VDB
ALPINE-CVE-2018-0735
ALPINE-CVE-2018-0735
PUBLISHED
CVSS 5.900000095367432 MEDIUM
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.20 | nodejs | 8.11.4-r0, 0, 8.9.4-r0 |
| Alpine:v3.9 | openssl | 1.1.1-r5, 1.1.1-r4, 1.1.1-r1 |
| Alpine:v3.17 | openssl | 1.1.1-r2, 1.1.1-r3, 1.1.1-r4 |
| Alpine:v3.23 | nodejs | 0, 0, 0 |
| Alpine:v3.10 | openssl | 0, 1.1.0, 0 |
| Alpine:v3.19 | openssl | 1.1.1-r2, 1.1.1-r4, 1.1.1-r3 |
| Alpine:v3.12 | nodejs | 6.10.0-r0, 6.10.1-r0, 6.10.3-r0 |
| Alpine:v3.19 | nodejs | 8.9.0-r0, 8.11.0-r0, 8.11.0-r1 |
| Alpine:v3.13 | openssl | 0, 1.1.1-r5, 1.1.1-r3 |
| Alpine:v3.23 | openssl | 1.1.1-r3, 1.1.1-r0, 1.1.1-r1 |
| Alpine:v3.14 | openssl | 1.1.1-r5, 0, 1.1.1-r1 |
| Alpine:v3.15 | openssl3 | 0, 0, 0 |
| Alpine:v3.17 | nodejs | 6.9.2-r0, 0, 0 |
| Alpine:v3.15 | openssl | 0, 1.1.0, 0 |
| Alpine:v3.22 | openssl | 1.1.1-r2, 1.1.1-r4, 1.1.1-r1 |
| Alpine:v3.12 | openssl | 1.1.1-r1, 0, 1.1.1-r2 |
| Alpine:v3.11 | nodejs | 8.12.0-r0, 8.11.1-r2, 8.11.3-r0 |
| Alpine:v3.21 | openssl | 0, 1.1.1-r0, 1.1.1-r1 |
| Alpine:v3.16 | openssl | 0, 0, 0 |
| Alpine:v3.13 | nodejs | 6.11.5-r0, 10.13.0-r0, 4.4.3-r0 |
…and 14 more
Timeline
- Oct 29, 2018 CVE Published
- Apr 30, 2026 Distribution Patch
- Jul 8, 2026 CVE Updated