CVE-2018-0737

CVE-2018-0737 describes a cache timing side-channel vulnerability in the OpenSSL RSA key generation algorithm, affecting versions 1.1.0 through 1.1.0h and 1.0.2b through 1.0.2o, including Canonical Ubuntu Linux. Rated Medium (CVSS 5.9), an attacker with sufficient access to mount cache timing attacks during RSA key generation could potentially recover the private key, posing a high confidentiality risk. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community attention and media coverage, indicating awareness of the potential threat.