CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1551

There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.036

EPSS Ranking 87.3%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2019-1551

Openssl » Openssl » Version: 1.0.2

cpe:2.3:a:openssl:openssl:1.0.2
Openssl » Openssl » Version: 1.0.2a

cpe:2.3:a:openssl:openssl:1.0.2a
Openssl » Openssl » Version: 1.0.2b

cpe:2.3:a:openssl:openssl:1.0.2b
Openssl » Openssl » Version: 1.0.2c

cpe:2.3:a:openssl:openssl:1.0.2c
Openssl » Openssl » Version: 1.0.2d

cpe:2.3:a:openssl:openssl:1.0.2d
Openssl » Openssl » Version: 1.0.2e

cpe:2.3:a:openssl:openssl:1.0.2e
Openssl » Openssl » Version: 1.0.2f

cpe:2.3:a:openssl:openssl:1.0.2f
Openssl » Openssl » Version: 1.0.2g

cpe:2.3:a:openssl:openssl:1.0.2g
Openssl » Openssl » Version: 1.0.2h

cpe:2.3:a:openssl:openssl:1.0.2h
Openssl » Openssl » Version: 1.0.2i

cpe:2.3:a:openssl:openssl:1.0.2i
Openssl » Openssl » Version: 1.0.2j

cpe:2.3:a:openssl:openssl:1.0.2j
Openssl » Openssl » Version: 1.0.2k

cpe:2.3:a:openssl:openssl:1.0.2k
Openssl » Openssl » Version: 1.0.2l

cpe:2.3:a:openssl:openssl:1.0.2l
Openssl » Openssl » Version: 1.0.2m

cpe:2.3:a:openssl:openssl:1.0.2m
Openssl » Openssl » Version: 1.0.2n

cpe:2.3:a:openssl:openssl:1.0.2n
Openssl » Openssl » Version: 1.0.2o

cpe:2.3:a:openssl:openssl:1.0.2o
Openssl » Openssl » Version: 1.0.2p

cpe:2.3:a:openssl:openssl:1.0.2p
Openssl » Openssl » Version: 1.0.2q

cpe:2.3:a:openssl:openssl:1.0.2q
Openssl » Openssl » Version: 1.0.2r

cpe:2.3:a:openssl:openssl:1.0.2r
Openssl » Openssl » Version: 1.0.2s

cpe:2.3:a:openssl:openssl:1.0.2s
Openssl » Openssl » Version: 1.0.2t

cpe:2.3:a:openssl:openssl:1.0.2t
Openssl » Openssl » Version: 1.1.1

cpe:2.3:a:openssl:openssl:1.1.1
Openssl » Openssl » Version: 1.1.1a

cpe:2.3:a:openssl:openssl:1.1.1a
Openssl » Openssl » Version: 1.1.1b

cpe:2.3:a:openssl:openssl:1.1.1b
Openssl » Openssl » Version: 1.1.1c

cpe:2.3:a:openssl:openssl:1.1.1c
Openssl » Openssl » Version: 1.1.1d

cpe:2.3:a:openssl:openssl:1.1.1d
Oracle » Enterprise Manager Ops Center » Version: 12.4.0.0

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0
Oracle » Mysql Enterprise Monitor » Version: N/A

cpe:2.3:a:oracle:mysql_enterprise_monitor:-
Oracle » Mysql Enterprise Monitor » Version: 2.3.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:2.3.14
Oracle » Mysql Enterprise Monitor » Version: 3.0.25

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.25
Oracle » Mysql Enterprise Monitor » Version: 3.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.0
Oracle » Mysql Enterprise Monitor » Version: 3.1.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.1
Oracle » Mysql Enterprise Monitor » Version: 3.1.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.2
Oracle » Mysql Enterprise Monitor » Version: 3.1.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3
Oracle » Mysql Enterprise Monitor » Version: 3.1.3.7856

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3.7856
Oracle » Mysql Enterprise Monitor » Version: 3.1.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.5
Oracle » Mysql Enterprise Monitor » Version: 3.1.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6
Oracle » Mysql Enterprise Monitor » Version: 3.1.6.8003

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6.8003
Oracle » Mysql Enterprise Monitor » Version: 3.1.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0
Oracle » Mysql Enterprise Monitor » Version: 3.2.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1
Oracle » Mysql Enterprise Monitor » Version: 3.2.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.10
Oracle » Mysql Enterprise Monitor » Version: 3.2.1182

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1182
Oracle » Mysql Enterprise Monitor » Version: 3.2.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2
Oracle » Mysql Enterprise Monitor » Version: 3.2.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3
Oracle » Mysql Enterprise Monitor » Version: 3.2.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4
Oracle » Mysql Enterprise Monitor » Version: 3.2.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5
Oracle » Mysql Enterprise Monitor » Version: 3.2.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6
Oracle » Mysql Enterprise Monitor » Version: 3.2.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8
Oracle » Mysql Enterprise Monitor » Version: 3.2.8.2223

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223
Oracle » Mysql Enterprise Monitor » Version: 3.2.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.9
Oracle » Mysql Enterprise Monitor » Version: 3.3.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0
Oracle » Mysql Enterprise Monitor » Version: 3.3.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1
Oracle » Mysql Enterprise Monitor » Version: 3.3.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2
Oracle » Mysql Enterprise Monitor » Version: 3.3.2.1162

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2.1162
Oracle » Mysql Enterprise Monitor » Version: 3.3.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3
Oracle » Mysql Enterprise Monitor » Version: 3.3.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4
Oracle » Mysql Enterprise Monitor » Version: 3.3.4.3247

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247
Oracle » Mysql Enterprise Monitor » Version: 3.3.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.5
Oracle » Mysql Enterprise Monitor » Version: 3.3.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6
Oracle » Mysql Enterprise Monitor » Version: 3.3.6.3293

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6.3293
Oracle » Mysql Enterprise Monitor » Version: 3.3.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.7
Oracle » Mysql Enterprise Monitor » Version: 3.3.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.8
Oracle » Mysql Enterprise Monitor » Version: 3.3.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0
Oracle » Mysql Enterprise Monitor » Version: 3.4.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1
Oracle » Mysql Enterprise Monitor » Version: 3.4.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.10
Oracle » Mysql Enterprise Monitor » Version: 3.4.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2
Oracle » Mysql Enterprise Monitor » Version: 3.4.2.4181

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181
Oracle » Mysql Enterprise Monitor » Version: 3.4.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.3
Oracle » Mysql Enterprise Monitor » Version: 3.4.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4
Oracle » Mysql Enterprise Monitor » Version: 3.4.4.4226

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4.4226
Oracle » Mysql Enterprise Monitor » Version: 3.4.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.5
Oracle » Mysql Enterprise Monitor » Version: 3.4.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.6
Oracle » Mysql Enterprise Monitor » Version: 3.4.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7
Oracle » Mysql Enterprise Monitor » Version: 3.4.7.4297

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7.4297
Oracle » Mysql Enterprise Monitor » Version: 3.4.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.8
Oracle » Mysql Enterprise Monitor » Version: 3.4.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.9.4237

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9.4237
Oracle » Mysql Enterprise Monitor » Version: 4.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0
Oracle » Mysql Enterprise Monitor » Version: 4.0.0.5135

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0.5135
Oracle » Mysql Enterprise Monitor » Version: 4.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.1
Oracle » Mysql Enterprise Monitor » Version: 4.0.11.5331

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.11.5331
Oracle » Mysql Enterprise Monitor » Version: 4.0.12

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.12
Oracle » Mysql Enterprise Monitor » Version: 4.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.2
Oracle » Mysql Enterprise Monitor » Version: 4.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.3
Oracle » Mysql Enterprise Monitor » Version: 4.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4
Oracle » Mysql Enterprise Monitor » Version: 4.0.4.5235

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4.5235
Oracle » Mysql Enterprise Monitor » Version: 4.0.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.5
Oracle » Mysql Enterprise Monitor » Version: 4.0.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6
Oracle » Mysql Enterprise Monitor » Version: 4.0.6.5281

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6.5281
Oracle » Mysql Enterprise Monitor » Version: 4.0.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.7
Oracle » Mysql Enterprise Monitor » Version: 4.0.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.8
Oracle » Mysql Enterprise Monitor » Version: 8.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0
Oracle » Mysql Enterprise Monitor » Version: 8.0.0.8131

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0.8131
Oracle » Mysql Enterprise Monitor » Version: 8.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.1
Oracle » Mysql Enterprise Monitor » Version: 8.0.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.14
Oracle » Mysql Enterprise Monitor » Version: 8.0.18.1217

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.18.1217
Oracle » Mysql Enterprise Monitor » Version: 8.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2
Oracle » Mysql Enterprise Monitor » Version: 8.0.2.8191

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2.8191
Oracle » Mysql Enterprise Monitor » Version: 8.0.20

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.20
Oracle » Mysql Enterprise Monitor » Version: 8.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.3
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.56

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.57

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.58

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58
Tenable » Log Correlation Engine » Version: N/A

cpe:2.3:a:tenable:log_correlation_engine:-
Tenable » Log Correlation Engine » Version: 4.8.0

cpe:2.3:a:tenable:log_correlation_engine:4.8.0
Tenable » Log Correlation Engine » Version: 4.8.1

cpe:2.3:a:tenable:log_correlation_engine:4.8.1
Tenable » Log Correlation Engine » Version: 4.8.2

cpe:2.3:a:tenable:log_correlation_engine:4.8.2
Tenable » Log Correlation Engine » Version: 6.0.8

cpe:2.3:a:tenable:log_correlation_engine:6.0.8
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.10

cpe:2.3:o:canonical:ubuntu_linux:19.10
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1551

Products

Pricing

Contact Us