There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade opensslUpgrade openssl1.1-compatUpgrade openssl3 | Dec 27, 2019 | Dec 6, 2019 |
| Amazon Linux Ami 2 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-libsUpgrade openssl-staticUpgrade openssl-perl | Jul 19, 2021 | Dec 6, 2019 |
| Centos_linux | — | Upgrade openssl-debuginfoUpgrade openssl-libsUpgrade openssl-debugsourceUpgrade openssl-develUpgrade openssl-perlUpgrade openssl-libs-debuginfoUpgrade openssl | Nov 5, 2020 | Dec 6, 2019 |
| Debian | — | Upgrade openssl | Dec 30, 2019 | Dec 6, 2019 |
| Freebsd | — | Upgrade openssl | Dec 21, 2019 | Dec 20, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 24, 2020 | Dec 6, 2019 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Dec 9, 2019 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl110fUpgrade openssl110f-libsUpgrade openssl110f-devel | Jun 17, 2020 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-libs | Apr 30, 2021 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl | Dec 27, 2019 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-perlUpgrade openssl-libs | Jan 3, 2020 | Dec 6, 2019 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.21-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3 | Jan 19, 2021 | Dec 6, 2019 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-perlUpgrade openssl-develUpgrade openssl | Nov 12, 2020 | Dec 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 6, 2019 |
| Redhat_linux | — | Upgrade opensslUpgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-libsNo solution existsUpgrade openssl-perlUpgrade openssl-libs-debuginfo | Nov 5, 2020 | Dec 6, 2019 |
| Suse | — | Upgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl1_0_0Upgrade libopenssl1_0_0-32bitUpgrade openssl-1_1-docUpgrade libopenssl-1_0_0-develUpgrade openssl-1_0_0-cavsUpgrade libopenssl10Upgrade openssl-1_0_0Upgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_0_0-steamUpgrade openssl-docUpgrade opensslUpgrade libopenssl1_1Upgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1_0_0-hmacUpgrade openssl-1_0_0-docUpgrade libopenssl1_1-32bitUpgrade libopenssl1_1-hmacUpgrade libopenssl1_0_0-steam-32bitUpgrade openssl-1_1Upgrade libopenssl-develUpgrade libopenssl-1_1-devel | Jan 8, 2020 | Dec 6, 2019 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl1.1 | May 29, 2020 | Dec 6, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub