Cache timing vulnerability in RSA Key Generation
Priority MEDIUM 40CWE-327Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 13 fixed, 7 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-327.
Summary
The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.11597 96th percentileScored 2026-11-07
Fix Partial Red Hat: 4 advisoriesRed Hat: 13 fixed, 7 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenSSL | OpenSSL | Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h); Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o) | — | No fix listed | CNA |
- OpenSSL VendorOpenSSL Affected Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h); Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o) Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* | 1.0.2b – 1.0.2o; 1.1.0 – 1.1.0h | Vulnerable | OpenSSL |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* | 17.10 | Vulnerable | Canonical |
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 1.0.2b – 1.0.2o; 1.1.0 – 1.1.0h Vulnerable ·OpenSSL
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* Versions 17.10 Vulnerable ·Canonical
Remediation
Red Hat 4 advisories
- RHSA-2019:3932 Released 2019-11-20 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6
- Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-apr-1.6.3-63.jbcs.el6, jbcs-httpd24-apr-devel-1.6.3-63.jbcs.el6, jbcs-httpd24-apr-util-1.6.1-48.jbcs.el6 +37
- RHSA-2019:3933 Released 2019-11-20 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 7
- Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apr-1.6.3-63.jbcs.el7, jbcs-httpd24-apr-devel-1.6.3-63.jbcs.el7, jbcs-httpd24-apr-util-1.6.1-48.jbcs.el7 +37
- RHSA-2019:3935 Released 2019-11-20 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release
- Red Hat JBoss Core Services
Show 1 more Red Hat advisories
- RHSA-2018:3221 Released 2018-10-30 · Red Hat rating Moderateopenssl security, bug fix, and enhancement update
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.2k-16.el7, openssl-libs-1:1.0.2k-16.el7
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.2k-16.el7, openssl-perl-1:1.0.2k-16.el7, openssl-static-1:1.0.2k-16.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.2k-16.el7, openssl-libs-1:1.0.2k-16.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.2k-16.el7, openssl-perl-1:1.0.2k-16.el7, openssl-static-1:1.0.2k-16.el7
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.2k-16.el7, openssl-devel-1:1.0.2k-16.el7, openssl-devel-1:1.0.2k-16.el7.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.2k-16.el7, openssl-static-1:1.0.2k-16.el7, openssl-static-1:1.0.2k-16.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.2k-16.el7, openssl-devel-1:1.0.2k-16.el7, openssl-libs-1:1.0.2k-16.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.2k-16.el7, openssl-static-1:1.0.2k-16.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) openssl-1:1.0.2k-16.el7, openssl-devel-1:1.0.2k-16.el7, openssl-libs-1:1.0.2k-16.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) openssl-perl-1:1.0.2k-16.el7, openssl-static-1:1.0.2k-16.el7
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Enterprise Application Platform 5 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Enterprise Application Platform 6 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Enterprise Web Server 2 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Web Server 3 | Affected | No fix yet |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) | Fixed | RHSA-2018:3221 |
| Red Hat JBoss Core Services | Fixed | RHSA-2019:3935 |
| Red Hat JBoss Core Services on RHEL 6 Server | Fixed | RHSA-2019:3932 |
| Red Hat JBoss Core Services on RHEL 7 Server | Fixed | RHSA-2019:3933 |
Not affected: 2 products
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
Timeline
- 2026-10-02 Threatist record created from CVE-2018-0737
- 2026-10-03 Alias added: GHSA-rj52-j648-hww8
- 2026-10-16 CISA SSVC decision points changed
References
Advisory 16
Other 16
- [debian-lts-announce] 20180728 [SECURITY] [DLA 1449-1] openssl security update
- https://www.oracle.com/security-alerts/cpuapr2020.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.tenable.com/security/tns-2018-14
- https://securityadvisories.paloaltonetworks.com/Home/Detail/133
- https://www.tenable.com/security/tns-2018-13
- https://www.tenable.com/security/tns-2018-17
- https://www.tenable.com/security/tns-2018-12
- https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787
- https://security.netapp.com/advisory/ntap-20180726-0003/
More Openssl vulnerabilities
- TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
- TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
- TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
Sources
- CVE-2018-0737 · CVE Program
- CVE-2018-0737 · NVD
- FIRST EPSS
- GHSA-rj52-j648-hww8 · GitHub Advisory Database · CC BY 4.0
- CVE-2018-0737 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences