Maple Labs

CVE search · CVE-2019-1559

CVE-2019-1559

medium 5.9

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
openssl-security@openssl.org
Weakness
CWE-203

Severity

VersionScoreVectorSource
CVSS 3.1 medium 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N nvd@nist.govPrimary
CVSS 2.0 medium 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • openssl · openssl
  • canonical · ubuntu_linux
  • debian · debian_linux
  • netapp · active_iq_unified_manager
  • netapp · altavault
  • netapp · cloud_backup
  • netapp · clustered_data_ontap_antivirus_connector
  • netapp · element_software
  • netapp · hci_management_node
  • netapp · hyper_converged_infrastructure
  • netapp · oncommand_insight
  • netapp · oncommand_unified_manager
  • netapp · oncommand_unified_manager_core_package
  • netapp · oncommand_workflow_automation
  • netapp · ontap_select_deploy
  • netapp · ontap_select_deploy_administration_utility
  • netapp · santricity_smi-s_provider
  • netapp · service_processor
  • netapp · smi-s_provider
  • netapp · snapcenter
  • netapp · snapdrive
  • netapp · snapprotect
  • netapp · solidfire
  • netapp · steelstore_cloud_integrated_storage
  • netapp · storage_automation_store
  • netapp · storagegrid
  • netapp · hci_compute_node
  • f5 · big-ip_access_policy_manager
  • f5 · big-ip_advanced_firewall_manager
  • f5 · big-ip_analytics
  • f5 · big-ip_application_acceleration_manager
  • f5 · big-ip_application_security_manager
  • f5 · big-ip_domain_name_system
  • f5 · big-ip_edge_gateway
  • f5 · big-ip_fraud_protection_service
  • f5 · big-ip_global_traffic_manager
  • f5 · big-ip_link_controller
  • f5 · big-ip_local_traffic_manager
  • f5 · big-ip_policy_enforcement_manager
  • f5 · big-ip_webaccelerator
  • f5 · big-iq_centralized_management
  • f5 · traffix_signaling_delivery_controller
  • tenable · nessus
  • opensuse · leap
  • netapp · cn1610_firmware
  • netapp · a320_firmware
  • netapp · c190_firmware
  • netapp · a220_firmware
  • netapp · fas2720_firmware
  • netapp · fas2750_firmware
  • netapp · a800_firmware
  • fedoraproject · fedora
  • mcafee · agent
  • mcafee · data_exchange_layer
  • mcafee · threat_intelligence_exchange_server
  • mcafee · web_gateway
  • redhat · jboss_enterprise_web_server
  • redhat · virtualization
  • redhat · virtualization_host
  • redhat · enterprise_linux_desktop
  • redhat · enterprise_linux_server
  • redhat · enterprise_linux_workstation
  • oracle · api_gateway
  • oracle · business_intelligence
  • oracle · communications_diameter_signaling_router
  • oracle · communications_performance_intelligence_center
  • oracle · communications_session_border_controller
  • oracle · communications_session_router
  • oracle · communications_unified_session_manager
  • oracle · endeca_server
  • oracle · enterprise_manager_base_platform
  • oracle · enterprise_manager_ops_center
  • oracle · jd_edwards_enterpriseone_tools
  • oracle · jd_edwards_world_security
  • oracle · mysql
  • oracle · mysql_enterprise_monitor
  • oracle · mysql_workbench
  • oracle · peoplesoft_enterprise_peopletools
  • oracle · secure_global_desktop
  • oracle · services_tools_bundle
  • paloaltonetworks · pan-os
  • nodejs · node.js

References