CVE-2018-18311

Key facts

CVSS score

9.8 (v3.0)

Severity

CRITICAL

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-190

EPSS score

11.7% (96th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2018-10044)

Published

December 7, 2018

NVD last modified

June 17, 2026

Status

Modified

Affected products

• apple / mac os x
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• debian / debian linux
• fedoraproject / fedora
• mcafee / web gateway
• netapp / e-series santricity os controller
• netapp / snap creator framework
• netapp / snapcenter
• netapp / snapdriver
• perl / perl
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server tus
• redhat / enterprise linux workstation
• redhat / openshift container platform

Certified products that may be affected

10 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 7 NSS Cryptographic Module - Red Hat®, Inc. - FIPS 140 4498 - historical
• Red Hat Enterprise Linux 7 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 3939 - historical
• Red Hat Enterprise Linux 7 OpenSSH Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 3891 - historical
• Red Hat Enterprise Linux 7 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 3892 - historical
• Red Hat Enterprise Linux 7 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 3867 - historical

See all 10 in the Security Certifications Explorer.

References

• http://seclists.org/fulldisclosure/2019/Mar/49(Mailing List, Third Party Advisory)
• http://www.securityfocus.com/bid/106145(Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id/1042181(Third Party Advisory, VDB Entry)
• https://access.redhat.com/errata/RHBA-2019:0327(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:0001(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:0010(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:0109(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:1790
• https://access.redhat.com/errata/RHSA-2019:1942
• https://access.redhat.com/errata/RHSA-2019:2400
• https://bugzilla.redhat.com/show_bug.cgi?id=1646730(Issue Tracking, Patch, Third Party Advisory)
• https://github.com/Perl/perl5/commit/34716e2a6ee2af96078d62b065b7785c001194be(Patch, Third Party Advisory)
• https://kc.mcafee.com/corporate/index?page=content&id=SB10278(Third Party Advisory)
• https://lists.debian.org/debian-lts-announce/2018/11/msg00039.html(Mailing List, Third Party Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/
• https://metacpan.org/changes/release/SHAY/perl-5.26.3(Third Party Advisory)
• https://metacpan.org/changes/release/SHAY/perl-5.28.1(Third Party Advisory)
• https://rt.perl.org/Ticket/Display.html?id=133204(Issue Tracking, Third Party Advisory)
• https://seclists.org/bugtraq/2019/Mar/42(Mailing List, Third Party Advisory)
• https://security.gentoo.org/glsa/201909-01
• https://security.netapp.com/advisory/ntap-20190221-0003/(Third Party Advisory)
• https://support.apple.com/kb/HT209600(Third Party Advisory)
• https://usn.ubuntu.com/3834-1/(Third Party Advisory)
• https://usn.ubuntu.com/3834-2/(Third Party Advisory)
• https://www.debian.org/security/2018/dsa-4347(Third Party Advisory)
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html