Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-1518 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1519 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1520 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1521 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1522 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1523 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1524 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1525 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1526 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1527 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1528 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1529 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1530 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1531 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1532 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1533 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1534 State: REJECTED Published: 2020-01-24T21:14:19 Last Updated: 2020-01-24T21:14:19 Description: No description available.
CVE ID: CVE-2019-1535 State: REJECTED Published: 2020-09-10T13:52:54 Last Updated: 2020-09-10T15:03:59 Description: No description available.
CVE ID: CVE-2019-1536 State: REJECTED Published: 2020-09-10T14:01:47 Last Updated: 2020-09-10T15:15:00 Description: No description available.
CVE ID: CVE-2019-1537 State: REJECTED Published: 2020-09-10T13:46:44 Last Updated: 2020-09-10T14:40:45 Description: No description available.
CVE ID: CVE-2019-1538 State: REJECTED Published: 2020-09-10T13:44:27 Last Updated: 2020-09-10T14:36:01 Description: No description available.
CVE ID: CVE-2019-1539 State: REJECTED Published: 2020-09-10T13:45:18 Last Updated: 2020-09-10T14:37:29 Description: No description available.
CVE ID: CVE-2019-1540 State: REJECTED Published: 2020-09-10T14:00:31 Last Updated: 2020-09-10T15:12:29 Description: No description available.
CVE ID: CVE-2019-1541 State: REJECTED Published: 2020-09-10T13:58:46 Last Updated: 2020-09-10T15:08:01 Description: No description available.
CVE ID: CVE-2019-1542 State: REJECTED Published: 2020-09-10T13:48:49 Last Updated: 2020-09-10T14:45:40 Description: No description available.
CVE ID: CVE-2019-1543 State: PUBLISHED Published: 2019-03-06T21:00:00Z Last Updated: 2024-09-16T17:43:26.783Z Vendors: OpenSSL Products: OpenSSL Problem Types: Nonce Reuse Description: ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values ar
significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a lon
integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affec
not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j). Additional Analyst Notes: - CVE Program Container: References: - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f426625b6ae9a7831010750490a5f0ad689c5ba3 - https://www.openssl.org/news/secadv/20190306.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ee22257b1418438ebaf54df98af4e24f494d1809 - https://seclists.org/bugtraq/2019/Jul/3 - https://www.debian.org/security/2019/dsa-4475 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - http://lists.opensuse.org/opensuse-security-announce/2019-07
com/technetwork/security-advisory/cpujul2019-5072835.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/ - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3700 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2019-1544 State: REJECTED Published: 2020-09-10T13:47:24 Last Updated: 2020-09-10T14:42:28 Description: No description available.
CVE ID: CVE-2019-1545 State: REJECTED Published: 2020-09-10T13:51:31 Last Updated: 2020-09-10T14:53:25 Description: No description available.
CVE ID: CVE-2019-1546 State: REJECTED Published: 2020-09-10T14:01:13 Last Updated: 2020-09-10T15:13:41 Description: No description available.
CVE ID: CVE-2019-1547 State: PUBLISHED Published: 2019-09-10T16:58:35.307121Z Last Updated: 2024-09-16T16:33:05.874Z Vendors: OpenSSL Products: OpenSSL Problem Types: Timing side channel Description: Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result i
named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pro
0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Sep/25 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/ - https://seclists.o
/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/ - https://seclists.org/bugtraq/2019/Oct/1 - https://seclists.org/bugtraq/2019/Oct/0 - https://www.debian.org/security/2019/dsa-4539 - https://www.debian.org/security/2019/dsa-4540 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html - https://security.gentoo.org/glsa/201911-04 - https://usn.ubuntu.com/4376-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.
ww.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.tenable.com/security/tns-2019-08 - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.openssl.org/news/secadv/20190910.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46 - https://arxiv.org/abs/1909.01785 - http://packetstormsecurity.com/files/154467/Slackware-Secur
aa63b4f036bb64a85bf6d46 - https://arxiv.org/abs/1909.01785 - http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html - https://security.netapp.com/advisory/ntap-20190919-0002/ - https://support.f5.com/csp/article/K73422160?utm_source=f5support&amp%3Butm_medium=RSS - https://www.tenable.com/security/tns-2019-09 - https://security.netapp.com/advisory/ntap-20200122-0002/ - https://security.netapp.com/advisory/ntap-20200416-0003/ - https://usn.ubuntu.com/4376-2/ - https://usn.ubuntu.com/4504-1/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365 - https://security.netapp.com/advisory/ntap-20
2020.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365 - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2019-1548 State: REJECTED Published: 2020-09-10T13:57:28 Last Updated: 2020-09-10T15:05:31 Description: No description available.
CVE ID: CVE-2019-1549 State: PUBLISHED Published: 2019-09-10T16:58:35.361288Z Last Updated: 2024-09-16T22:56:57.501Z Vendors: OpenSSL Products: OpenSSL Problem Types: Random Number Generation Description: OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A partial mitigation for this issue is that the output from a high precision timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced
timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced. If an application already calls OPENSSL_init_crypto() explicitly using OPENSSL_INIT_ATFORK then this problem does not occur at all. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/ - https://seclists.org/bugtraq/2019/Oct/1 - https://www.debian.org/s
oject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/ - https://seclists.org/bugtraq/2019/Oct/1 - https://www.debian.org/security/2019/dsa-4539 - https://usn.ubuntu.com/4376-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.openssl.org/news/secadv/20190910.txt - https://security.netapp.com/advisory/ntap-20190919-0002/ - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1b0fe00e2704b5e20334a16d3c9099d1ba2ef1be - https://support.f5.com/csp/article/K44070243 - https://
it%3Ba=commitdiff%3Bh=1b0fe00e2704b5e20334a16d3c9099d1ba2ef1be - https://support.f5.com/csp/article/K44070243 - https://support.f5.com/csp/article/K44070243?utm_source=f5support&amp%3Butm_medium=RSS - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2019-1550 State: REJECTED Published: 2020-09-10T13:59:54 Last Updated: 2020-09-10T15:10:51 Description: No description available.
CVE ID: CVE-2019-1551 State: PUBLISHED Published: 2019-12-06T17:20:14.842234Z Last Updated: 2024-09-16T19:40:14.240Z Vendors: OpenSSL Products: OpenSSL Problem Types: Integer overflow bug Description: There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also application
, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t). Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Dec/39 - https://www.debian.org/security/2019/dsa-4594 - https://seclists.org/bugtraq/2019/Dec/46 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html - https://security.gentoo.org/glsa/202004-10 - https://lists.fedoraproject.org/archives/list/package-announce%40list
tml - https://security.gentoo.org/glsa/202004-10 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/ - https://usn.ubuntu.com/4376-1/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.tenable.com/security/tns-2019-09 - https://www.openssl.org/news/secadv/20191206.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3
9-09 - https://www.openssl.org/news/secadv/20191206.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98 - https://security.netapp.com/advisory/ntap-20191210-0001/ - http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html - https://www.tenable.com/security/tns-2020-03 - https://usn.ubuntu.com/4504-1/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.tenable.com/security/tns-2020-11 - https://www.debian.org/security/2021/dsa-4855 - https://www.oracle.com/security-alerts/c
able.com/security/tns-2020-11 - https://www.debian.org/security/2021/dsa-4855 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-10 - https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
CVE ID: CVE-2019-1552 State: PUBLISHED Published: 2019-07-30T16:29:24.093372Z Last Updated: 2024-09-16T16:18:01.834Z Vendors: OpenSSL Products: OpenSSL Problem Types: Insecure defaults Description: OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPEN
d libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be '/usr/local'. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of 'C:/usr/local', which may be world writable, which enables untrusted users to modify OpenSSL's default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, '/usr/local/ssl' is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix.
s. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s). Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/ - https://lists.fed
g/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.tenable.com/security/tns-2019-08 - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.tenable.com/security/t
e.com/security/tns-2019-08 - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.tenable.com/security/tns-2019-09 - https://www.openssl.org/news/secadv/20190730.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=54aa9d51b09d67e90db443f682cface795f5af9e - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e32bc855a81a2d48d215c506bdeb4f598045f7e9 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b15a19c148384e73338aa7c5b12652138e35ed28 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=d333ebaf9c77332754a9d5e111e2f53e1de54fdd - https://security.netapp.com/advisory/ntap-20190823-0006/ - https://support.f5.com/cs
f9c77332754a9d5e111e2f53e1de54fdd - https://security.netapp.com/advisory/ntap-20190823-0006/ - https://support.f5.com/csp/article/K94041354 - https://support.f5.com/csp/article/K94041354?utm_source=f5support&amp%3Butm_medium=RSS - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.kb.cert.org/vuls/id/429301 - https://kc.mcafee.com/corporate/index?page=content&id=SB10365 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2019-1553 State: REJECTED Published: 2020-09-10T13:49:26 Last Updated: 2020-09-10T14:48:30 Description: No description available.
CVE ID: CVE-2019-1554 State: REJECTED Published: 2020-09-10T13:50:54 Last Updated: 2020-09-10T14:51:39 Description: No description available.
CVE ID: CVE-2019-1555 State: REJECTED Published: 2020-09-10T13:49:59 Last Updated: 2020-09-10T14:50:19 Description: No description available.
CVE ID: CVE-2019-1556 State: REJECTED Published: 2020-09-10T13:59:18 Last Updated: 2020-09-10T15:09:19 Description: No description available.
CVE ID: CVE-2019-1557 State: REJECTED Published: 2020-09-10T13:58:08 Last Updated: 2020-09-10T15:06:46 Description: No description available.
CVE ID: CVE-2019-1558 State: REJECTED Published: 2020-09-10T13:46:00 Last Updated: 2020-09-10T14:39:09 Description: No description available.
CVE ID: CVE-2019-1559 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-17T04:20:35.057Z Vendors: OpenSSL Products: OpenSSL Problem Types: Padding Oracle Description: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order
at is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107174 - https://security.gentoo.org/glsa/201903-10 - https://usn.ubuntu.com/3899-1/ - https://lists.debian.org/debian-lts-anno
- https://security.gentoo.org/glsa/201903-10 - https://usn.ubuntu.com/3899-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html - https://www.debian.org/security/2019/dsa-4400 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html - https://access.redhat.com/errata/RHSA-201