There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl1.1-compatUpgrade openssl3Upgrade openssl | Dec 27, 2019 | Dec 6, 2019 |
| Amazon Linux Ami 2 | — | Upgrade openssl-develUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-staticUpgrade openssl-perlUpgrade openssl-libs | Jul 19, 2021 | Dec 6, 2019 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade openssl-devel | Nov 5, 2020 | Dec 6, 2019 |
| Debian | — | Upgrade openssl | Dec 30, 2019 | Dec 6, 2019 |
| Freebsd | — | Upgrade openssl | Dec 21, 2019 | Dec 20, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 24, 2020 | Dec 6, 2019 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Dec 9, 2019 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl110fUpgrade openssl110f-develUpgrade openssl110f-libs | Jun 17, 2020 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl | Apr 30, 2021 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Dec 27, 2019 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-perlUpgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Jan 3, 2020 | Dec 6, 2019 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.21-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3 | Jan 19, 2021 | Dec 6, 2019 |
| Oracle_linux | — | Upgrade openssl-develUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl | Nov 12, 2020 | Dec 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 6, 2019 |
| Redhat_linux | — | Upgrade openssl-debugsourceUpgrade opensslUpgrade openssl-debuginfoNo solution existsUpgrade openssl-libsUpgrade openssl-libs-debuginfoUpgrade openssl-perlUpgrade openssl-devel | Nov 5, 2020 | Dec 6, 2019 |
| Suse | — | Upgrade libopenssl-1_1-develUpgrade libopenssl-develUpgrade openssl-1_0_0-docUpgrade openssl-1_1Upgrade libopenssl1_1-hmacUpgrade libopenssl1_1-32bitUpgrade libopenssl1_0_0-steam-32bitUpgrade libopenssl10Upgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl1_0_0-steamUpgrade openssl-1_0_0-cavsUpgrade openssl-1_0_0Upgrade libopenssl1_0_0Upgrade libopenssl1_0_0-32bitUpgrade libopenssl-1_0_0-develUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_0_0-hmacUpgrade libopenssl1_0_0-hmac-32bitUpgrade openssl-docUpgrade openssl-1_1-docUpgrade libopenssl1_1Upgrade openssl | Jan 8, 2020 | Dec 6, 2019 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl1.1 | May 29, 2020 | Dec 6, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub