CVE-2020-1968

🗓️ 09 Sep 2020 13:50:12Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 434 Views

CVE-2020-1968: Raccoon attack exploits flaw in TLS spec allowing attacker to compute pre-master secret, to eavesdrop on encrypted communications

Reporter	Title	Published	Views	Family All 106
IBM Security Bulletins	Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.	2 Jun 202121:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Master Data Management Server vulnerability in OpenSSL	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.	24 Feb 202122:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Webapps (Shares, Console) are vulnerable to an OpenSSL Vunerability (CVE-2020-7656).	17 Sep 202117:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect AIX (CVE-2020-1968, CVE-2020-1971)	1 Feb 202120:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise (CVE-2020-1968)	19 Apr 202113:06	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2020-1968 vulnerability in OpenSSL may affect IBM Workload Scheduler	11 Jan 202108:25	–	ibm
IBM Security Bulletins	Security Bulletin: Potential TLS vulnerability using Diffie-Hellman TLS ciphersuites in IBM DataPower Gateway (CVE-2020-1968)	8 Jun 202121:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Waston Machine Learning Acclerator is affected by an OpenSSL 1.0.2k vulnerability	16 Jun 202107:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Safer Payment affected by OpenSSL Racoon Attack (CVE-2020-1968)	24 Apr 202314:13	–	ibm

NVD

Vulners

Node

openssl opensslRange1.0.2–1.0.2v

Node

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

Node

debian debian_linuxMatch9.0

Node

oracle jd_edwards_world_securityMatcha9.4

oracle peoplesoft_enterprise_peopletoolsMatch8.56

oracle peoplesoft_enterprise_peopletoolsMatch8.57

oracle peoplesoft_enterprise_peopletoolsMatch8.58

Node

oracle ethernet_switch_es2-64_firmwareMatch2.0.0.14

AND

oracle ethernet_switch_es2-64Match-

Node

oracle ethernet_switch_es2-72_firmwareMatch2.0.0.14

AND

oracle ethernet_switch_es2-72Match-

Node

fujitsu m10-1_firmwareRange<xcp2400

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp2400

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp2400

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp2400

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp2400

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp2400

AND

fujitsu m12-2sMatch-

Node

fujitsu m10-1_firmwareRange<xcp3100

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp3100

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp3100

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp3100

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp3100

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp3100

AND

fujitsu m12-2sMatch-

Node

oracle ethernet_switch_es1-24_firmwareMatch1.3.1

AND

oracle ethernet_switch_es1-24Match-

Node

oracle ethernet_switch_tor-72_firmwareMatch1.2.2

AND

oracle ethernet_switch_tor-72Match-

[
  {
    "vendor": "OpenSSL",
    "product": "OpenSSL",
    "versions": [
      {
        "version": "Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
openssl	www.openssl.org/news/secadv/20200909.txt
oracle	www.oracle.com/security-alerts/cpuoct2021.html
lists	www.lists.debian.org/debian-lts-announce/2020/09/msg00016.html
security	www.security.netapp.com/advisory/ntap-20200911-0004/
security	www.security.gentoo.org/glsa/202210-02
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
usn	www.usn.ubuntu.com/4504-1/

16 Apr 2026 15:16Current

4.1Medium risk

Vulners AI Score4.1

CVSS 3.13.7

CVSS 24.3

EPSS0.01042

SSVC

CWE-203