CVE catalog

CVE-2019-1547

openssl: CVE-2019-1547

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.16% · Oct 25, 2026

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopensslsid3.6.5-1fixed
Debianopensslforky3.6.5-1fixed
Debianopenssltrixie3.5.7-1~deb13u2fixed
Debianopenssltrixie-security3.5.7-1~deb13u3fixed
Debianopensslbookworm3.0.20-1~deb12u2fixed
Debianopensslbookworm-security3.0.22-1~deb12u2fixed
Alpineopenssl3.101.1.1d-r0fixed
Alpineopenssl3.111.1.1d-r1fixed
Alpineopenssl3.121.1.1d-r1fixed
Alpineopenssl3.131.1.1d-r1fixed
Alpineopenssl3.141.1.1d-r1fixed
Alpineopenssl3.151.1.1d-r1fixed
Alpineopenssl3.161.1.1d-r1fixed
Alpineopenssl3.171.1.1d-r1fixed
Alpineopenssl3.181.1.1d-r1fixed
Alpineopenssl3.191.1.1d-r1fixed
Alpineopenssl3.201.1.1d-r1fixed
Alpineopenssl3.211.1.1d-r1fixed
Alpineopenssl3.221.1.1d-r1fixed
Alpineopenssl3.231.1.1d-r1fixed
Alpineopenssl3.241.1.1d-r1fixed
Alpineopenssl3.71.0.2t-r0fixed
Alpineopenssl3.81.0.2t-r0fixed
Alpineopenssl3.91.1.1d-r0fixed
Alpineopenssl33.151.1.1d-r1fixed
Alpineopenssl33.161.1.1d-r1fixed
Ubuntuopensslpro1.0.1e-3ubuntu1vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu1vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu2vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu3vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu4vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu1vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.1vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.2vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.3vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.4vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.5vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.7vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.8vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.11vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.12vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.15vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.16vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.17vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.18vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.19vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.20vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.21vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.22vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.23vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.24vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.25vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.26vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.27vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.27+esm1fixed
Ubuntuopenssl16.041.0.2d-0ubuntu1vulnerable
Ubuntuopenssl16.041.0.2d-0ubuntu2vulnerable
Ubuntuopenssl16.041.0.2e-1ubuntu1vulnerable
Ubuntuopenssl16.041.0.2f-2ubuntu1vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu2vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu3vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.1vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.2vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.4vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.5vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.6vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.8vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.9vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.10vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.11vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.12vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.13vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.14vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.15vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.16vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.17fixed
Ubuntuopenssl1.018.041.0.2n-1ubuntu2vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu3vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu4vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.1vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.2vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.3vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.4fixed
Ubuntuopenssl16.041.0.2d-0ubuntu1vulnerable
Ubuntuopenssl16.041.0.2d-0ubuntu2vulnerable
Ubuntuopenssl16.041.0.2e-1ubuntu1vulnerable
Ubuntuopenssl16.041.0.2f-2ubuntu1vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu2vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu3vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.1vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.2vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.4vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.5vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.6vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.8vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.9vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.10vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.11vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.12vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.13vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.14vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.15vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.16fixed
Ubuntuopenssl18.041.0.2g-1ubuntu13vulnerable
Ubuntuopenssl18.041.0.2g-1ubuntu14vulnerable
Ubuntuopenssl18.041.0.2n-1ubuntu1vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu1vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu2vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu3vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu4vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu4.1vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu4.3vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.1vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.2vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.3vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.4vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.5vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.6fixed
Ubuntuopensslpro1.0.1e-3ubuntu1vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu1vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu2vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu3vulnerable
Ubuntuopensslpro1.0.1e-4ubuntu4vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu1vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.1vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.2vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.3vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.4vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.5vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.7vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.8vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.11vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.12vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.15vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.16vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.17vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.18vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.19vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.20vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.21vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.22vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.23vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.24vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.25vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.26vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.27vulnerable
Ubuntuopensslpro1.0.1f-1ubuntu2.27+esm1fixed
Ubuntuopenssl16.041.0.2d-0ubuntu1vulnerable
Ubuntuopenssl16.041.0.2d-0ubuntu2vulnerable
Ubuntuopenssl16.041.0.2e-1ubuntu1vulnerable
Ubuntuopenssl16.041.0.2f-2ubuntu1vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu2vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu3vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.1vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.2vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.4vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.5vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.6vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.8vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.9vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.10vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.11vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.12vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.13vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.14vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.15vulnerable
Ubuntuopenssl16.041.0.2g-1ubuntu4.16fixed
Ubuntuopenssl18.041.0.2g-1ubuntu13vulnerable
Ubuntuopenssl18.041.0.2g-1ubuntu14vulnerable
Ubuntuopenssl18.041.0.2n-1ubuntu1vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu1vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu2vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu3vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu4vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu4.1vulnerable
Ubuntuopenssl18.041.1.0g-2ubuntu4.3vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.1vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.2vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.3vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.4vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.5vulnerable
Ubuntuopenssl18.041.1.1-1ubuntu2.1~18.04.6fixed
Ubuntuopenssl1.018.041.0.2n-1ubuntu2vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu3vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu4vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.1vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.2vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.3vulnerable
Ubuntuopenssl1.018.041.0.2n-1ubuntu5.4fixed
Suseopenssl-1_0_0linux enterprise desktop 12 sp41.0.2p-3.11.1fixed
Suseopenssl-1_0_0linux enterprise software development kit 12 sp41.0.2p-3.11.1fixed
Suseopenssl-1_0_0linux enterprise server 12 sp41.0.2p-3.11.1fixed
Suseopenssl-1_0_0linux enterprise server for sap applications 12 sp41.0.2p-3.11.1fixed
Opensuseopenssl-1_1leap 15.11.1.0i-lp151.8.3.1fixed
Opensuseopenssl-1_0_0leap 15.11.0.2p-lp151.5.10.1fixed
Suseopenssllinux enterprise point of sale 11 sp30.9.8j-0.106.25.1fixed
Suseopenssllinux enterprise server 11 sp4-ltss0.9.8j-0.106.25.1fixed
Opensuseopenssl-1_1leap 15.01.1.0i-lp150.3.25.1fixed
Suseopenssllinux enterprise server for sap applications 12 sp11.0.1i-54.29.1fixed
Suseopenssllinux enterprise server 12 sp1-ltss1.0.1i-54.29.1fixed
Suseopenssl-1_1linux enterprise desktop 12 sp41.1.1d-2.20.1fixed
Suseopenssl-1_1linux enterprise software development kit 12 sp41.1.1d-2.20.1fixed
Suseopenssl-1_1linux enterprise software development kit 12 sp51.1.1d-2.20.1fixed
Suseopenssl-1_1linux enterprise server 12 sp41.1.1d-2.20.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 12 sp41.1.1d-2.20.1fixed
Suseopenssl-1_1linux enterprise server 12 sp51.1.1d-2.20.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 12 sp51.1.1d-2.20.1fixed
Suseopenssl-1_0_0linux enterprise module for legacy 151.0.2p-3.22.1fixed
Suseopenssl-1_0_0linux enterprise module for legacy 15 sp11.0.2p-3.22.1fixed
Suseopenssl-1_0_0enterprise storage 61.0.2p-3.22.1fixed
Susecompat-openssl098linux enterprise desktop 12 sp40.9.8j-106.15.1fixed
Susecompat-openssl098linux enterprise module for legacy 120.9.8j-106.15.1fixed
Susecompat-openssl098linux enterprise server for sap applications 12 sp10.9.8j-106.15.1fixed
Susecompat-openssl098linux enterprise server for sap applications 12 sp20.9.8j-106.15.1fixed
Susecompat-openssl098linux enterprise server for sap applications 12 sp30.9.8j-106.15.1fixed
Susecompat-openssl098linux enterprise server for sap applications 12 sp40.9.8j-106.15.1fixed
Suseopenssl1linux enterprise server 11-security1.0.1g-0.58.21.1fixed
Suseopensslhpe helion openstack 81.0.2j-60.55.1fixed
Suseopensslopenstack cloud 71.0.2j-60.55.1fixed
Suseopensslopenstack cloud 81.0.2j-60.55.1fixed
Suseopensslopenstack cloud crowbar 81.0.2j-60.55.1fixed
Suseopenssllinux enterprise server for sap applications 12 sp21.0.2j-60.55.1fixed
Suseopenssllinux enterprise server for sap applications 12 sp31.0.2j-60.55.1fixed
Suseopenssllinux enterprise server 12 sp2-ltss1.0.2j-60.55.1fixed
Suseopenssllinux enterprise server 12 sp2-bcl1.0.2j-60.55.1fixed
Suseopenssllinux enterprise server 12 sp3-ltss1.0.2j-60.55.1fixed
Suseopenssllinux enterprise server 12 sp3-bcl1.0.2j-60.55.1fixed
Suseopensslenterprise storage 41.0.2j-60.55.1fixed
Suseopensslenterprise storage 51.0.2j-60.55.1fixed
Suseopenssl-1_1linux enterprise module for basesystem 15 sp11.1.0i-14.3.1fixed
Suseopenssl-1_1linux enterprise module for basesystem 151.1.0i-4.24.1fixed
Opensuseopenssl-1_0_0leap 15.01.0.2p-lp150.2.19.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopensslsourcesid1.1.1d-1not yet assignedNot reportedNot reported
Debianopensslsourceforky1.1.1d-1not yet assignedNot reportedNot reported
Debianopensslsourcetrixie1.1.1d-1not yet assignedNot reportedNot reported
Debianopensslsourcebookworm1.1.1d-1not yet assignedNot reportedNot reported
Alpineopensslapk3.101.1.1d-r0Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.111.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.121.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.131.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.141.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.151.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.161.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.171.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.181.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.191.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.201.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.211.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.221.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.231.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.241.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.71.0.2t-r0Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.81.0.2t-r0Not reportedALPINE-CVE-2019-1547Not reported
Alpineopensslapk3.91.1.1d-r0Not reportedALPINE-CVE-2019-1547Not reported
Alpineopenssl3apk3.151.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Alpineopenssl3apk3.161.1.1d-r1Not reportedALPINE-CVE-2019-1547Not reported
Ubuntuopenssldebpro1.0.1f-1ubuntu2.27+esm1Not reportedUSN-4376-2Not reported
Ubuntuopenssldeb16.041.0.2g-1ubuntu4.17Not reportedUSN-4504-1Not reported
Ubuntuopenssl1.0deb18.041.0.2n-1ubuntu5.4Not reportedUSN-4504-1Not reported
Ubuntuopenssldeb16.041.0.2g-1ubuntu4.16Not reportedUSN-4376-1Not reported
Ubuntuopenssldeb18.041.1.1-1ubuntu2.1~18.04.6Not reportedUSN-4376-1Not reported
Ubuntuopenssldebpro1.0.1f-1ubuntu2.27+esm1Not reportedUBUNTU-CVE-2019-1547Not reported
Ubuntuopenssldeb16.041.0.2g-1ubuntu4.16Not reportedUBUNTU-CVE-2019-1547Not reported
Ubuntuopenssldeb18.041.1.1-1ubuntu2.1~18.04.6Not reportedUBUNTU-CVE-2019-1547Not reported
Ubuntuopenssl1.0deb18.041.0.2n-1ubuntu5.4Not reportedUBUNTU-CVE-2019-1547Not reported
Suseopenssl-1_0_0rpmlinux enterprise desktop 12 sp41.0.2p-3.11.1Not reportedSUSE-SU-2019:2504-1Not reported
Suseopenssl-1_0_0rpmlinux enterprise software development kit 12 sp41.0.2p-3.11.1Not reportedSUSE-SU-2019:2504-1Not reported
Suseopenssl-1_0_0rpmlinux enterprise server 12 sp41.0.2p-3.11.1Not reportedSUSE-SU-2019:2504-1Not reported
Suseopenssl-1_0_0rpmlinux enterprise server for sap applications 12 sp41.0.2p-3.11.1Not reportedSUSE-SU-2019:2504-1Not reported
Opensuseopenssl-1_1rpmleap 15.11.1.0i-lp151.8.3.1Not reportedOPENSUSE-SU-2019:2158-1Not reported
Opensuseopenssl-1_0_0rpmleap 15.11.0.2p-lp151.5.10.1Not reportedOPENSUSE-SU-2019:2269-1Not reported
Suseopensslrpmlinux enterprise point of sale 11 sp30.9.8j-0.106.25.1Not reportedSUSE-SU-2019:14174-1Not reported
Suseopensslrpmlinux enterprise server 11 sp4-ltss0.9.8j-0.106.25.1Not reportedSUSE-SU-2019:14174-1Not reported
Opensuseopenssl-1_1rpmleap 15.01.1.0i-lp150.3.25.1Not reportedOPENSUSE-SU-2019:2189-1Not reported
Suseopensslrpmlinux enterprise server for sap applications 12 sp11.0.1i-54.29.1Not reportedSUSE-SU-2019:2397-1Not reported
Suseopensslrpmlinux enterprise server 12 sp1-ltss1.0.1i-54.29.1Not reportedSUSE-SU-2019:2397-1Not reported
Suseopenssl-1_1rpmlinux enterprise desktop 12 sp41.1.1d-2.20.1Not reportedSUSE-SU-2020:0099-1Not reported
Suseopenssl-1_1rpmlinux enterprise software development kit 12 sp41.1.1d-2.20.1Not reportedSUSE-SU-2020:0099-1Not reported
Suseopenssl-1_1rpmlinux enterprise software development kit 12 sp51.1.1d-2.20.1Not reportedSUSE-SU-2020:0099-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 12 sp41.1.1d-2.20.1Not reportedSUSE-SU-2020:0099-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 12 sp41.1.1d-2.20.1Not reportedSUSE-SU-2020:0099-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 12 sp51.1.1d-2.20.1Not reportedSUSE-SU-2020:0099-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 12 sp51.1.1d-2.20.1Not reportedSUSE-SU-2020:0099-1Not reported
Suseopenssl-1_0_0rpmlinux enterprise module for legacy 151.0.2p-3.22.1Not reportedSUSE-SU-2019:2561-1Not reported
Suseopenssl-1_0_0rpmlinux enterprise module for legacy 15 sp11.0.2p-3.22.1Not reportedSUSE-SU-2019:2561-1Not reported
Suseopenssl-1_0_0rpmenterprise storage 61.0.2p-3.22.1Not reportedSUSE-SU-2019:2561-1Not reported
Susecompat-openssl098rpmlinux enterprise desktop 12 sp40.9.8j-106.15.1Not reportedSUSE-SU-2019:2558-1Not reported
Susecompat-openssl098rpmlinux enterprise module for legacy 120.9.8j-106.15.1Not reportedSUSE-SU-2019:2558-1Not reported
Susecompat-openssl098rpmlinux enterprise server for sap applications 12 sp10.9.8j-106.15.1Not reportedSUSE-SU-2019:2558-1Not reported
Susecompat-openssl098rpmlinux enterprise server for sap applications 12 sp20.9.8j-106.15.1Not reportedSUSE-SU-2019:2558-1Not reported
Susecompat-openssl098rpmlinux enterprise server for sap applications 12 sp30.9.8j-106.15.1Not reportedSUSE-SU-2019:2558-1Not reported
Susecompat-openssl098rpmlinux enterprise server for sap applications 12 sp40.9.8j-106.15.1Not reportedSUSE-SU-2019:2558-1Not reported
Suseopenssl1rpmlinux enterprise server 11-security1.0.1g-0.58.21.1Not reportedSUSE-SU-2019:14171-1Not reported
Suseopensslrpmhpe helion openstack 81.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmopenstack cloud 71.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmopenstack cloud 81.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmopenstack cloud crowbar 81.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmlinux enterprise server for sap applications 12 sp21.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmlinux enterprise server for sap applications 12 sp31.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmlinux enterprise server 12 sp2-ltss1.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmlinux enterprise server 12 sp2-bcl1.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmlinux enterprise server 12 sp3-ltss1.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmlinux enterprise server 12 sp3-bcl1.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmenterprise storage 41.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopensslrpmenterprise storage 51.0.2j-60.55.1Not reportedSUSE-SU-2019:2413-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for basesystem 15 sp11.1.0i-14.3.1Not reportedSUSE-SU-2019:2403-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for basesystem 151.1.0i-4.24.1Not reportedSUSE-SU-2019:2410-1Not reported
Opensuseopenssl-1_0_0rpmleap 15.01.0.2p-lp150.2.19.1Not reportedOPENSUSE-SU-2019:2268-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libssl3]Unknown

    Source package: [openssl]

    Details (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

  • [libssl-dev]Unknown

    Source package: [openssl]

    Details (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

  • [libssl-doc]Unknown

    Source package: [openssl]

    Details (6)
    • 3.0.20-1~deb12u2 · all · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · all · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · all · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

  • [openssl]Unknown
    Details (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

[Debian 13 (Trixie)]

  • [libssl3t64]Unknown

    Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

  • [libssl-dev]Unknown

    Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

  • [libssl-doc]Unknown

    Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · all · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · all · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · all · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u3 · all · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

  • [openssl]Unknown
    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

  • Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

  • Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 1.1.1d-1

      dsa · openssl · debian · 13

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]