VDB
BDU%3A2019-01256
BDU%3A2019-01256
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость реализации алгоритма шифрования DSA (Digital Signature Algorithm) библиотеки OpenSSL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
7.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Oracle Corp., Red Hat Inc., Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», OpenSSL Software Foundation, Fedora Project, Node.js Foundation, Novell Inc., ООО «Открытая мобильная платформа» | Ubuntu, API Gateway, Red Hat Enterprise Linux, Debian GNU/Linux, Enterprise Manager Ops Center, VM VirtualBox, PeopleSoft Enterprise PeopleTools, MySQL, Astra Linux Special Edition (запись в едином реестре российских программ №369), Primavera P6 Enterprise Project Portfolio Management, OpenSSL, Fedora, Enterprise Manager Base Platform, Node.js, Tuxedo, Application Server, MySQL Enterprise Backup, OpenSUSE Leap, JBoss Core Services, Astra Linux Special Edition для «Эльбрус» (запись в едином реестре российских программ №11156), Oracle Communications Session Border Controller, Oracle Enterprise Session Border Controller, Communications Unified Session Manager, Oracle Communications Session Router, Communications Diameter Signaling Router, ОС Аврора (запись в едином реестре российских программ №1543) |
Timeline
- Apr 4, 2019 CVE Published
- Mar 3, 2022 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
References
- https://www.openssl.org/news/secadv/20181030.txt url
- https://nvd.nist.gov/vuln/detail/CVE-2018-0734 url
- https://security-tracker.debian.org/tracker/CVE-2018-0734 url
- http://www.securityfocus.com/bid/105758 url
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=43e6a58d4991a451daf4891ff05a48735df871ac url
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8abfe72e8c1de1b95f50aa0d9134803b4d00070f url
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ef11e19d1365eea2b1851e6f540a0bf365d303e7 url
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ url
- https://security.netapp.com/advisory/ntap-20181105-0002/ url
- https://security.netapp.com/advisory/ntap-20190118-0002/ url
- https://security.netapp.com/advisory/ntap-20190423-0002/ url
- https://usn.ubuntu.com/3840-1/ url
- https://www.debian.org/security/2018/dsa-4348 url
- https://www.debian.org/security/2018/dsa-4355 url
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html url
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html url
- https://www.tenable.com/security/tns-2018-16 url
- https://www.tenable.com/security/tns-2018-17 url
- https://www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html url
- https://www.oracle.com/security-alerts/cpujan2020.html url
…and 5 more