Skip to content
OpenAdvisories
Unscored RHSA-2018:3221 5 CVEs

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.2k-16.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.2k-16.el7

Vulnerabilities 5

  • Unscored —
    CVE-2017-3735 EPSS 21%

    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…

    OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0495

    Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can b…

    openssl openssl1.0 nss libgcrypt20 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0732 EPSS 47%

    Client DoS due to large DH parameter

    During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a …

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0737 EPSS 12%

    Cache timing vulnerability in RSA Key Generation

    The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in Open…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0739 EPSS 19%

    Constructed ASN.1 types with a recursive definition could exceed the stack

    Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1486144
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1548401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1561266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1568253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1585004
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1591100
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1591163
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1603597
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3221.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-3735
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3735
  • article
    https://www.openssl.org/news/secadv/20170828.txt
  • report
    https://access.redhat.com/security/cve/CVE-2018-0495
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0495
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0495
  • article
    https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
  • report
    https://access.redhat.com/security/cve/CVE-2018-0732
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0732
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0732
  • article
    https://www.openssl.org/news/secadv/20180612.txt
  • report
    https://access.redhat.com/security/cve/CVE-2018-0737
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0737
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0737
  • article
    http://www.openwall.com/lists/oss-security/2018/04/16/3
  • article
    https://www.openssl.org/news/secadv/20180416.txt
  • report
    https://access.redhat.com/security/cve/CVE-2018-0739
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0739
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0739
  • article
    https://www.openssl.org/news/secadv/20180327.txt