Skip to content
OpenAdvisories
Medium ELSA-2018-3221 5 CVEs

Moderate: openssl security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 5, 2018 · Updated Nov 5, 2018

Ecosystem: Oracle Linux

Summary

[1.0.2k-16.0.1]
- sha256 is used for the RSA pairwise consistency test instead of sha1

[1.0.2k-16]
- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)

[1.0.2k-14]
- ppc64le is not multilib architecture (#1585004)

[1.0.2k-13]
- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 openssl 1:1.0.2k-16.0.1.el7
Oracle Linux · 7 openssl-devel 1:1.0.2k-16.0.1.el7
Oracle Linux · 7 openssl-libs 1:1.0.2k-16.0.1.el7
Oracle Linux · 7 openssl-perl 1:1.0.2k-16.0.1.el7
Oracle Linux · 7 openssl-static 1:1.0.2k-16.0.1.el7

Vulnerabilities 5

  • Unscored —
    CVE-2017-3735 EPSS 21%

    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…

    OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0495

    Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can b…

    openssl openssl1.0 nss libgcrypt20 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0732 EPSS 47%

    Client DoS due to large DH parameter

    During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a …

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0737 EPSS 12%

    Cache timing vulnerability in RSA Key Generation

    The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in Open…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0739 EPSS 19%

    Constructed ASN.1 types with a recursive definition could exceed the stack

    Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine