NetSight
IP …
high7.5

CVE-2018-0732

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client.

Impact

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).

Affected products

VendorProductAffected versions
OpensslOpenssl
from 1.0.2 through 1.0.2o
from 1.1.0 through 1.1.0h
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10, 18.04
DebianDebian Linux
Version 8.0
NodejsNode.Js
from 6.0.0 before 6.8.1
from 6.9.0 before 6.14.4
from 8.0.0 before 8.8.1
from 8.9.0 before 8.11.4
from 10.0.0 before 10.9.0

Weakness classification

CWE-320

References