CVE-2018-18312

Key facts

CVSS score

9.8 (v3.0)

Severity

CRITICAL

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-119

EPSS score

12.8% (96th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2018-10045)

Published

December 5, 2018

NVD last modified

June 17, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• netapp / e-series santricity os controller
• netapp / snap creator framework
• netapp / snapcenter
• netapp / snapdrive
• perl / perl
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux

Certified products that may be affected

8 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 7 NSS Cryptographic Module - Red Hat®, Inc. - FIPS 140 4498 - historical
• Red Hat Enterprise Linux 7 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 3939 - historical
• Red Hat Enterprise Linux 7 OpenSSH Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 3891 - historical
• Red Hat Enterprise Linux 7 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 3892 - historical
• Red Hat Enterprise Linux 7 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 3867 - historical

See all 8 in the Security Certifications Explorer.

References

• http://www.securityfocus.com/bid/106179(Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id/1042181(Third Party Advisory, VDB Entry)
• https://access.redhat.com/errata/RHSA-2019:0001(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:0010(Third Party Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=1646734(Issue Tracking, Third Party Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWQGEB543QN7SSBRKYJM6PSOC3RLYGSM/
• https://metacpan.org/changes/release/SHAY/perl-5.26.3(Third Party Advisory)
• https://metacpan.org/changes/release/SHAY/perl-5.28.1(Third Party Advisory)
• https://rt.perl.org/Public/Bug/Display.html?id=133423(Exploit, Patch, Third Party Advisory)
• https://security.gentoo.org/glsa/201909-01
• https://security.netapp.com/advisory/ntap-20190221-0003/(Third Party Advisory)
• https://usn.ubuntu.com/3834-1/(Third Party Advisory)
• https://www.debian.org/security/2018/dsa-4347(Third Party Advisory)
• https://www.oracle.com/security-alerts/cpujul2020.html