VDB
BDU%3A2019-00186
BDU%3A2019-00186
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость библиотеки OpenSSL, связанная с ошибками обработки криптографических ключей при использовании протокола DH (E), позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., ООО «РусБИТех-Астра», Oracle Corp., Red Hat Inc., Сообщество свободного программного обеспечения, Novell Inc., OpenSSL Software Foundation, Fedora Project, Node.js Foundation, IBM Corp., ООО «Ред Софт», Juniper Networks Inc., ООО «Открытая мобильная платформа» | Ubuntu, Astra Linux Special Edition (запись в едином реестре российских программ №369), API Gateway, Red Hat Enterprise Linux, Debian GNU/Linux, OpenSUSE Leap, Enterprise Manager Ops Center, JD Edwards EnterpriseOne Tools, OpenSSL, VM VirtualBox, Tuxedo, PeopleSoft Enterprise PeopleTools, Primavera P6 Enterprise Project Portfolio Management, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Linux Enterprise Software Development Kit, SUSE OpenStack Cloud, Suse Linux Enterprise Server, Fedora, Node.js, SUSE Linux Enterprise Module for Web Scripting, Communications WebRTC Session Controller, Communications Application Session Controller, Agile Engineering Data Management, Enterprise Manager Base Platform, Endeca Server, Communications EAGLE LNP Application Processor, Communications Operations Monitor, Communications Session Border Controller, Communications Unified Session Manager, Enterprise Communications Broker, Enterprise Session Border Controller, JD Edwards World Security, MySQL Workbench, OSS Support Tools, SUSE Linux Enterprise Module for Basesystem, SUSE Studio Onsite, SUSE Linux Enterprise Point of Sale, SUSE CaaS Platform, SUSE Linux Enterprise Module for Legacy Software, OpenStack Cloud Magnum Orchestration, Fujitsu M10-1, Fujitsu M10-4, Fujitsu M10-4S, Fujitsu M12-1, Fujitsu M12-2, Fujitsu M12-2S, JBoss Core Services, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Linux Enterprise High Performance Computing, Astra Linux Special Edition для «Эльбрус» (запись в едином реестре российских программ №11156), Communications Performance Intelligence Center (PIC) Software, Junos Space, ОС Аврора (запись в едином реестре российских программ №1543) |
Timeline
- Jan 22, 2019 CVE Published
- Feb 20, 2025 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2018:2552 url
- https://access.redhat.com/errata/RHSA-2018:2553 url
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3984ef0b72831da8b3ece4745cac4f8575b19098 url
- https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html url
- https://security.netapp.com/advisory/ntap-20181105-0001/ url
- https://usn.ubuntu.com/3692-1/ url
- https://www.debian.org/security/2018/dsa-4348 url
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html url
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://www.tenable.com/security/tns-2018-12 url
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=1212483 url
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=67111271 url
- https://wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16 url
- https://cve.omprussia.ru/bb4321 url
- https://www.openssl.org/news/secadv/20180612.txt advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html advisory
- https://www.oracle.com/security-alerts/cpuoct2019.html advisory
- https://www.oracle.com/security-alerts/cpuapr2019.html advisory
- https://www.oracle.com/security-alerts/cpujan2019.html advisory
…and 25 more