Medium · published October 29, 2018
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
| Product | Versions | Fixed in |
|---|---|---|
| openssl/openssl | ≥ 1.1.0, ≤ 1.1.0i | — |
| openssl/openssl | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| nodejs/node.js | ≥ 10.0.0, < 10.12.0 | 10.12.0 |
| nodejs/node.js | ≥ 11.0.0, < 11.3.0 | 11.3.0 |
| nodejs/node.js | all versions | — |
| netapp/cn1610_firmware | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/element_software | all versions | — |
| netapp/oncommand_unified_manager | all versions | — |
| netapp/oncommand_unified_manager | ≥ 9.4 | — |
| netapp/santricity_smi-s_provider | all versions | — |
| netapp/smi-s_provider | all versions | — |
| netapp/snapdrive | all versions | — |
| netapp/snapdrive | all versions | — |
| netapp/steelstore | all versions | — |
| oracle/api_gateway | all versions | — |
| oracle/application_server | all versions | — |
| oracle/application_server | all versions | — |
| oracle/application_server | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/mysql | ≤ 5.6.42 | — |
| oracle/mysql | ≥ 5.7.0, ≤ 5.7.24 | — |
| oracle/mysql | ≥ 8.0.0, ≤ 8.0.13 | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | ≥ 17.7, ≤ 17.12 | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/primavera_p6_enterprise_project_portfolio_management | all versions | — |
| oracle/secure_global_desktop | all versions | — |
| oracle/tuxedo | all versions | — |
| oracle/vm_virtualbox | < 6.0.0 | 6.0.0 |
| oracle/vm_virtualbox | ≥ 5.0.0, < 5.2.24 | 5.2.24 |