Skip to content
OpenAdvisories
Unscored RHSA-2018:3090 1 CVE

Red Hat Security Advisory: ovmf security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server AAVMF 0:20180508-3.gitee3198e672e2.el7
Red Hat · RHEL 7 enterprise_linux:7::server OVMF 0:20180508-3.gitee3198e672e2.el7
Red Hat · RHEL 7 enterprise_linux:7::server ovmf 0:20180508-3.gitee3198e672e2.el7

Vulnerabilities 1

  • Unscored —
    CVE-2018-0739 EPSS 19%

    Constructed ASN.1 types with a recursive definition could exceed the stack

    Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1561128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1561266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1577546
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1579518
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607792
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3090.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-0739
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0739
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0739
  • article
    https://www.openssl.org/news/secadv/20180327.txt