CVE-2018-0735: Timing attack against ECDSA signature generation

Published Oct 25, 2018
·
Updated

A flaw was found in OpenSSL versions from 1.1.0 through 1.1.0i inclusive and version 1.1.1. The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key.

References: https://www.openssl.org/news/secadv/20181029.txt

Upstream Patch: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=56fb454d281a023b3f950d969693553d3f3ceea1 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4

Other sources

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Affected Software

54 affected componentsFixes available
redhat/openssl<1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
redhat/openssl<1:1.1.1c-2.el8
1:1.1.1c-2.el8
redhat/openssl<1.1.0
1.1.0
redhat/openssl<1.1.1
1.1.1
OpenSSL OpenSSL>=1.1.0<=1.1.0i
OpenSSL OpenSSL=1.1.1
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=18.10
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Nodejs Node.js>=10.0.0<10.12.0
Nodejs Node.js>=11.0.0<11.3.0
Nodejs Node.js=10.13.0
NetApp Cn1610 Firmware
NetApp Cn1610
NetApp Cloud Backup
NetApp Element Software
NetApp OnCommand Unified Manager
NetApp Oncommand Unified Manager Vsphere>=9.4
NetApp Santricity Smi-s Provider
NetApp Smi-s Provider
NetApp Snapdrive Unix
NetApp Snapdrive Windows
NetApp Steelstore
Oracle API Gateway=11.1.2.4.0
Oracle Application Server=0.9.8
Oracle Application Server=1.0.0
Oracle Application Server=1.0.1
Oracle Enterprise Manager Base Platform=12.1.0.5.0
Oracle Enterprise Manager Base Platform=13.2.0.0.0
Oracle Enterprise Manager Base Platform=13.3.0.0.0
Oracle Enterprise Manager Ops Center=12.3.3
Oracle MySQL<=5.6.42
Oracle MySQL>=5.7.0<=5.7.24
Oracle MySQL>=8.0.0<=8.0.13
Oracle PeopleSoft Enterprise PeopleTools=8.55
Oracle PeopleSoft Enterprise PeopleTools=8.56
Oracle PeopleSoft Enterprise PeopleTools=8.57
Oracle Primavera P6 Enterprise Project Portfolio Management>=17.7<=17.12
Oracle Primavera P6 Enterprise Project Portfolio Management=8.4
Oracle Primavera P6 Enterprise Project Portfolio Management=15.1
Oracle Primavera P6 Enterprise Project Portfolio Management=15.2
Oracle Primavera P6 Enterprise Project Portfolio Management=16.1
Oracle Primavera P6 Enterprise Project Portfolio Management=16.2
Oracle Primavera P6 Enterprise Project Portfolio Management=18.8
Oracle Secure Global Desktop=5.4
Oracle Tuxedo=12.1.1.0.0
Oracle VM VirtualBox<6.0.0
Oracle VM VirtualBox>=5.0.0<5.2.24
All of the following
NetApp Cn1610 Firmware
NetApp Cn1610
debian/openssl
1.1.1w-0+deb11u11.1.1w-0+deb11u53.0.18-1~deb12u13.0.18-1~deb12u23.5.4-1~deb13u13.5.4-1~deb13u23.5.5-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 1:1.0.2k-16.el7_6.1
  2. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 1:1.1.1c-2.el8
  3. Upgrade

    Upgrade debian/openssl to a version that resolves this vulnerability.

    Fixed in 1.1.1w-0+deb11u1Fixed in 1.1.1w-0+deb11u5Fixed in 3.0.18-1~deb12u1Fixed in 3.0.18-1~deb12u2Fixed in 3.5.4-1~deb13u1Fixed in 3.5.4-1~deb13u2Fixed in 3.5.5-1
  4. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 1.1.0
  5. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 1.1.1
  6. Upgrade

    Upgrade OpenSSL to a version that resolves this vulnerability.

    Fixed in 1.1.0j
  7. Upgrade

    Upgrade OpenSSL to a version that resolves this vulnerability.

    Fixed in 1.1.1a

Event History

Oct 25, 2018
CVE Published
12:00 AM
Oct 29, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Data Sourced
via NVD·01:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 30, 2018
Data Sourced
via Red Hat·03:46 PM
DescriptionSeverityAffected Software
Feb 21, 2026
Data Sourced
via Ubuntu·03:14 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·03:15 PM
Description
Feb 23, 2026
Data Sourced
via Debian·03:17 PM
DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2018-0735?

CVE-2018-0735 has been classified with a high severity level due to its potential to allow attackers to recover private keys through a timing side channel attack.

2

How do I fix CVE-2018-0735?

To remediate CVE-2018-0735, update OpenSSL to a version that is not vulnerable, such as 1:1.0.2k-16.el7_6.1 or 1.1.1c-2.el8.

3

Which versions of OpenSSL are affected by CVE-2018-0735?

CVE-2018-0735 affects OpenSSL versions from 1.1.0 to 1.1.0i inclusive, and version 1.1.1.

4

Can CVE-2018-0735 be exploited remotely?

Yes, CVE-2018-0735 can potentially be exploited remotely if an attacker can observe the timing of ECDSA signatures.

5

What types of systems are likely affected by CVE-2018-0735?

Systems using OpenSSL versions 1.1.0 through 1.1.0i and 1.1.1, including many Linux distributions like Red Hat and Ubuntu, are likely affected by CVE-2018-0735.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203