5.9

CVE-2018-0737: Cache timing vulnerability in RSA Key Generation

Modified
AliasesALPINE-CVE-2018-0737SUSE-SU-2018:2486-1SUSE-SU-2018:2492-1
Published 16-04-2018Last modified 15-10-2026

Vulnerability summary

CVE-2018-0737 is a medium (CVSS 5.9) vulnerability in canonical ubuntu_linux. EPSS estimates a 11.60% chance of exploitation in the next 30 days, higher than 96% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.9, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.9/10
010
Medium · v3.0 (NVD)
EPSS score
11.60%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 16 · Related 9
DLA-1449-1DSA-4348-1DSA-4355-1MGASA-2018-0365OPENSUSE-SU-2024:11126-1OPENSUSE-SU-2024:11127-1

Timeline

  1. 16-04-2018
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

11.60%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 11.60% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse16 products
  • openssl-1_1&distro=SUSE Linux Enterprise Module for Basesystem 15< 1.1.0i-4.18.1
  • openssl&distro=SUSE Enterprise Storage 4< 1.0.2j-60.39.1
  • openssl&distro=SUSE Linux Enterprise Desktop 12 SP3< 1.0.2j-60.39.1
  • openssl&distro=SUSE Linux Enterprise Server 11 SP4< 0.9.8j-0.106.15.1
  • openssl&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 1.0.1i-54.17.1
Ubuntu2 products
  • openssl< 1.0.1f-1ubuntu2.26 | < 1.0.2g-1ubuntu4.13 | < 1.1.0g-2ubuntu4.1 | < 1.0.1f-1ubuntu2.25 | < 1.0.2g-1ubuntu4.12
  • openssl1.0< 1.0.2n-1ubuntu5.1
Alpine1 product
  • openssl≥ 1.0.2b, < 1.0.2o-r1 | ≥ 1.0.2b, < 1.0.2o-r2
Canonical1 product
Debian1 product
  • openssl< 1.1.0h-3
Openssl1 product
  • opensslFixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h) | Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o) | ≥ 1.0.2b, ≤ 1.0.2o | ≥ 1.1.0, ≤ 1.1.0h
Opensuse1 product
  • openssl-1_1&distro=openSUSE Leap 15.0< 1.1.0i-lp150.3.18.1

7 vendors · 23 products

References

57 links
Show all 57 references