VDB
ALPINE-CVE-2018-0734
ALPINE-CVE-2018-0734
PUBLISHED
CVSS 5.900000095367432 MEDIUM
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.13 | openssl | 0, 1.0.2, 1.1.1-r3 |
| Alpine:v3.8 | openssl | 1.0.1c-r3, 1.0.0a-r1, 1.0.0a-r2 |
| Alpine:v3.15 | openssl3 | 1.1.1-r2, 1.1.1-r5, 0 |
| Alpine:v3.17 | nodejs | 6.10.1-r0, 6.10.0-r0, 4.5.0-r0 |
| Alpine:v3.20 | openssl | 1.1.1-r4, 1.1.1-r3, 1.1.1-r2 |
| Alpine:v3.21 | openssl | 1.1.1-r1, 1.0.2, 0 |
| Alpine:v3.16 | openssl | 1.0.2, 0, 0 |
| Alpine:v3.18 | nodejs | 0, 6.10.1-r0, 6.11.0-r0 |
| Alpine:v3.19 | openssl | 1.1.1-r0, 0, 1.1.1-r1 |
| Alpine:v3.18 | openssl | 0, 0, 1.1.1-r0 |
| Alpine:v3.12 | nodejs | 6.9.5-r0, 10.13.0-r0, 6.9.2-r0 |
| Alpine:v3.13 | nodejs | 4.5.0-r0, 6.9.5-r0, 4.4.4-r0 |
| Alpine:v3.6 | openssl | 1.0.2, 1.0.1c-r1, 1.0.1c-r2 |
| Alpine:v3.11 | nodejs | 0, 6.11.0-r0, 6.10.0-r0 |
| Alpine:v3.12 | openssl | 1.0.2, 1.1.1-r3, 1.1.1-r1 |
| Alpine:v3.9 | nodejs | 10.13.0-r0, 6.11.3-r0, 6.11.2-r0 |
| Alpine:v3.21 | nodejs | 0 |
| Alpine:v3.10 | openssl | 0, 1.0.2, 0 |
| Alpine:v3.11 | openssl | 1.0.2, 1.1.1-r1, 1.1.1-r2 |
| Alpine:v3.5 | openssl | 1.0.1c-r2, 1.0.1e-r0, 1.0.1e-r3 |
…and 20 more
Timeline
- Oct 30, 2018 CVE Published
- Jul 8, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch