Skip to content
OpenAdvisories
Unscored DLA-1449-1 2 CVEs

openssl - security update

Published Jul 28, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 openssl 1.0.1t-1+deb8u9

Vulnerabilities 2

  • Unscored —
    CVE-2018-0732 EPSS 47%

    Client DoS due to large DH parameter

    During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a …

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0737 EPSS 12%

    Cache timing vulnerability in RSA Key Generation

    The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in Open…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine