CVE-2019-1547

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.0.2"
                        },
                        {
                            "last_affected": "1.0.2s"
                        },
                        {
                            "introduced": "1.1.0"
                        },
                        {
                            "last_affected": "1.1.0k"
                        },
                        {
                            "introduced": "1.1.0"
                        },
                        {
                            "last_affected": "1.1.0k"
                        },
                        {
                            "introduced": "1.1.1"
                        },
                        {
                            "last_affected": "1.1.1c"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "openssl:openssl"
        }
    ]
}

References

Affected packages

Git

github.com/alsyundawy/openssl-1.0.2

Affected ranges

Type

GIT

Repo

https://github.com/alsyundawy/openssl-1.0.2

Events

Introduced

c46078156d49453ba69badc9addb1e2dcd1c71f5

Last Affected

c46078156d49453ba69badc9addb1e2dcd1c71f5

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "last_affected": "1.0.2s"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

1.*

1.0.2zs-u20260929-rev1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1547.json"

github.com/kzalewski/openssl-1.1.1

Affected ranges

Type

GIT

Repo

https://github.com/kzalewski/openssl-1.1.1

Events

Introduced

ddb327ab19b29c64c1752cef26c460ca0b7064ec

Last Affected

ddb327ab19b29c64c1752cef26c460ca0b7064ec

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "last_affected": "1.1.1c"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

1.*

1.1.1zh

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1547.json"

github.com/openssl/openssl

Affected ranges

Type

GIT

Repo

https://github.com/openssl/openssl

Events

Introduced

e818b74be2170fbe957a07b0da4401c2b694b3b8

Last Affected

e818b74be2170fbe957a07b0da4401c2b694b3b8

Introduced

7ea5bd2b52d0e81eaef3d109b3b12545306f201c

Last Affected

7ea5bd2b52d0e81eaef3d109b3b12545306f201c

Introduced

e04bd3433fd84e1861bf258ea37928d9845e6a86

Last Affected

e04bd3433fd84e1861bf258ea37928d9845e6a86

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "last_affected": "1.0.2s"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.0"
                },
                {
                    "last_affected": "1.1.0k"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "last_affected": "1.1.1c"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

Other

OpenSSL_1_0_2u

OpenSSL_1_1_0l

OpenSSL_1_1_1w

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1547.json"