# CVE-2018-0734: openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...

CVE-2018-0734 is fixed in 7 products on 1 platform, first by libssl1.0.0 1.0.2n-1ubuntu5.2, released November 14, 2018. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-0734
- Priority: Routine
- CVSS: 5.9 (Low)
- EPSS: 0.1215
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 29, 2018

## Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  The following packages have been upgraded to a later upstream version: openssl (1.1.1c). (BZ#1643026)  Security Fix(es):  * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734)  * openssl: timing side channel attack in the ECDSA signature generation (CVE-2018-0735)  * openssl: ChaCha20-Poly1305 with long nonces (CVE-2019-1543)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libssl1.0.0 Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.2 | [libssl1.0.0 1.0.2n-1ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libssl1.0.0-1.0.2n-1ubuntu5.2.md) | Nov 14, 2018 |
| Linux | libssl1.1 Ubuntu 18.04.6 LTS (bionic) | 1.1.0g-2ubuntu4.3 | [libssl1.1 1.1.0g-2ubuntu4.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libssl1.1-1.1.0g-2ubuntu4.3.md) | Nov 14, 2018 |
| Linux | openssl RHEL 8 | 1:1.1.1c-2.el8 | [RHSA-2019:3700](https://patchblox.com/security/data/fix/linux/rhsa-2019-3700.md) | Nov 5, 2019 |
| Linux | openssl Ubuntu 18.04.6 LTS (bionic) | 1.1.0g-2ubuntu4.3 | [openssl 1.1.0g-2ubuntu4.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openssl-1.1.0g-2ubuntu4.3.md) | Nov 14, 2018 |
| Linux | openssl ol 8 | 1:1.1.1c-2.el8 | [ELSA-2019-3700](https://patchblox.com/security/data/fix/linux/elsa-2019-3700.md) | Nov 14, 2019 |
| Linux | openssl-devel RHEL 8 | 1:1.1.1c-2.el8 | [RHSA-2019:3700](https://patchblox.com/security/data/fix/linux/rhsa-2019-3700.md) | Nov 5, 2019 |
| Linux | openssl-devel ol 8 | 1:1.1.1c-2.el8 | [ELSA-2019-3700](https://patchblox.com/security/data/fix/linux/elsa-2019-3700.md) | Nov 14, 2019 |
| Linux | openssl-libs RHEL 8 | 1:1.1.1c-2.el8 | [RHSA-2019:3700](https://patchblox.com/security/data/fix/linux/rhsa-2019-3700.md) | Nov 5, 2019 |
| Linux | openssl-libs ol 8 | 1:1.1.1c-2.el8 | [ELSA-2019-3700](https://patchblox.com/security/data/fix/linux/elsa-2019-3700.md) | Nov 14, 2019 |
| Linux | openssl-perl RHEL 8 | 1:1.1.1c-2.el8 | [RHSA-2019:3700](https://patchblox.com/security/data/fix/linux/rhsa-2019-3700.md) | Nov 5, 2019 |
| Linux | openssl-perl ol 8 | 1:1.1.1c-2.el8 | [ELSA-2019-3700](https://patchblox.com/security/data/fix/linux/elsa-2019-3700.md) | Nov 14, 2019 |
| Linux | openssl1.0 Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.2 | [openssl1.0 1.0.2n-1ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openssl1.0-1.0.2n-1ubuntu5.2.md) | Nov 14, 2018 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo