{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2018-0733","title":"Title"},{"category":"description","text":"Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2018-0733","url":"https://www.suse.com/security/cve/CVE-2018-0733"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1087106 for CVE-2018-0733","url":"https://bugzilla.suse.com/1087106"}],"title":"SUSE CVE CVE-2018-0733","tracking":{"current_release_date":"2025-09-29T02:04:26Z","generator":{"date":"2023-02-15T04:34:46Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2018-0733","initial_release_date":"2023-02-15T04:34:46Z","revision_history":[{"date":"2023-02-15T04:34:46Z","number":"2","summary":"Current version"},{"date":"2024-07-03T05:41:16Z","number":"3","summary":"Current version"},{"date":"2025-01-01T08:09:11Z","number":"4","summary":"Current version"},{"date":"2025-02-18T07:21:04Z","number":"5","summary":"Current version"},{"date":"2025-03-14T04:22:20Z","number":"6","summary":"Current version"},{"date":"2025-03-15T12:47:53Z","number":"7","summary":"Current version"},{"date":"2025-04-25T07:27:46Z","number":"8","summary":"Current version"},{"date":"2025-09-29T02:04:26Z","number":"9","summary":"Current version"}],"status":"interim","version":"9"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Magnum Orchestration 7","product":{"name":"Magnum Orchestration 7","product_id":"Magnum Orchestration 7","product_identification_helper":{"cpe":"cpe:/o:suse:openstack-cloud-magnum-orchestration:7"}}},{"category":"product_name","name":"SUSE Container as a Service Platform 2.0","product":{"name":"SUSE Container as a Service Platform 2.0","product_id":"SUSE Container as a Service Platform 2.0","product_identification_helper":{"cpe":"cpe:/o:suse:caasp:2.0"}}},{"category":"product_name","name":"SUSE Linux Enterprise Desktop 11 SP4","product":{"name":"SUSE Linux Enterprise Desktop 11 SP4","product_id":"SUSE Linux Enterprise Desktop 11 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sled:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Desktop 12 SP2","product":{"name":"SUSE Linux Enterprise Desktop 12 SP2","product_id":"SUSE Linux Enterprise Desktop 12 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sled:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Desktop 12 SP3","product":{"name":"SUSE Linux Enterprise Desktop 12 SP3","product_id":"SUSE Linux Enterprise Desktop 12 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sled:12:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP3 LTSS","product":{"name":"SUSE Linux Enterprise Server 11 SP3 LTSS","product_id":"SUSE Linux Enterprise Server 11 SP3 LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_ltss:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product":{"name":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles_teradata:11:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP4","product":{"name":"SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP4-LTSS","product":{"name":"SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:suse_sles:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP2","product":{"name":"SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP3","product":{"name":"SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sles:12:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 11 SP4","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 11 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 11 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 12 SP2","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 12 SP3","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 12 SP3","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:12:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 11 SP4","product":{"name":"SUSE Linux Enterprise Software Development Kit 11 SP4","product_id":"SUSE Linux Enterprise Software Development Kit 11 SP4","product_identification_helper":{"cpe":"cpe:/a:suse:sle-sdk:11:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP2","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP2","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Software Development Kit 12 SP3","product":{"name":"SUSE Linux Enterprise Software Development Kit 12 SP3","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-sdk:12:sp3"}}},{"category":"product_name","name":"SUSE Studio Onsite 1.3","product":{"name":"SUSE Studio Onsite 1.3","product_id":"SUSE Studio Onsite 1.3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-studioonsite:1.3"}}},{"category":"product_version","name":"libopenssl-devel","product":{"name":"libopenssl-devel","product_id":"libopenssl-devel","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl-devel@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl0_9_8","product":{"name":"libopenssl0_9_8","product_id":"libopenssl0_9_8","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl0_9_8@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl0_9_8-32bit","product":{"name":"libopenssl0_9_8-32bit","product_id":"libopenssl0_9_8-32bit","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl0_9_8-32bit@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl0_9_8-hmac","product":{"name":"libopenssl0_9_8-hmac","product_id":"libopenssl0_9_8-hmac","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl0_9_8-hmac@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl0_9_8-hmac-32bit","product":{"name":"libopenssl0_9_8-hmac-32bit","product_id":"libopenssl0_9_8-hmac-32bit","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl0_9_8-hmac-32bit@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl1_0_0","product":{"name":"libopenssl1_0_0","product_id":"libopenssl1_0_0","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl1_0_0@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl1_0_0-32bit","product":{"name":"libopenssl1_0_0-32bit","product_id":"libopenssl1_0_0-32bit","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl1_0_0-32bit@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl1_0_0-hmac","product":{"name":"libopenssl1_0_0-hmac","product_id":"libopenssl1_0_0-hmac","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl1_0_0-hmac@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"libopenssl1_0_0-hmac-32bit","product":{"name":"libopenssl1_0_0-hmac-32bit","product_id":"libopenssl1_0_0-hmac-32bit","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/libopenssl1_0_0-hmac-32bit@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"openssl","product":{"name":"openssl","product_id":"openssl","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openssl@?upstream=openssl.src.rpm"}}},{"category":"product_version","name":"openssl-doc","product":{"name":"openssl-doc","product_id":"openssl-doc","product_identification_helper":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/openssl-doc@?upstream=openssl.src.rpm"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"openssl as component of Magnum Orchestration 7","product_id":"Magnum Orchestration 7:openssl"},"product_reference":"openssl","relates_to_product_reference":"Magnum Orchestration 7"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Container as a Service Platform 2.0","product_id":"SUSE Container as a Service Platform 2.0:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Container as a Service Platform 2.0"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Desktop 12 SP3","product_id":"SUSE Linux Enterprise Desktop 12 SP3:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Desktop 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0 as component of SUSE Linux Enterprise Desktop 12 SP3","product_id":"SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0"},"product_reference":"libopenssl1_0_0","relates_to_product_reference":"SUSE Linux Enterprise Desktop 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0-32bit as component of SUSE Linux Enterprise Desktop 12 SP3","product_id":"SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-32bit"},"product_reference":"libopenssl1_0_0-32bit","relates_to_product_reference":"SUSE Linux Enterprise Desktop 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Desktop 12 SP3","product_id":"SUSE Linux Enterprise Desktop 12 SP3:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Desktop 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server 11 SP1 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP1 for Teradata:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP1 for Teradata"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server 11 SP3 LTSS","product_id":"SUSE Linux Enterprise Server 11 SP3 LTSS:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP3 LTSS"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server 11 SP3 for Teradata","product_id":"SUSE Linux Enterprise Server 11 SP3 for Teradata:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP3 for Teradata"},{"category":"default_component_of","full_product_name":{"name":"libopenssl0_9_8 as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8"},"product_reference":"libopenssl0_9_8","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libopenssl0_9_8-32bit as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit"},"product_reference":"libopenssl0_9_8-32bit","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libopenssl0_9_8-hmac as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac"},"product_reference":"libopenssl0_9_8-hmac","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libopenssl0_9_8-hmac-32bit as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit"},"product_reference":"libopenssl0_9_8-hmac-32bit","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"openssl-doc as component of SUSE Linux Enterprise Server 11 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc"},"product_reference":"openssl-doc","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0 as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0"},"product_reference":"libopenssl1_0_0","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0-32bit as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0-32bit"},"product_reference":"libopenssl1_0_0-32bit","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0-hmac as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0-hmac"},"product_reference":"libopenssl1_0_0-hmac","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0-hmac-32bit as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0-hmac-32bit"},"product_reference":"libopenssl1_0_0-hmac-32bit","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"openssl-doc as component of SUSE Linux Enterprise Server 12 SP2","product_id":"SUSE Linux Enterprise Server 12 SP2:openssl-doc"},"product_reference":"openssl-doc","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0 as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0"},"product_reference":"libopenssl1_0_0","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0-32bit as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit"},"product_reference":"libopenssl1_0_0-32bit","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0-hmac as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac"},"product_reference":"libopenssl1_0_0-hmac","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl1_0_0-hmac-32bit as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit"},"product_reference":"libopenssl1_0_0-hmac-32bit","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"openssl-doc as component of SUSE Linux Enterprise Server 12 SP3","product_id":"SUSE Linux Enterprise Server 12 SP3:openssl-doc"},"product_reference":"openssl-doc","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server 11 SP4","product_id":"SUSE Linux Enterprise Server 11 SP4:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4","product_id":"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Desktop 11 SP4","product_id":"SUSE Linux Enterprise Desktop 11 SP4:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Desktop 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Desktop 11 SP4","product_id":"SUSE Linux Enterprise Desktop 11 SP4:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Desktop 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Software Development Kit 11 SP4","product_id":"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Software Development Kit 11 SP4","product_id":"SUSE Linux Enterprise Software Development Kit 11 SP4:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 11 SP4"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Desktop 12 SP2","product_id":"SUSE Linux Enterprise Desktop 12 SP2:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Desktop 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Desktop 12 SP2","product_id":"SUSE Linux Enterprise Desktop 12 SP2:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Desktop 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Software Development Kit 12 SP2","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP2:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Software Development Kit 12 SP2","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP2:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP2"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3","product_id":"SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Linux Enterprise Software Development Kit 12 SP3","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Linux Enterprise Software Development Kit 12 SP3","product_id":"SUSE Linux Enterprise Software Development Kit 12 SP3:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Linux Enterprise Software Development Kit 12 SP3"},{"category":"default_component_of","full_product_name":{"name":"libopenssl-devel as component of SUSE Studio Onsite 1.3","product_id":"SUSE Studio Onsite 1.3:libopenssl-devel"},"product_reference":"libopenssl-devel","relates_to_product_reference":"SUSE Studio Onsite 1.3"},{"category":"default_component_of","full_product_name":{"name":"openssl as component of SUSE Studio Onsite 1.3","product_id":"SUSE Studio Onsite 1.3:openssl"},"product_reference":"openssl","relates_to_product_reference":"SUSE Studio Onsite 1.3"}]},"vulnerabilities":[{"cve":"CVE-2018-0733","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2018-0733"}],"notes":[{"category":"general","text":"Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).","title":"CVE description"}],"product_status":{"known_not_affected":["Magnum Orchestration 7:openssl","SUSE Container as a Service Platform 2.0:openssl","SUSE Linux Enterprise Desktop 11 SP4:libopenssl-devel","SUSE Linux Enterprise Desktop 11 SP4:openssl","SUSE Linux Enterprise Desktop 12 SP2:libopenssl-devel","SUSE Linux Enterprise Desktop 12 SP2:openssl","SUSE Linux Enterprise Desktop 12 SP3:libopenssl-devel","SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0","SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-32bit","SUSE Linux Enterprise Desktop 12 SP3:openssl","SUSE Linux Enterprise Server 11 SP1 for Teradata:openssl","SUSE Linux Enterprise Server 11 SP3 LTSS:openssl","SUSE Linux Enterprise Server 11 SP3 for Teradata:openssl","SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8","SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit","SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac","SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit","SUSE Linux Enterprise Server 11 SP4-LTSS:openssl","SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc","SUSE Linux Enterprise Server 11 SP4:libopenssl-devel","SUSE Linux Enterprise Server 11 SP4:openssl","SUSE Linux Enterprise Server 12 SP2:libopenssl-devel","SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0","SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0-32bit","SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0-hmac","SUSE Linux Enterprise Server 12 SP2:libopenssl1_0_0-hmac-32bit","SUSE Linux Enterprise Server 12 SP2:openssl","SUSE Linux Enterprise Server 12 SP2:openssl-doc","SUSE Linux Enterprise Server 12 SP3:libopenssl-devel","SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0","SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit","SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac","SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit","SUSE Linux Enterprise Server 12 SP3:openssl","SUSE Linux Enterprise Server 12 SP3:openssl-doc","SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl-devel","SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl","SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel","SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl","SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel","SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl","SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel","SUSE Linux Enterprise Software Development Kit 11 SP4:openssl","SUSE Linux Enterprise Software Development Kit 12 SP2:libopenssl-devel","SUSE Linux Enterprise Software Development Kit 12 SP2:openssl","SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel","SUSE Linux Enterprise Software Development Kit 12 SP3:openssl","SUSE Studio Onsite 1.3:libopenssl-devel","SUSE Studio Onsite 1.3:openssl"]},"references":[{"category":"external","summary":"CVE-2018-0733","url":"https://www.suse.com/security/cve/CVE-2018-0733"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1087106 for CVE-2018-0733","url":"https://bugzilla.suse.com/1087106"}],"threats":[{"category":"impact","date":"2018-03-27T14:14:05Z","details":"moderate"}],"title":"CVE-2018-0733"}]}