Every CVE Search/ Get API key

CVE-2018-0735

Timing attack against ECDSA signature generation

5.9 MediumFix available

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

4.72%Up 1.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.9

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
CVE-2018-0735
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-327
Updated
2026-11-02
CVE List No score

Timing attack against ECDSA signature generation

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
CVE-2018-0735
Updated
2026-11-02
EUVDEUVD-2018-1545 No score

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
EUVD-2018-1545
Updated
2026-11-02
GitHub AdvisoriesGHSA-4fhm-44hf-3465 5.9

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel...

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
GHSA-4fhm-44hf-3465
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-327
Updated
2026-11-02
OSVALPINE-CVE-2018-0735 5.9

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
ALPINE-CVE-2018-0735
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVBELL-CVE-2018-0735 5.9

CVE-2018-0735 does not affect BellSoft software

Record
BELL-CVE-2018-0735
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 9 moreShow less
OSV 5.9

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
CVE-2018-0735
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-0735 5.9

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
DEBIAN-CVE-2018-0735
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:0483 5.1

Red Hat Security Advisory: openssl security and bug fix update

Record
RHSA-2019:0483
CVSS 3.0
5.1 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2019:3700 5.1

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Record
RHSA-2019:3700
CVSS 3.0
5.1 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2018-0735 5.9

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

Record
UBUNTU-CVE-2018-0735
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2024:11127-1 No score

libopenssl-1_1-devel-1.1.1l-1.2 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11127-1
Updated
2026-11-02
OSVSUSE-SU-2018:3863-1 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

Security issues fixed:

  • CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
  • CVE-2018-0735: Fixed timing vulnerability in ECDSA signature generation (bsc#1113651).
Record
SUSE-SU-2018:3863-1
Updated
2026-11-02
OSVSUSE-SU-2018:3945-1 No score

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

Security issues fixed:

  • CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
  • CVE-2018-0735: Fixed timing vulnerability in ECDSA signature generation (bsc#1113651).

Non-security issues fixed:

  • Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209).
Record
SUSE-SU-2018:3945-1
Updated
2026-11-02
OSVUSN-3840-1 No score

openssl, openssl1.0 vulnerabilities

Samuel Weiser discovered that OpenSSL incorrectly handled DSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private DSA keys. (CVE-2018-0734)

Samuel Weiser discovered that OpenSSL incorrectly handled ECDSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private ECDSA keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-0735)

Billy Bob Brumley, Cesar Pereida Garcia, Sohaib ul Hassan, Nicola Tuveri, and Alejandro Cabrera Aldaya discovered that Simultaneous Multithreading (SMT) architectures are vulnerable to side-channel leakage. This issue is known as "PortSmash". An attacker could possibly use this issue to perform a timing side-channel attack and recover private keys. (CVE-2018-5407)

Record
USN-3840-1
Updated
2026-11-02

Affected products

Show 10 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
nodejs
Alpine:v3.10
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.11
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.12
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.13
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.14
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.15
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.16
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.17
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.18
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.19
 before 10.14.0-r0
10.14.0-r0
Show 70 moreShow less
Affected packages
PackageAffectedFixed
nodejs
Alpine:v3.20
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.21
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.22
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.23
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.24
 before 10.14.0-r0
10.14.0-r0
nodejs
Alpine:v3.9
 before 10.14.0-r0
10.14.0-r0
openssl
Alpine:v3.10
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.11
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.12
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.13
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.14
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.15
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.16
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.17
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.18
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.19
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.20
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.21
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.22
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.23
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.24
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl
Alpine:v3.9
 1.1.0 up to 1.1.1a-r0
1.1.1a-r0
openssl3
Alpine:v3.15
 before 1.1.1a-r0
1.1.1a-r0
openssl3
Alpine:v3.16
 before 1.1.1a-r0
1.1.1a-r0
openssl
Debian:12
 before 1.1.1a-1
1.1.1a-1
openssl
Debian:13
 before 1.1.1a-1
1.1.1a-1
openssl
Debian:14
 before 1.1.1a-1
1.1.1a-1
openssl
Debian:8
 before 1.0.1t-1+deb8u10, plus listed versions
1.0.1k-31.0.1k-3+alpha1.0.1k-3+deb8u11.0.1k-3+deb8u21.0.1k-3+deb8u3
Show 11 moreShow less
1.0.1k-3+deb8u41.0.1k-3+deb8u51.0.1t-1+deb8u11.0.1t-1+deb8u21.0.1t-1+deb8u31.0.1t-1+deb8u41.0.1t-1+deb8u51.0.1t-1+deb8u61.0.1t-1+deb8u71.0.1t-1+deb8u81.0.1t-1+deb8u9
1.0.1t-1+deb8u10
openssl
Debian:9
 before 1.1.0j-1~deb9u1, plus listed versions
1.1.0f-31.1.0f-3+deb9u11.1.0f-3+deb9u21.1.0f-41.1.0f-5
Show 7 moreShow less
1.1.0g-11.1.0g-21.1.0g-2+riscv641.1.0h-11.1.0h-21.1.0h-31.1.0h-4
1.1.0j-1~deb9u1
openssl
Red Hat:enterprise_linux:7::client
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-debuginfo
Red Hat:enterprise_linux:7::client
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-libs
Red Hat:enterprise_linux:7::client
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-devel
Red Hat:enterprise_linux:7::client
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-perl
Red Hat:enterprise_linux:7::client
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-static
Red Hat:enterprise_linux:7::client
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-libs
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-devel
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-perl
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-static
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl
Red Hat:enterprise_linux:7::server
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-debuginfo
Red Hat:enterprise_linux:7::server
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-devel
Red Hat:enterprise_linux:7::server
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-libs
Red Hat:enterprise_linux:7::server
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-perl
Red Hat:enterprise_linux:7::server
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-static
Red Hat:enterprise_linux:7::server
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-devel
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-libs
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-perl
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl-static
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.2k-16.el7_6.1
1:1.0.2k-16.el7_6.1
openssl
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1c-2.el8
1:1.1.1c-2.el8
openssl-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1c-2.el8
1:1.1.1c-2.el8
openssl-debugsource
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1c-2.el8
1:1.1.1c-2.el8
openssl-devel
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1c-2.el8
1:1.1.1c-2.el8
openssl-libs
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1c-2.el8
1:1.1.1c-2.el8
openssl-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1c-2.el8
1:1.1.1c-2.el8
openssl-perl
Red Hat:enterprise_linux:8::baseos
 before 1:1.1.1c-2.el8
1:1.1.1c-2.el8
openssl-1_1
SUSE:Linux Enterprise Module for Basesystem 15
 before 1.1.0i-4.15.1
1.1.0i-4.15.1
openssl-1_1
SUSE:Linux Enterprise Desktop 12 SP4
 before 1.1.1-2.3.1
1.1.1-2.3.1
openssl-1_1
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 1.1.1-2.3.1
1.1.1-2.3.1
openssl-1_1
SUSE:Linux Enterprise Server 12 SP4
 before 1.1.1-2.3.1
1.1.1-2.3.1
openssl-1_1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.1.1-2.3.1
1.1.1-2.3.1
openssl
Ubuntu:18.04:LTS
 before 1.1.0g-2ubuntu4.3, plus listed versions
1.0.2g-1ubuntu131.0.2g-1ubuntu141.0.2n-1ubuntu11.1.0g-2ubuntu11.1.0g-2ubuntu21.1.0g-2ubuntu31.1.0g-2ubuntu41.1.0g-2ubuntu4.1
1.1.0g-2ubuntu4.3
openssl
Ubuntu:14.04:LTS
 before 1.0.1f-1ubuntu2.27, plus listed versions
1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu4
Show 23 moreShow less
1.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.11.0.1f-1ubuntu2.21.0.1f-1ubuntu2.31.0.1f-1ubuntu2.41.0.1f-1ubuntu2.51.0.1f-1ubuntu2.71.0.1f-1ubuntu2.81.0.1f-1ubuntu2.111.0.1f-1ubuntu2.121.0.1f-1ubuntu2.151.0.1f-1ubuntu2.161.0.1f-1ubuntu2.171.0.1f-1ubuntu2.181.0.1f-1ubuntu2.191.0.1f-1ubuntu2.201.0.1f-1ubuntu2.211.0.1f-1ubuntu2.221.0.1f-1ubuntu2.231.0.1f-1ubuntu2.241.0.1f-1ubuntu2.251.0.1f-1ubuntu2.26
1.0.1f-1ubuntu2.27
openssl
Ubuntu:16.04:LTS
 before 1.0.2g-1ubuntu4.14, plus listed versions
1.0.2d-0ubuntu11.0.2d-0ubuntu21.0.2e-1ubuntu11.0.2f-2ubuntu11.0.2g-1ubuntu2
Show 13 moreShow less
1.0.2g-1ubuntu31.0.2g-1ubuntu41.0.2g-1ubuntu4.11.0.2g-1ubuntu4.21.0.2g-1ubuntu4.41.0.2g-1ubuntu4.51.0.2g-1ubuntu4.61.0.2g-1ubuntu4.81.0.2g-1ubuntu4.91.0.2g-1ubuntu4.101.0.2g-1ubuntu4.111.0.2g-1ubuntu4.121.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.14
openssl1.0
Ubuntu:18.04:LTS
 before 1.0.2n-1ubuntu5.2, plus listed versions
1.0.2n-1ubuntu21.0.2n-1ubuntu31.0.2n-1ubuntu41.0.2n-1ubuntu51.0.2n-1ubuntu5.1
1.0.2n-1ubuntu5.2
openssl-1_1
openSUSE:Tumbleweed
 before 1.1.1l-1.2
1.1.1l-1.2

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-0735 is a medium vulnerability (CVSS 5.9) in Openssl, published October 29, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.72%, the 91st percentile. Fixed in nodejs 10.14.0-r0.

References

Show 191 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open