The vulnerability of the OpenSSL library, related to errors in cryptographic transformations, allows a hacker to disclose the protected information.

🗓️ 04 Apr 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The OpenSSL vulnerability in cryptographic transformations allows remote attackers to disclose data.

Reporter	Title	Published	Views	Family All 135
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private for Data V2.1.0 NGINX (CVE-2019-12206, CVE-2019-12207, CVE-2019-12208, CVE-2019-20372), Docker (CVE-2019-17149, CVE-2019-17150), Kubernetes (CVE-2019-11245, CVE-2019-11253, CVE-2019-1022	6 Mar 202020:58	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilities in OpenSSL affects IBM Watson Studio Local	20 Dec 201913:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za	25 Jul 201915:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability CVE-2019-1543 in OpenSSL affects IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera WebApps (Shares, Faspex, Console, Orchestrator) and products are affected by OpenSSL Vulnerability (CVE-ID: CVE-2019-1543)	7 Feb 202002:06	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities (CVE-2008-5730, CVE-2015-5237, CVE-2018-12020, CVE-2019-13050, CVE-2019-14855, CVE-2019-1543, CVE-2020-25125, CVE-2021-3712, CVE-2022-31130, CVE-2023-0464, CVE-2022-1292)	11 Aug 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private for Data - OpenSSL (CVE-2019-1543), Kubernetes (CVE-2019-1002100, CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518)	23 Oct 201914:47	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0025: openssl (ALINUX3-SA-2022:0025)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : openssl (CESA-2019:3700)	29 Jan 202100:00	–	nessus
Tenable Nessus	Debian DSA-4475-1 : openssl - security update	2 Jul 201900:00	–	nessus

Vulners

Node

openssl opensslRange1.1.1–1.1.1b

openssl opensslRange1.1.0–1.1.0j

novell suse_linux_enterprise_module_for_open_buildservice_development_toolsMatch15

fedora fedoraMatch29

red_hat red_hat_enterprise_linuxMatch8

novell opensuse_leapMatch15.0

novell opensuse_leapMatch15.1

fedora fedoraMatch30

Source	Link
suse	www.suse.com/support/update/announcement/2019/suse-su-20190678-1/
securityfocus	www.securityfocus.com/bid/107349
suse	www.suse.com/security/cve/CVE-2019-1543/
wiki	www.wiki.astralinux.ru/pages/viewpage.action
lists	www.lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html
access	www.access.redhat.com/errata/RHSA-2019:3700
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/

21 Nov 2023 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 33.7

CVSS 24.3

EPSS0.03184