CVE-2018-0739

31

FAUCET Score

CVE-2018-0739 describes a Denial of Service (DoS) vulnerability in OpenSSL versions 1.1.0-1.1.0g and 1.0.2b-1.0.2n. Maliciously crafted ASN.1 input with excessive recursion, particularly in structures like PKCS7, could lead to a stack overflow. This vulnerability has a CVSS score of 6.5 (Medium) due to its network-based attack vector and high impact on availability, though user interaction is required. While there are no known public exploits (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community discussion and media coverage, indicating awareness.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 1.0.2b, <= 1.0.2nCPE matchmatch criteria	cpe:2.3:a:openssl:openssl::::::::
		>= 1.1.0, <= 1.1.0gCPE matchmatch criteria	cpe:2.3:a:openssl:openssl::::::::
		14.04CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
		16.04CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
		17.10CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:17.10:::::::*

CVSS Data

CVSS version used by this source: 3.0

6.5MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

2.8

Impact Score

3.6

CvssVersion

3.0

Exploit Intelligence

EPSS Score

19.30%

Probability of exploitation in next 30 days

EPSS Percentile

97.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.1930 is in the 99th percentile among its peer group of 26,234 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (36)

oraclepatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-0:1-6.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-3.redhat_2.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-0:1.6.3-31.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-util-0:1.6.1-24.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-httpd-0:2.4.29-35.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-3.Final_redhat_2.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_jk-0:1.2.46-1.redhat_1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-nghttp2-0:1.29.0-9.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2n-14.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-0:1-6.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-3.redhat_2.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-0:1.6.3-31.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-util-0:1.6.1-24.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.29-35.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-3.Final_redhat_2.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_jk-0:1.2.46-1.redhat_1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-nghttp2-0:1.29.0-9.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2n-14.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: ovmf-0:20180508-3.gitee3198e672e2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.2k-16.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3.1Fixed in: openssl

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat7-0:7.0.70-34.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat8-0:8.0.36-39.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat-native-0:1.2.17-19.redhat_19.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.70-34.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.36-39.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-native-0:1.2.17-19.redhat_19.ep7.el7

redhatpatch availablevia redhat_api

Product: Text-Only JBCSFixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl098e

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl098e

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: OVMF

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2Fixed in: openssl

Vendor Advisories (1)

redhatCVE-2018-0739Moderate

openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

References

access.redhat.com / errata/RHSA-2018:3090

access.redhat.com / errata/RHSA-2018:3221

access.redhat.com / errata/RHSA-2018:3505

access.redhat.com / errata/RHSA-2019:0366

access.redhat.com / errata/RHSA-2019:0367

access.redhat.com / errata/RHSA-2019:1711

access.redhat.com / errata/RHSA-2019:1712

git.openssl.org / gitweb

git.openssl.org / gitweb

lists.debian.org / debian-lts-announce/2018/03/msg00033.html

Third Party Advisory

nodejs.org / en/blog/vulnerability/march-2018-security-releases

securityadvisories.paloaltonetworks.com / Home/Detail/133

security.gentoo.org / glsa/201811-21

security.gentoo.org / glsa/202007-53

security.netapp.com / advisory/ntap-20180330-0002

Third Party Advisory

security.netapp.com / advisory/ntap-20180726-0002

usn.ubuntu.com / 3611-1

Third Party Advisory

usn.ubuntu.com / 3611-2

Third Party Advisory

debian.org / security/2018/dsa-4157

Third Party Advisory

debian.org / security/2018/dsa-4158

Third Party Advisory

openssl.org / news/secadv/20180327.txt

Vendor Advisory

oracle.com / /security-alerts/cpujul2021.html

oracle.com / technetwork/security-advisory/cpuapr2019-5072813.html

oracle.com / technetwork/security-advisory/cpujan2019-5072801.html

oracle.com / technetwork/security-advisory/cpujul2019-5072835.html

tenable.com / security/tns-2018-04

tenable.com / security/tns-2018-06

tenable.com / security/tns-2018-07

oracle.com / technetwork/security-advisory/cpuapr2018-3678067.html

PatchThird Party Advisory

oracle.com / technetwork/security-advisory/cpujul2018-4258247.html

oracle.com / technetwork/security-advisory/cpuoct2018-4428296.html

securityfocus.com / bid/103518

Third Party AdvisoryVDB Entry

securityfocus.com / bid/105609

securitytracker.com / id/1040576

Third Party AdvisoryVDB Entry