CVE-2019-1559
- Source
- https://cve.org/CVERecord?id=CVE-2019-1559
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1559.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-1559
- Downstream
- Related
- Published
- 2019-02-27T23:29:00.277Z
- Modified
- 2026-07-17T20:58:06.691580721Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
If an application encounters a fatal protocol error and then calls SSLshutdown() twice (once to send a closenotify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).
- Database specific
{ "unresolved_ranges": [ { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_access_policy_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_advanced_firewall_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_analytics", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_application_acceleration_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_application_security_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_domain_name_system", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_edge_gateway", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_fraud_protection_service", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_global_traffic_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_link_controller", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_local_traffic_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_policy_enforcement_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0" }, { "last_affected": "12.1.5" }, { "introduced": "13.0.0" }, { "last_affected": "13.1.3" }, { "introduced": "14.0.0" }, { "last_affected": "14.1.2" }, { "introduced": "15.0.0" }, { "last_affected": "15.1.0" } ], "vendor_product": "f5:big-ip_webaccelerator", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "6.0.0" }, { "last_affected": "6.1.0" }, { "introduced": "7.0.0" }, { "last_affected": "7.1.0" } ], "vendor_product": "f5:big-iq_centralized_management", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "5.0.0" }, { "last_affected": "5.1.0" } ], "vendor_product": "f5:traffix_signaling_delivery_controller", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "5.6.0" }, { "last_affected": "5.6.4" } ], "vendor_product": "mcafee:agent", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "4.0.0" }, { "fixed": "6.0.0" } ], "vendor_product": "mcafee:data_exchange_layer", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "2.0.0" }, { "fixed": "3.0.0" } ], "vendor_product": "mcafee:threat_intelligence_exchange_server", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:mcafee:threat_intelligence_exchange_server:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "7.0.0" }, { "fixed": "9.0.0" } ], "vendor_product": "mcafee:web_gateway", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "7.3" }, { "introduced": "9.5" } ], "vendor_product": "netapp:active_iq_unified_manager", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*", "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*" ] }, { "extracted_events": [ { "introduced": "9.0.0" }, { "last_affected": "9.0.4" } ], "vendor_product": "netapp:storagegrid", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "6.0.0" }, { "last_affected": "6.8.1" }, { "introduced": "6.9.0" }, { "fixed": "6.17.0" }, { "introduced": "8.0.0" }, { "last_affected": "8.8.1" }, { "introduced": "8.9.0" }, { "fixed": "8.15.1" } ], "vendor_product": "nodejs:node.js", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*" ] }, { "extracted_events": [ { "last_affected": "4.0.8" }, { "introduced": "8.0.0" }, { "last_affected": "8.0.14" } ], "vendor_product": "oracle:mysql_enterprise_monitor", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "last_affected": "8.0.16" } ], "vendor_product": "oracle:mysql_workbench", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "7.1.0" }, { "fixed": "7.1.15" }, { "introduced": "8.0.0" }, { "fixed": "8.0.20" }, { "introduced": "8.1.0" }, { "fixed": "8.1.8" }, { "introduced": "9.0.0" }, { "fixed": "9.0.2" } ], "vendor_product": "paloaltonetworks:pan-os", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "last_affected": "8.2.3" } ], "vendor_product": "tenable:nessus", "source": "CPE_RANGE", "cpes": [ "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "16.04" }, { "last_affected": "16.04" }, { "introduced": "18.04" }, { "last_affected": "18.04" }, { "introduced": "18.10" }, { "last_affected": "18.10" } ], "vendor_product": "canonical:ubuntu_linux", "source": "CPE_STRING", "cpes": [ "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "8.0" }, { "last_affected": "8.0" }, { "introduced": "9.0" }, { "last_affected": "9.0" } ], "vendor_product": "debian:debian_linux", "source": "CPE_STRING", "cpes": [ "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "4.4.0" }, { "last_affected": "4.4.0" } ], "vendor_product": "f5:traffix_signaling_delivery_controller", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "29" }, { "last_affected": "29" }, { "introduced": "30" }, { "last_affected": "30" }, { "introduced": "31" }, { "last_affected": "31" } ], "vendor_product": "fedoraproject:fedora", "source": "CPE_STRING", "cpes": [ "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "15.0" }, { "last_affected": "15.0" }, { "introduced": "15.1" }, { "last_affected": "15.1" }, { "introduced": "42.3" }, { "last_affected": "42.3" } ], "vendor_product": "opensuse:leap", "source": "CPE_STRING", "cpes": [ "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "11.1.2.4.0" }, { "last_affected": "11.1.2.4.0" } ], "vendor_product": "oracle:api_gateway", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "11.1.1.9.0" }, { "last_affected": "11.1.1.9.0" }, { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "vendor_product": "oracle:business_intelligence", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*", "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*", "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*" ] }, { "extracted_events": [ { "introduced": "8.0.0" }, { "last_affected": "8.0.0" }, { "introduced": "8.1" }, { "last_affected": "8.1" }, { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.3" }, { "last_affected": "8.3" }, { "introduced": "8.4" }, { "last_affected": "8.4" } ], "vendor_product": "oracle:communications_diameter_signaling_router", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "10.4.0.2" }, { "last_affected": "10.4.0.2" } ], "vendor_product": "oracle:communications_performance_intelligence_center", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.2:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "7.4" }, { "last_affected": "7.4" }, { "introduced": "8.0.0" }, { "last_affected": "8.0.0" }, { "introduced": "8.1.0" }, { "last_affected": "8.1.0" }, { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.3" }, { "last_affected": "8.3" } ], "vendor_product": "oracle:communications_session_border_controller", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:communications_session_border_controller:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_border_controller:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_border_controller:8.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_border_controller:8.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_border_controller:8.3:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "7.4" }, { "last_affected": "7.4" }, { "introduced": "8.0" }, { "last_affected": "8.0" }, { "introduced": "8.1" }, { "last_affected": "8.1" }, { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.3" }, { "last_affected": "8.3" } ], "vendor_product": "oracle:communications_session_router", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:communications_session_router:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_router:8.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_router:8.1:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_router:8.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_session_router:8.3:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "7.3.5" }, { "last_affected": "7.3.5" }, { "introduced": "8.2.5" }, { "last_affected": "8.2.5" } ], "vendor_product": "oracle:communications_unified_session_manager", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:communications_unified_session_manager:7.3.5:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "7.7.0" }, { "last_affected": "7.7.0" } ], "vendor_product": "oracle:endeca_server", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:endeca_server:7.7.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.1.0.5.0" }, { "last_affected": "12.1.0.5.0" }, { "introduced": "13.2.0.0.0" }, { "last_affected": "13.2.0.0.0" }, { "introduced": "13.3.0.0.0" }, { "last_affected": "13.3.0.0.0" } ], "vendor_product": "oracle:enterprise_manager_base_platform", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.3.3" }, { "last_affected": "12.3.3" }, { "introduced": "12.4.0" }, { "last_affected": "12.4.0" } ], "vendor_product": "oracle:enterprise_manager_ops_center", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "9.2" }, { "last_affected": "9.2" } ], "vendor_product": "oracle:jd_edwards_enterpriseone_tools", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "a9.3" }, { "last_affected": "a9.3" }, { "introduced": "a9.3.1" }, { "last_affected": "a9.3.1" }, { "introduced": "a9.4" }, { "last_affected": "a9.4" } ], "vendor_product": "oracle:jd_edwards_world_security", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:jd_edwards_world_security:a9.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:jd_edwards_world_security:a9.3:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "8.55" }, { "last_affected": "8.55" }, { "introduced": "8.56" }, { "last_affected": "8.56" }, { "introduced": "8.57" }, { "last_affected": "8.57" } ], "vendor_product": "oracle:peoplesoft_enterprise_peopletools", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "5.4" }, { "last_affected": "5.4" } ], "vendor_product": "oracle:secure_global_desktop", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:secure_global_desktop:5.4:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "19.2" }, { "last_affected": "19.2" } ], "vendor_product": "oracle:services_tools_bundle", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:oracle:services_tools_bundle:19.2:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "7.0" }, { "last_affected": "7.0" } ], "vendor_product": "redhat:enterprise_linux_desktop", "source": "CPE_STRING", "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "7.0" }, { "last_affected": "7.0" } ], "vendor_product": "redhat:enterprise_linux_server", "source": "CPE_STRING", "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "6.0" }, { "last_affected": "6.0" }, { "introduced": "7.0" }, { "last_affected": "7.0" } ], "vendor_product": "redhat:enterprise_linux_workstation", "source": "CPE_STRING", "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "5.0.0" }, { "last_affected": "5.0.0" } ], "vendor_product": "redhat:jboss_enterprise_web_server", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:redhat:jboss_enterprise_web_server:5.0.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "4.0" }, { "last_affected": "4.0" } ], "vendor_product": "redhat:virtualization", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "4.0" }, { "last_affected": "4.0" } ], "vendor_product": "redhat:virtualization_host", "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*" ] } ] }- References
-
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/
- https://support.f5.com/csp/article/K18549143?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/4376-2/
- http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html
- http://www.securityfocus.com/bid/107174
- https://access.redhat.com/errata/RHSA-2019:2304
- https://access.redhat.com/errata/RHSA-2019:2437
- https://access.redhat.com/errata/RHSA-2019:2439
- https://access.redhat.com/errata/RHSA-2019:2471
- https://access.redhat.com/errata/RHSA-2019:3929
- https://access.redhat.com/errata/RHSA-2019:3931
- https://kc.mcafee.com/corporate/index?page=content&id=SB10282
- https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html
- https://security.gentoo.org/glsa/201903-10
- https://security.netapp.com/advisory/ntap-20190301-0002/
- https://security.netapp.com/advisory/ntap-20190423-0002/
- https://support.f5.com/csp/article/K18549143
- https://usn.ubuntu.com/3899-1/
- https://www.debian.org/security/2019/dsa-4400
- https://www.openssl.org/news/secadv/20190226.txt
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.tenable.com/security/tns-2019-03
- https://security.netapp.com/advisory/ntap-20190301-0001/
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- https://www.tenable.com/security/tns-2019-02
Affected packages
Git / github.com/mysql/mysql-server
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mysql/mysql-server
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affectedLast affectedIntroducedLast affected
- Database specific
{ "extracted_events": [ { "introduced": "5.6.0" }, { "last_affected": "5.6.43" }, { "introduced": "5.7.0" }, { "last_affected": "5.7.25" }, { "introduced": "8.0.0" }, { "last_affected": "8.0.15" } ], "cpe": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "source": "CPE_RANGE" }
Git / github.com/openssl/openssl
Database specific
vanir_signatures
[
{
"target": {
"file": "crypto/opensslv.h"
},
"id": "CVE-2019-1559-e051451f",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
"signature_version": "v1",
"digest": {
"line_hashes": [
"251633914150035957322733061977107206211",
"338514574181828579838011565939158652696",
"76638288692106140328510055542557597351",
"142922657400765574308962710386922248045",
"71649992455794854055653842592139575350",
"65527166711110472566013424527579064967",
"253196866009476977787139000804413898733",
"172177136897997206866313011107384691461"
],
"threshold": 0.9
}
}
]
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1559.json"
vanir_signatures_modified
"2026-07-11T18:14:59Z"