VDB
ALPINE-CVE-2018-0734
ALPINE-CVE-2018-0734
PUBLISHED
CVSS 5.900000095367432 MEDIUM
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.13 | openssl | 0, 1.1.1-r2, 1.1.1-r4 |
| Alpine:v3.8 | openssl | 1.0.1, 1.0.1, 1.0.1 |
| Alpine:v3.15 | openssl3 | 0, 1.1.1-r5, 1.1.1-r4 |
| Alpine:v3.17 | nodejs | 6.9.2-r0, 6.9.1-r0, 6.11.5-r0 |
| Alpine:v3.20 | openssl | 1.1.1-r3, 1.1.1-r4, 0 |
| Alpine:v3.21 | openssl | 1.1.1-r3, 1.1.1-r4, 1.1.1-r5 |
| Alpine:v3.16 | openssl | 1.0.2, 0, 0 |
| Alpine:v3.18 | nodejs | 4.4.3-r0, 4.4.4-r0, 4.4.5-r0 |
| Alpine:v3.19 | openssl | 1.1.1-r2, 0, 1.1.1-r5 |
| Alpine:v3.18 | openssl | 1.1.1-r5, 1.1.1-r3, 1.1.1-r1 |
| Alpine:v3.12 | nodejs | 8.11.1-r2, 8.9.1-r0, 8.11.1-r0 |
| Alpine:v3.13 | nodejs | 6.11.1-r0, 6.11.0-r0, 6.10.3-r0 |
| Alpine:v3.6 | openssl | *, 1.0.1-r0, * |
| Alpine:v3.11 | nodejs | 6.11.1-r2, 6.11.5-r0, 6.10.3-r0 |
| Alpine:v3.12 | openssl | 1.1.1-r3, 1.1.1-r2, 1.1.1-r1 |
| Alpine:v3.9 | nodejs | 8.11.0-r0, 0, 10.13.0-r0 |
| Alpine:v3.21 | nodejs | 0, 0, 0 |
| Alpine:v3.10 | openssl | 1.1.1-r2, 1.0.2, 0 |
| Alpine:v3.11 | openssl | 1.1.1-r2, 1.1.1-r3, 1.1.1-r4 |
| Alpine:v3.5 | openssl | 0, 0, 0.9.8i-r0 |
…and 20 more
Timeline
- Oct 30, 2018 CVE Published
- Apr 30, 2026 Distribution Patch
- Jul 8, 2026 CVE Updated