CVE-2019-1559

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).

• openssl openssl (>= 1.0.2 < 1.0.2r) • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 18.10 • debian debian linux 8.0 • debian debian linux 9.0 • netapp active iq unified manager (>= 7.3) • netapp active iq unified manager (>= 9.5) • netapp active iq unified manager • netapp altavault • netapp cloud backup • netapp clustered data ontap antivirus connector • netapp element software • netapp hci management node • netapp hyper converged infrastructure • netapp oncommand insight • netapp oncommand unified manager • netapp oncommand unified manager core package • netapp oncommand workflow automation • netapp ontap select deploy • netapp ontap select deploy administration utility • netapp santricity smi-s provider • netapp service processor • netapp smi-s provider • netapp snapcenter • netapp snapdrive • netapp snapprotect • netapp solidfire • netapp steelstore cloud integrated storage • netapp storage automation store • netapp storagegrid (>= 9.0.0 <= 9.0.4) • netapp storagegrid • netapp hci compute node • f5 big-ip access policy manager (>= 12.1.0 <= 12.1.5) • f5 big-ip access policy manager (>= 13.0.0 <= 13.1.3) • f5 big-ip access policy manager (>= 14.0.0 <= 14.1.2) • f5 big-ip access policy manager (>= 15.0.0 <= 15.1.0) • f5 big-ip advanced firewall manager (>= 12.1.0 <= 12.1.5) • f5 big-ip advanced firewall manager (>= 13.0.0 <= 13.1.3) • f5 big-ip advanced firewall manager (>= 14.0.0 <= 14.1.2) • f5 big-ip advanced firewall manager (>= 15.0.0 <= 15.1.0) • f5 big-ip analytics (>= 12.1.0 <= 12.1.5) • f5 big-ip analytics (>= 13.0.0 <= 13.1.3) • f5 big-ip analytics (>= 14.0.0 <= 14.1.2) • f5 big-ip analytics (>= 15.0.0 <= 15.1.0) • f5 big-ip application acceleration manager (>= 12.1.0 <= 12.1.5) • f5 big-ip application acceleration manager (>= 13.0.0 <= 13.1.3) • f5 big-ip application acceleration manager (>= 14.0.0 <= 14.1.2) • f5 big-ip application acceleration manager (>= 15.0.0 <= 15.1.0) • f5 big-ip application security manager (>= 12.1.0 <= 12.1.5) • f5 big-ip application security manager (>= 13.0.0 <= 13.1.3) • f5 big-ip application security manager (>= 14.0.0 <= 14.1.2) • f5 big-ip application security manager (>= 15.0.0 <= 15.1.0) • f5 big-ip domain name system (>= 12.1.0 <= 12.1.5) • f5 big-ip domain name system (>= 13.0.0 <= 13.1.3) • f5 big-ip domain name system (>= 14.0.0 <= 14.1.2) • f5 big-ip domain name system (>= 15.0.0 <= 15.1.0) • f5 big-ip edge gateway (>= 12.1.0 <= 12.1.5) • f5 big-ip edge gateway (>= 13.0.0 <= 13.1.3) • f5 big-ip edge gateway (>= 14.0.0 <= 14.1.2) … and 107 more