Description
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL Software Foundation | OpenSSL | 1.0.2-1.02m, 1.1.0-1.1.0g | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 1.1.0h-1 | — |
| Debian 13 | openssl | 1.1.0h-1 | — |
| Debian 12 | openssl | 1.1.0h-1 | — |
| Debian 9 | openssl1.0 | 1.0.2l-2+deb9u2 | DSA-4065-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | openssl | 1.1.0g-2ubuntu3 | — |
| Ubuntu 16.04 LTS | openssl | 1.0.2g-1ubuntu4.10 | USN-3512-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | openssl +4 | 1:1.0.2k-12.el7 | RHSA-2018:0998 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss Core Services 1 | jbcs-httpd24-apache-commons-daemon | 1.1.0-1.redhat_2.1.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-apache-commons-daemon-jsvc | 1:1.1.0-1.redhat_2.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-apr +1 | 1.6.3-14.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-apr-util +8 | 1.6.1-9.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-httpd +6 | 2.4.29-17.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_auth_kerb | 5.4-36.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_bmx | 0.9.6-17.GA.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_cluster-native | 1.3.8-1.Final_redhat_2.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_jk +2 | 1.2.43-1.redhat_1.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_rt | 2.4.1-19.GA.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_security | 2.9.1-23.GA.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_ssl +1 | 1:2.4.29-17.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-nghttp2 +1 | 1.29.0-8.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-openssl +4 | 1:1.0.2n-11.jbcs.el6 | RHSA-2018:2186, RHSA-2018:2185 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | openssl | 1.0.2j-60.20.2 | SUSE-SU-2017:3343-1 |
| SLES 12 SP2 | openssl | 1.0.2j-60.20.2 | SUSE-SU-2017:3343-1 |
| SLES 12 | nodejs4 | 4.8.7-15.8.1 | SUSE-SU-2018:0002-1 |
| SLES 12 | nodejs6 | 6.12.2-11.8.1 | SUSE-SU-2018:0293-1 |
| SLES 11 SP4 | MozillaFirefox | 68.2.0-78.51.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | MozillaFirefox-branding-SLED | 68-21.9.8 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-atk | 2.26.1-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-cairo | 1.15.10-2.13.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gdk-pixbuf | 2.36.11-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-glib2 | 2.54.3-2.14.7 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gtk3 | 3.10.9-2.15.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-harfbuzz | 1.7.5-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi | 3.2.1.git259-2.3.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi-gcc5 | 5.3.1+r233831-14.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-pango | 1.40.14-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nspr | 4.21-29.6.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nss | 3.45-38.9.3 | SUSE-SU-2019:14246-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | openssl | 1.0.2j-60.20.2 | SUSE-SU-2017:3343-1 |
| SLES for SAP 12 SP2 | openssl | 1.0.2j-60.20.2 | SUSE-SU-2017:3343-1 |
| SUSE OpenStack Cloud 7 | nodejs6 | 6.12.2-11.8.1 | SUSE-SU-2018:0293-1 |
| SUSE Enterprise Storage 4 | nodejs4 | 4.8.7-15.8.1 | SUSE-SU-2018:0002-1 |
| SUSE Enterprise Storage 4 | nodejs6 | 6.12.2-11.8.1 | SUSE-SU-2018:0293-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_0_0 | 1.0.2u-6.2 | openSUSE-SU-2024:11126-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.8 | openssl | 1.0.2n-r0 | — |
| Alpine v3.7 | openssl | 1.0.2n-r0 | — |
| Alpine v3.6 | openssl | 1.0.2n-r0 | — |
| Alpine v3.5 | openssl | 1.0.2n-r0 | — |
| Alpine v3.4 | openssl | 1.0.2n-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.3 | openssl | 1.0.2n-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-12.amzn2.0.1 | ALAS2-2018-1004 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | openssl +4 | 1:1.0.2k-12.0.1.el7 | ELSA-2018-0998 |
Advisories 18
- RHSA-2018:2186 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 security update Red Hat Security Advisories (RHSA) · Sep 21, 2026
- RHSA-2018:2185 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update Red Hat Security Advisories (RHSA) · Sep 21, 2026
- RHSA-2018:0998 Red Hat Security Advisory: openssl security and bug fix update Red Hat Security Advisories (RHSA) · Sep 21, 2026
- USN-3512-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-4065-1 openssl1.0 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2017:3343-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0002-1 Security update for nodejs4 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0293-1 Security update for nodejs6 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:14246-1 Security update for Mozilla Firefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11126-1 libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-0205 OpenSSL: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 20, 2025
- WID-SEC-2025-1212 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 2, 2025
- VDE-2019-009 PHOENIX CONTACT: Multiple Vulnerabilities in AXC F 2152 CERT@VDE · May 22, 2025
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2023-1594 IBM Tivoli Network Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 28, 2023
- ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152 CISA ICS & IT advisories · Jun 4, 2019
- ALAS2-2018-1004 Moderate: openssl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 26, 2018
- ELSA-2018-0998 Moderate: openssl security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 16, 2018
References
- https://www.tenable.com/security/tns-2018-07
- https://www.tenable.com/security/tns-2018-04
- RHSA-2018:2185 vendor-advisory
- RHSA-2018:2186 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- FreeBSD-SA-17:12 vendor-advisory
- GLSA-201712-03 vendor-advisory
- 1039978 vdb-entry
- DSA-4157 vendor-advisory
- https://www.openssl.org/news/secadv/20171207.txt
- RHSA-2018:0998 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a
- https://www.tenable.com/security/tns-2018-06
- DSA-4065 vendor-advisory
- https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- 102118 vdb-entry
- https://www.tenable.com/security/tns-2017-16
- https://www.openssl.org/news/secadv/20180327.txt
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us
- RHSA-2018:2187 vendor-advisory
- https://security.netapp.com/advisory/ntap-20171208-0001/
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html