Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade opensslUpgrade openssl3Upgrade openssl1.1-compat | Dec 27, 2019 | Sep 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade openssl11-develUpgrade openssl11Upgrade opensslUpgrade openssl11-libsUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl11-staticUpgrade openssl11-debuginfoUpgrade openssl-staticUpgrade openssl-develUpgrade openssl-debuginfo | Apr 27, 2020 | Sep 10, 2019 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-debuginfoUpgrade openssl-debugsourceUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl-devel | Apr 29, 2020 | Sep 10, 2019 |
| Debian | — | Upgrade openssl | Sep 27, 2019 | Sep 10, 2019 |
| Freebsd | — | Upgrade openssl111Upgrade mariadb101-serverUpgrade percona55-serverUpgrade percona56-serverUpgrade mariadb103-serverUpgrade opensslUpgrade percona57-serverUpgrade mysql80-serverUpgrade mysql56-serverUpgrade mariadb104-serverUpgrade mariadb102-serverUpgrade mysql57-server | Apr 23, 2020 | Sep 11, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Nov 8, 2019 | Sep 10, 2019 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 12, 2019 | Sep 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl | Dec 4, 2019 | Sep 10, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-libs | Nov 19, 2019 | Sep 10, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl110h-staticUpgrade openssl110h-libsUpgrade openssl110h-develUpgrade openssl110h | Nov 19, 2019 | Sep 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade compat-openssl10 | Nov 19, 2019 | Sep 10, 2019 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory31 | Nov 27, 2019 | Sep 10, 2019 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.20-11.4.16.0.1.1.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Sep 10, 2019 |
| Oracle_linux | — | Upgrade opensslUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-libs | Jul 22, 2024 | Sep 10, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 10, 2019 |
| Redhat_linux | — | Upgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade openssl-libs-debuginfoNo solution existsUpgrade openssl-develUpgrade openssl-libsUpgrade opensslUpgrade openssl-perl | Apr 29, 2020 | Sep 10, 2019 |
| Suse | — | Upgrade libopenssl0_9_8-hmacUpgrade libopenssl-1_0_0-devel-32bitUpgrade openssl1Upgrade opensslUpgrade openssl-1_1-docUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl10Upgrade libopenssl1_0_0-32bitUpgrade libopenssl1_1-32bitUpgrade openssl-1_0_0-cavsUpgrade libopenssl0_9_8-32bitUpgrade libopenssl-develUpgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl1_0_0-x86Upgrade libopenssl1_0_0-hmacUpgrade libopenssl-1_0_0-develUpgrade libopenssl1_0_0-steam-32bitUpgrade libopenssl-1_1-develUpgrade libopenssl1_0_0-steamUpgrade libopenssl0_9_8Upgrade openssl-1_0_0Upgrade openssl-1_1Upgrade libopenssl1_0_0Upgrade libopenssl1_1-hmacUpgrade openssl-1_0_0-docUpgrade libopenssl1_1Upgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1-develUpgrade openssl-docUpgrade libopenssl-1_1-devel-32bitUpgrade openssl1-doc | Sep 19, 2019 | Sep 10, 2019 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl1.0.0 (Ubuntu Pro)Upgrade libssl1.1 | May 29, 2020 | Sep 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub