) 8.0/8.1/8.2/8.3 OpenSSL key management (Nessus ID 117450 / ID 371266)
A vulnerability has been found in Oracle Diameter Signaling Router (DSR) 8.0/8.1/8.2/8.3 and classified as critical. This issue affects some unknown processing of the component OpenSSL. Performing a manipulation results in key management error.
This vulnerability is cataloged as CVE-2018-0732. It is possible to initiate the attack remotely. There is no exploit available.
The affected component should be upgraded.
VulDB
Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56/8.57 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56/8.57 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability classified as critical has been found in Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56/8.57. The impacted element is an unknown function of the component OpenSSL. The manipulation leads to key management error.
This vulnerability is listed as CVE-2018-0732. The attack may be initiated remotely. There is no available exploit.
It is recommended to upgrade the affected component.
VulDB
Oracle Communications Unified Session Manager SCz7.3.5 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Communications Unified Session Manager SCz7.3.5 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability described as critical has been identified in Oracle Communications Unified Session Manager SCz7.3.5. This vulnerability affects unknown code of the component OpenSSL. Executing a manipulation can lead to key management error.
The identification of this vulnerability is CVE-2018-0732. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is recommended.
VulDB
Oracle JD Edwards EnterpriseOne Tools 9.2 Enterprise Infrastructure SEC denial of service (ID 157823 / BID-107666)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle JD Edwards EnterpriseOne Tools 9.2 Enterprise Infrastructure SEC denial of service (ID 157823 / BID-107666)
A vulnerability identified as critical has been detected in Oracle JD Edwards EnterpriseOne Tools 9.2. This vulnerability affects unknown code of the component Enterprise Infrastructure SEC. Performing a manipulation results in denial of service.
This vulnerability was named CVE-2018-0732. The attack may be initiated remotely. There is no available exploit.
You should upgrade the affected component.
VulDB
Oracle MySQL Workbench up to 8.0.13 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle MySQL Workbench up to 8.0.13 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability labeled as critical has been found in Oracle MySQL Workbench up to 8.0.13. This impacts an unknown function of the component OpenSSL. Executing a manipulation can lead to key management error.
This vulnerability is tracked as CVE-2018-0732. The attack can be launched remotely. No exploit exists.
The affected component should be upgraded.
VulDB
Oracle Enterprise Manager Ops Center 12.2.2/12.3.3 Jasper Project key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Enterprise Manager Ops Center 12.2.2/12.3.3 Jasper Project key management (Nessus ID 117450 / ID 157823)
A vulnerability classified as critical was found in Oracle Enterprise Manager Ops Center 12.2.2/12.3.3. Affected by this vulnerability is an unknown functionality of the component Jasper Project. Executing a manipulation can lead to key management error.
The identification of this vulnerability is CVE-2018-0732. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is advised.
VulDB
Oracle Communications WebRTC Session Controller up to 7.1 jQuery FileUpload key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Communications WebRTC Session Controller up to 7.1 jQuery FileUpload key management (Nessus ID 117450 / ID 157823)
A vulnerability classified as critical has been found in Oracle Communications WebRTC Session Controller up to 7.1. This issue affects some unknown processing of the component jQuery FileUpload. The manipulation leads to key management error.
This vulnerability is referenced as CVE-2018-0732. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
VulDB
Oracle VM VirtualBox up to 5.2.19 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle VM VirtualBox up to 5.2.19 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability, which was classified as critical, has been found in Oracle VM VirtualBox up to 5.2.19. Affected by this issue is some unknown functionality of the component OpenSSL. This manipulation causes key management error.
This vulnerability is registered as CVE-2018-0732. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.
VulDB
Oracle JD Edwards World Security A9.3/A9.3.1/A9.4 OpenSSL key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle JD Edwards World Security A9.3/A9.3.1/A9.4 OpenSSL key management (Nessus ID 117450 / ID 157823)
A vulnerability was found in Oracle JD Edwards World Security A9.3/A9.3.1/A9.4. It has been rated as critical. The affected element is an unknown function of the component OpenSSL. This manipulation causes key management error.
The identification of this vulnerability is CVE-2018-0732. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
VulDB
Oracle Enterprise Communications Broker PCz2.1/PCz2.2/PCz3.0 jackson-databind key management (Nessus ID 117450 / ID 157823)
vuldb·2026-10-10·CVSS 7.5
CVE-2018-0732 [HIGH] Oracle Enterprise Communications Broker PCz2.1/PCz2.2/PCz3.0 jackson-databind key management (Nessus ID 117450 / ID 157823)
A vulnerability classified as critical was found in Oracle Enterprise Communications Broker PCz2.1/PCz2.2/PCz3.0. Impacted is an unknown function of the component jackson-databind. The manipulation results in key management error.
This vulnerability is identified as CVE-2018-0732. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
GHSA
GHSA-497c-86pp-222m: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client
ghsa_unreviewed·2022-05-13
CVE-2018-0732 [HIGH] GHSA-497c-86pp-222m: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
OSV
openssl, openssl1.0 vulnerabilities
osv·2018-06-26·CVSS 4.7
CVE-2018-0495 [MEDIUM] openssl, openssl1.0 vulnerabilities
openssl, openssl1.0 vulnerabilities
Keegan Ryan discovered that OpenSSL incorrectly handled ECDSA key
generation. An attacker could possibly use this issue to perform a
cache-timing attack and recover private ECDSA keys. (CVE-2018-0495)
Guido Vranken discovered that OpenSSL incorrectly handled very large prime
values during a key agreement. A remote attacker could possibly use this
issue to consume resources, leading to a denial of service. (CVE-2018-0732)
Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis
Manuel Alvarez Tapia discovered that OpenSSL incorrectly handled RSA key
generation. An attacker could possibly use this issue to perform a
cache-timing attack and recover private RSA keys. (CVE-2018-0737)
OSV
CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client
osv·2018-06-12·CVSS 7.5
CVE-2018-0732 [HIGH] CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
CISA ICS
Siemens TIM 1531 IRC
cisa_ics·2021-06-08·CVSS 7.5
[HIGH] Siemens TIM 1531 IRC
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens TIM 1531 IRC
Last RevisedJune 08, 2021
Alert CodeICSA-21-159-08
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: TIM 1531 IRC
- Vulnerability: Uncontrolled Resource Consumption
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following Siemens products are affected:
- TIM 1531 IRC (incl. SIPLUS NET variants): All versions prior to v2.2
## 3.2 VUL
Palo Alto
PAN-SA-2018-0015 OpenSSL Vulnerabilities in PAN-OS
vendor_paloalto·2018-10-12·CVSS 7.5
CVE-2018-0732 [HIGH] CWE-320 PAN-SA-2018-0015 OpenSSL Vulnerabilities in PAN-OS
PAN-SA-2018-0015 OpenSSL Vulnerabilities in PAN-OS
The OpenSSL library has been found to contain vulnerabilities CVE-2018-0732, CVE-2018-0737, and CVE-2018-0739. Palo Alto Networks software makes use of the vulnerable library and is
CVEs: CVE-2018-0732, CVE-2018-0737, CVE-2018-0739
Affected products: PAN-OS
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2018-06-26·CVSS 4.7
CVE-2018-0495 [MEDIUM] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
Keegan Ryan discovered that OpenSSL incorrectly handled ECDSA key
generation. An attacker could possibly use this issue to perform a
cache-timing attack and recover private ECDSA keys. (CVE-2018-0495)
Guido Vranken discovered that OpenSSL incorrectly handled very large prime
values during a key agreement. A remote attacker could possibly use this
issue to consume resources, leading to a denial of service. (CVE-2018-0732)
Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis
Manuel Alvarez Tapia discovered that OpenSSL incorrectly handled RSA key
generation. An attacker could possibly use this issue to perform a
cache-timing attack and recover private RSA keys. (CVE-2018-0737)
Instru
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2018-06-26·CVSS 4.7
CVE-2018-0495 [MEDIUM] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
USN-3692-1 fixed a vulnerability in OpenSSL. This update provides
the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
Keegan Ryan discovered that OpenSSL incorrectly handled ECDSA key
generation. An attacker could possibly use this issue to perform a
cache-timing attack and recover private ECDSA keys. (CVE-2018-0495)
Guido Vranken discovered that OpenSSL incorrectly handled very large prime
values during a key agreement. A remote attacker could possibly use this
issue to consume resources, leading to a denial of service. (CVE-2018-0732)
Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis
Manuel Alvarez Tapia discovered that OpenSSL incorrectly handled RSA ke
Red Hat
openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang
vendor_redhat·2018-06-12·CVSS 7.5
CVE-2018-0732 [HIGH] CWE-325 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang
openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
Package: openssl (Red Hat Enterprise Linux 5) - Will not fix
Package: openssl097a (Red Hat Enterprise Linux 5) - Will not fix
Package: openssl (Red Hat Enterprise Linux 6) - Will not fix
Package: openssl098e (Red Hat Enterprise
Debian
CVE-2018-0732: openssl - During key agreement in a TLS handshake using a DH(E) based ciphersuite a malici...
vendor_debian·2018·CVSS 7.5
CVE-2018-0732 [HIGH] CVE-2018-0732: openssl - During key agreement in a TLS handshake using a DH(E) based ciphersuite a malici...
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).
Scope: local
bookworm: resolved (fixed in 1.1.1-1)
bullseye: resolved (fixed in 1.1.1-1)
forky: resolved (fixed in 1.1.1-1)
sid: resolved (fixed in 1.1.1-1)
trixie: resolved (fixed in 1.1.1-1)
No detection rules found.
No public exploits indexed.
HackerOne
Client DoS due to large DH parameter (CVE-2018-0732)
hackerone·2018-09-20·CVSS 7.5
CVE-2018-0732 [HIGH] Client DoS due to large DH parameter (CVE-2018-0732)
Client DoS due to large DH parameter (CVE-2018-0732)
https://www.openssl.org/news/secadv/20180612.txt
```
OpenSSL Security Advisory [12 June 2018]
Client DoS due to large DH parameter (CVE-2018-0732)
Severity: Low
During key agreement in a TLS handshake using a DH(E) based ciphersuite a
malicious server can send a very large prime value to the client. This will
cause the client to spend an unreasonably long period of time generating a key
for this prime resulting in a hang until the client has finished. This could be
exploited in a Denial Of Service attack.
Due to the low severity of this issue we are not issuing a new release of
OpenSSL 1.1.0 or 1.0.2 at this time. The fix will be included in OpenSSL 1.1.0i
and OpenSSL 1.0.2p when they become available. The fix is also available in
Bugzilla
CVE-2018-0732 mingw-openssl: openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang [fedora-all]
bugzilla·2018-06-14·CVSS 7.5
CVE-2018-0732 [HIGH] CVE-2018-0732 mingw-openssl: openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang [fedora-all]
CVE-2018-0732 mingw-openssl: openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
f
Bugzilla
CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang
bugzilla·2018-06-14·CVSS 7.5
CVE-2018-0732 [HIGH] CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang
CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang
OpenSSL versions 1.1.0 to 1.1.0h and 1.0.2 to 1.0.2o allow malicious servers to send very large primes to a client during DH(E) based TLS handshakes. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack.
External Reference:
https://www.openssl.org/news/secadv/20180612.txt
Upstream Patches:
https://github.com/openssl/openssl/commit/ea7abeeabf92b7aca160bdd0208636d4da69f4f4
https://github.com/openssl/openssl/commit/3984ef0b72831da8b3ece4745cac4f8575b19098
Discussion:
Created mingw-openssl tracking bugs for t
Bugzilla
CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang [fedora-all]
bugzilla·2018-06-14·CVSS 7.5
CVE-2018-0732 [HIGH] CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang [fedora-all]
CVE-2018-0732 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit me
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlhttp://www.securityfocus.com/bid/104442http://www.securitytracker.com/id/1041090https://access.redhat.com/errata/RHSA-2018:2552https://access.redhat.com/errata/RHSA-2018:2553https://access.redhat.com/errata/RHSA-2018:3221https://access.redhat.com/errata/RHSA-2018:3505https://access.redhat.com/errata/RHSA-2019:1296https://access.redhat.com/errata/RHSA-2019:1297https://access.redhat.com/errata/RHSA-2019:1543https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdfhttps://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4https://lists.debian.org/debian-lts-announce/2018/07/msg00043.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/https://security.gentoo.org/glsa/201811-03https://security.netapp.com/advisory/ntap-20181105-0001/https://security.netapp.com/advisory/ntap-20190118-0002/https://securityadvisories.paloaltonetworks.com/Home/Detail/133https://usn.ubuntu.com/3692-1/https://usn.ubuntu.com/3692-2/https://www.debian.org/security/2018/dsa-4348https://www.debian.org/security/2018/dsa-4355https://www.openssl.org/news/secadv/20180612.txthttps://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlhttps://www.tenable.com/security/tns-2018-12https://www.tenable.com/security/tns-2018-13https://www.tenable.com/security/tns-2018-14https://www.tenable.com/security/tns-2018-17http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlhttp://www.securityfocus.com/bid/104442http://www.securitytracker.com/id/1041090https://access.redhat.com/errata/RHSA-2018:2552https://access.redhat.com/errata/RHSA-2018:2553https://access.redhat.com/errata/RHSA-2018:3221https://access.redhat.com/errata/RHSA-2018:3505https://access.redhat.com/errata/RHSA-2019:1296https://access.redhat.com/errata/RHSA-2019:1297https://access.redhat.com/errata/RHSA-2019:1543https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdfhttps://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4https://lists.debian.org/debian-lts-announce/2018/07/msg00043.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/https://security.gentoo.org/glsa/201811-03https://security.netapp.com/advisory/ntap-20181105-0001/https://security.netapp.com/advisory/ntap-20190118-0002/https://securityadvisories.paloaltonetworks.com/Home/Detail/133https://usn.ubuntu.com/3692-1/https://usn.ubuntu.com/3692-2/https://www.debian.org/security/2018/dsa-4348https://www.debian.org/security/2018/dsa-4355https://www.openssl.org/news/secadv/20180612.txthttps://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlhttps://www.tenable.com/security/tns-2018-12https://www.tenable.com/security/tns-2018-13https://www.tenable.com/security/tns-2018-14https://www.tenable.com/security/tns-2018-17
2018-06-12
Published