The vulnerability of the PA-RISC CRYPTO_memcmp function in the OpenSSL library, related to information disclosure, allows attackers to gain access to confidential data.

🗓️ 27 Jan 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The PA RISC crypto memory compare flaw in OpenSSL exposes confidential data to remote attackers.

Reporter	Title	Published	Views	Family All 235
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Rational ClearCase (CVE-2019-1551)	25 Jun 202013:14	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerabilities affect IBM Spectrum Control (CVE-2020-1967, CVE-2019-1551)	23 Mar 202222:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sterling Connect:Direct for HP NonStop	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private - OpenSSL (CVE-2019-1551)	25 Feb 202121:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise (CVE-2019-1551)	9 Dec 202011:22	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerability CVE-2019-1551 impacts IBM Aspera Streaming/IBM Aspera Streaming for Video version 3.9.6.1 and earlier	8 Dec 202018:47	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerabilities affect IBM Watson Text to Speech and Speech to Text (IBM Watson Speech Services for Cloud Pak for Data 1.2)	16 Dec 202017:39	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSSL affects IBM Rational ClearQuest (CVE-2019-1551)	25 Jun 202014:35	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerability affects IBM Engineering Workflow Management	16 Feb 202115:01	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL Vulnerability Affects IBM Sterling Connect:Express for UNIX (CVE-2019-1551)	24 Jul 202022:49	–	ibm

Vulners

Node

oracle peoplesoft_enterprise_peopletoolsMatch8.56aurora

oracle peoplesoft_enterprise_peopletoolsMatch8.57aurora

openssl opensslRange1.0.2–1.0.2taurora

openssl opensslRange1.1.1–1.1.1daurora

oracle peoplesoft_enterprise_peopletoolsMatch8.58aurora

oracle mysql_enterprise_monitorRange≤4.0.12aurora

oracle mysql_enterprise_monitorRange≤8.0.20aurora

oracle enterprise_manager_ops_centerMatch12.4.0.0aurora

oracle jd_edwards_enterpriseone_toolsRange<9.2.5.0aurora

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

novell opensuse_leapMatch15.1

fedora fedoraMatch32

Source	Link
access	www.access.redhat.com/security/cve/CVE-2019-1551
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-1551
packetstormsecurity	www.packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html
seclists	www.seclists.org/bugtraq/2019/Dec/39
seclists	www.seclists.org/bugtraq/2019/Dec/46
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-1551

20 Oct 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 35.3

EPSS0.14298