CVE-2019-1559 0-byte record padding oracle
A padding oracle in OpenSSL allows remote attackers to decrypt data if specific non-stitched ciphersuites are used and the application mishandles SSL shutdown errors.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-1559?
CVE-2019-1559 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 27 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).
Weakness: CWE-203
Which versions are affected by CVE-2019-1559?
It affects 82 products.
Linux distribution packages (40)
openssl Red Hat:enterprise_linux:6::client | All versions | 0:1.0.1e-58.el6_10 |
openssl-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:1.0.1e-58.el6_10 |
openssl-devel Red Hat:enterprise_linux:6::client | All versions | 0:1.0.1e-58.el6_10 |
openssl-perl Red Hat:enterprise_linux:6::client | All versions | 0:1.0.1e-58.el6_10 |
openssl-static Red Hat:enterprise_linux:6::client | All versions | 0:1.0.1e-58.el6_10 |
openssl Red Hat:enterprise_linux:6::computenode | All versions | 0:1.0.1e-58.el6_10 |
openssl-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:1.0.1e-58.el6_10 |
openssl-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:1.0.1e-58.el6_10 |
openssl-perl Red Hat:enterprise_linux:6::computenode | All versions | 0:1.0.1e-58.el6_10 |
openssl-static Red Hat:enterprise_linux:6::computenode | All versions | 0:1.0.1e-58.el6_10 |
openssl Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1e-58.el6_10 |
openssl-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1e-58.el6_10 |
openssl-devel Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1e-58.el6_10 |
openssl-perl Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1e-58.el6_10 |
openssl-static Red Hat:enterprise_linux:6::server | All versions | 0:1.0.1e-58.el6_10 |
openssl Red Hat:enterprise_linux:6::workstation | All versions | 0:1.0.1e-58.el6_10 |
openssl-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:1.0.1e-58.el6_10 |
openssl-devel Red Hat:enterprise_linux:6::workstation | All versions | 0:1.0.1e-58.el6_10 |
openssl-perl Red Hat:enterprise_linux:6::workstation | All versions | 0:1.0.1e-58.el6_10 |
openssl-static Red Hat:enterprise_linux:6::workstation | All versions | 0:1.0.1e-58.el6_10 |
openssl SUSE:Enterprise Storage 4 | All versions | 1.0.2j-60.49.1 |
compat-openssl098 SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 0.9.8j-106.12.1 |
openssl SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 1.0.2j-60.49.1 |
compat-openssl098 SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 0.9.8j-106.12.1 |
openssl-1_0_0 SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 1.0.2p-3.6.1 |
compat-openssl098 SUSE:Linux Enterprise Module for Legacy 12 | All versions | 0.9.8j-106.12.1 |
openssl-1_0_0 SUSE:Linux Enterprise Module for Legacy 15 | All versions | 1.0.2p-3.14.2 |
openssl SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 0.9.8j-0.106.21.1 |
openssl SUSE:Linux Enterprise Server 11 SP4-LTSS | All versions | 0.9.8j-0.106.21.1 |
openssl1 SUSE:Linux Enterprise Server 11-SECURITY | All versions | 1.0.1g-0.58.18.1 |
openssl SUSE:Linux Enterprise Server 12 SP1-LTSS | All versions | 1.0.1i-54.26.1 |
openssl SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 1.0.2j-60.49.1 |
openssl SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 1.0.2j-60.49.1 |
openssl SUSE:Linux Enterprise Server 12 SP3 | All versions | 1.0.2j-60.49.1 |
openssl-1_0_0 SUSE:Linux Enterprise Server 12 SP4 | All versions | 1.0.2p-3.6.1 |
compat-openssl098 SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 0.9.8j-106.12.1 |
openssl SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 1.0.1i-54.26.1 |
compat-openssl098 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 0.9.8j-106.12.1 |
openssl SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 1.0.2j-60.49.1 |
compat-openssl098 SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 0.9.8j-106.12.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, F5 Big-Ip Access Policy Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Application Acceleration Manager and 76 more.
How do I fix CVE-2019-1559?
Upgrade to a fixed version.
Is CVE-2019-1559 being exploited?
There is no known exploitation of CVE-2019-1559 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2019-1559, DEBIAN-CVE-2019-1559, DLA-1701-1, DSA-4400-1, GHSA-9ccq-7hvh-cv7p, MGASA-2019-0106 and 12 more.