Skip to content
OpenAdvisories
Unscored USN-3611-1 1 CVE

openssl vulnerability

Published Mar 28, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenSSL incorrectly handled certain ASN.1 types. A
remote attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS openssl 1.0.1f-1ubuntu2.24
Ubuntu · 16.04 LTS 16.04:LTS openssl 1.0.2g-1ubuntu4.11

Vulnerabilities 1

  • Unscored —
    CVE-2018-0739 EPSS 19%

    Constructed ASN.1 types with a recursive definition could exceed the stack

    Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-0739