There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl3Upgrade opensslUpgrade openssl1.1-compat | Dec 27, 2019 | Dec 6, 2019 |
| Amazon Linux Ami 2 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-debuginfoUpgrade openssl-staticUpgrade openssl-perlUpgrade openssl-libs | Jul 19, 2021 | Dec 6, 2019 |
| Centos_linux | — | Upgrade openssl-debuginfoUpgrade openssl-debugsourceUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-libs-debuginfoUpgrade opensslUpgrade openssl-perl | Nov 5, 2020 | Dec 6, 2019 |
| Debian | — | Upgrade openssl | Dec 30, 2019 | Dec 6, 2019 |
| Freebsd | — | Upgrade openssl | Dec 21, 2019 | Dec 20, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 24, 2020 | Dec 6, 2019 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Dec 9, 2019 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl110f-libsUpgrade openssl110f-develUpgrade openssl110f | Jun 17, 2020 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Apr 30, 2021 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl | Dec 27, 2019 | Dec 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-perlUpgrade openssl-libs | Jan 3, 2020 | Dec 6, 2019 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.21-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.26-0.175.3.36.0.27.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-0.175.3.36.0.27.0 on Solaris 11.3 | Jan 19, 2021 | Dec 6, 2019 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl-perlUpgrade openssl | Nov 12, 2020 | Dec 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 6, 2019 |
| Redhat_linux | — | Upgrade openssl-debuginfoUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-develUpgrade openssl-libsNo solution existsUpgrade openssl-libs-debuginfoUpgrade openssl-perl | Nov 5, 2020 | Dec 6, 2019 |
| Suse | — | Upgrade libopenssl1_0_0-hmacUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_0_0-steamUpgrade opensslUpgrade openssl-1_0_0-cavsUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_1Upgrade openssl-docUpgrade libopenssl-1_0_0-develUpgrade libopenssl1_0_0-32bitUpgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade openssl-1_0_0Upgrade libopenssl1_0_0Upgrade libopenssl10Upgrade openssl-1_1-docUpgrade openssl-1_0_0-docUpgrade libopenssl-1_1-develUpgrade libopenssl1_1-hmacUpgrade libopenssl1_0_0-steam-32bitUpgrade libopenssl1_1-32bitUpgrade libopenssl-develUpgrade openssl-1_1 | Jan 8, 2020 | Dec 6, 2019 |
| Ubuntu | — | Upgrade libssl1.1Upgrade libssl1.0.0 | May 29, 2020 | Dec 6, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub