CVE-2019-1547 ECDSA remote timing attack

🗓️ 10 Sep 2019 16:58:35Reported by opensslType

CVE-2019-1547 ECDSA remote timing attack in OpenSS

Reporter	Title	Published	Views	Family All 312
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in openssl shipped with PowerAI Vision	8 Jan 202019:00	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSSL affects IBM Storage Protect Backup-Archive Client on Linux x86_64 and Microsoft Windows (CVE-2019-1547)	31 Oct 202314:40	–	ibm
IBM Security Bulletins	Security Bulletin: Information Disclosure in Cognos Business Intelligence (Cognos BI) shipped with Tivoli Common Reporting (CVE-2019-1547, CVE-2019-1549, CVE-2019-1563)	19 Mar 202005:19	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerability affects IBM Rational Team Concert	12 Feb 202016:09	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerabilities affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center)	22 Feb 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2019-1547, CVE-2019-1563)	23 Oct 201903:29	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Openssl shipped with PowerAI.	10 Jan 202019:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL Affect IBM Sterling Connect:Direct for HP NonStop	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - OpenSSL (CVE-2019-1563, CVE-2019-1549, CVE-2019-1547)	26 Sep 202018:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM i	19 Dec 201923:43	–	ibm

[
  {
    "vendor": "OpenSSL",
    "product": "OpenSSL",
    "versions": [
      {
        "version": "Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c)",
        "status": "affected"
      },
      {
        "version": "Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k)",
        "status": "affected"
      },
      {
        "version": "Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html
usn	www.usn.ubuntu.com/4376-1/
support	www.support.f5.com/csp/article/K73422160
kc	www.kc.mcafee.com/corporate/index
security	www.security.netapp.com/advisory/ntap-20200416-0003/
seclists	www.seclists.org/bugtraq/2019/Oct/1
oracle	www.oracle.com/security-alerts/cpuoct2020.html
git	www.git.openssl.org/gitweb/
usn	www.usn.ubuntu.com/4504-1/
oracle	www.oracle.com/security-alerts/cpujul2020.html

21 Jun 2024 19:06Current

5.3Medium risk

Vulners AI Score5.3

EPSS0.01198