VDB
BDU%3A2019-01256
BDU%3A2019-01256
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость реализации алгоритма шифрования DSA (Digital Signature Algorithm) библиотеки OpenSSL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
7.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Oracle Corp., Red Hat, Inc., Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», OpenSSL Software Foundation, Fedora Project, Node.js Foundation, Novell Inc., ООО «Открытая мобильная платформа» | Ubuntu, API Gateway, Red Hat Enterprise Linux, Debian GNU/Linux, Enterprise Manager Ops Center, VM VirtualBox, PeopleSoft Enterprise PeopleTools, MySQL, Astra Linux Special Edition (запись в едином реестре российских программ №369), Primavera P6 Enterprise Project Portfolio Management, OpenSSL, Fedora, Enterprise Manager Base Platform, Node.js, Tuxedo, Application Server, MySQL Enterprise Backup, OpenSUSE Leap, JBoss Core Services, Astra Linux Special Edition для «Эльбрус» (запись в едином реестре российских программ №11156), Oracle Communications Session Border Controller, Oracle Enterprise Session Border Controller, Communications Unified Session Manager, Oracle Communications Session Router, Communications Diameter Signaling Router, ОС Аврора (запись в едином реестре российских программ №1543) |
Timeline
- Apr 4, 2019 CVE Published
- Mar 3, 2022 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://www.openssl.org/news/secadv/20181030.txt advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-0734 url
- https://security-tracker.debian.org/tracker/CVE-2018-0734 url
- http://www.securityfocus.com/bid/105758 url
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=43e6a58d4991a451daf4891ff05a48735df871ac advisory
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8abfe72e8c1de1b95f50aa0d9134803b4d00070f advisory
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ef11e19d1365eea2b1851e6f540a0bf365d303e7 advisory
- https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/ advisory
- https://security.netapp.com/advisory/ntap-20181105-0002/ url
- https://security.netapp.com/advisory/ntap-20190118-0002/ url
- https://security.netapp.com/advisory/ntap-20190423-0002/ url
- https://usn.ubuntu.com/3840-1/ advisory
- https://www.debian.org/security/2018/dsa-4348 advisory
- https://www.debian.org/security/2018/dsa-4355 advisory
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html advisory
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html advisory
- https://www.tenable.com/security/tns-2018-16 url
- https://www.tenable.com/security/tns-2018-17 url
- https://www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html url
- https://www.oracle.com/security-alerts/cpujan2020.html advisory
…and 5 more